Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cf38dbc-8b69-38aa-8bfb-b3b1838ae433.roa
File: 8cf38dbc-8b69-38aa-8bfb-b3b1838ae433.roa (raw, json)
Hash identifier: YkcvMjMZnahamZBFmyO3Ka/JLb+54pHKSNU0ZBPsluM=
Subject key identifier: 86:83:4A:97:A1:34:92:BD:0B:4C:34:89:A7:39:1A:D6:AF:15:3D:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858496CE48218DB2F77E97F5BC100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cf38dbc-8b69-38aa-8bfb-b3b1838ae433.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 36627
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:82:18:db:2f:77:e9:7f:5b:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=0a071cc0-ed3f-45e5-b21c-c72f484a9a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:8f:a3:b2:52:0d:eb:f9:d6:97:d6:29:dc:
fc:95:1c:ac:48:7c:59:fa:8b:3f:fa:95:53:69:f1:
5c:ed:92:bd:2d:51:4c:c6:a9:a0:a1:f3:c4:e7:f7:
a8:44:0b:c5:4c:00:16:fc:84:1e:c2:96:df:a6:c6:
9d:f5:03:02:cf:7c:77:2a:74:11:d7:c3:93:b1:6f:
8c:c1:60:a0:00:e6:fc:6c:59:eb:a3:df:49:88:df:
16:71:c2:43:45:3f:44:9e:db:da:fc:aa:9f:4e:2a:
f3:7a:5a:8f:36:b6:f9:6f:81:55:68:ae:ae:06:9c:
f5:91:3b:57:43:df:01:18:b2:98:e0:3d:f4:f9:8a:
10:bd:fb:88:85:5a:6f:b4:24:8e:f0:84:04:bc:0e:
27:54:be:90:1e:35:4f:91:ba:ee:b2:a4:54:44:fd:
0a:ba:96:30:be:9c:55:91:8b:e6:65:52:b3:8a:1c:
1e:38:5a:18:9f:df:aa:e0:bf:95:30:03:4a:90:f8:
c8:90:52:3e:7c:96:a8:9f:cd:5c:ad:c8:c5:55:0c:
8e:e5:bf:8c:ef:20:37:4c:85:1e:d0:f5:d3:bd:a5:
4c:ab:b9:d3:e5:48:17:e7:df:cf:24:4d:f1:bc:cf:
2b:00:6f:10:c5:89:3a:d0:a3:fd:1a:d5:16:b1:ed:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:4A:97:A1:34:92:BD:0B:4C:34:89:A7:39:1A:D6:AF:15:3D:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cf38dbc-8b69-38aa-8bfb-b3b1838ae433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:99:69:51:67:ba:29:f6:88:8b:fa:01:5d:7c:77:1b:87:95:
28:9c:fa:c8:d7:95:27:6f:8c:56:2f:68:ed:bc:35:e0:e2:0e:
82:fb:15:16:a7:64:a5:42:6f:c0:b9:14:b6:60:d5:67:b8:0a:
30:f7:a4:4d:44:81:1f:bb:73:03:be:57:ec:bd:f2:31:ce:41:
48:c3:37:e5:07:2a:d3:cd:bc:49:65:d1:66:d8:02:00:69:7c:
ba:56:fa:7b:8e:7a:fe:38:c8:0b:d3:70:b4:40:29:73:36:4c:
5b:82:af:20:06:2e:9c:7b:3e:40:9d:d5:8b:87:75:d7:03:d7:
d8:3e:2f:16:8d:1f:b0:e6:3c:35:06:b3:af:48:61:d3:ce:75:
c8:70:42:d8:60:f2:af:e4:cc:f1:b9:2a:94:9e:86:1d:67:2d:
c3:a8:7d:3d:eb:01:ce:aa:23:88:72:6c:0c:20:22:96:28:43:
ff:2f:1c:99:23:a6:16:42:bf:3b:ce:9b:80:42:a7:6b:8d:cd:
0b:fa:0a:56:83:11:01:35:23:6b:19:db:9a:b6:92:85:4f:49:
f4:7e:6b:be:ea:98:1c:80:36:cf:ac:d9:8c:ba:bd:cd:de:7b:
58:93:a0:be:b9:f9:7c:5a:fc:64:76:15:16:93:28:0b:79:e0:
6f:91:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:51:21 2025 by rpki-client