Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b83e7417-95bb-3b49-81e6-a7511e31f37e.roa
File: b83e7417-95bb-3b49-81e6-a7511e31f37e.roa (raw, json)
Hash identifier: SNKON0SI54VqV3+DXo+4ffm9oNSPOzGSm0Z38Unz2og=
Subject key identifier: 55:29:02:19:92:6B:3A:BA:53:89:F3:00:61:A9:E1:79:18:6F:75:A3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858497AD9C9B79B033EB225F34480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b83e7417-95bb-3b49-81e6-a7511e31f37e.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 397205
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:c9:b7:9b:03:3e:b2:25:f3:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=c30d2adf-a481-4abf-99b1-477bcacc96f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:e3:70:14:d9:7f:90:33:31:7e:fc:5c:75:
e1:fa:8c:f7:6c:66:da:01:15:22:f4:63:41:c8:7e:
9e:5a:11:34:c6:ff:1d:14:81:28:00:9d:71:24:e4:
39:2f:fe:0b:28:3f:25:37:8e:9b:8d:25:71:9f:b6:
da:21:8e:22:04:b5:ab:30:a6:22:b8:af:42:93:d5:
c4:32:2b:80:09:4b:a0:34:2f:f6:bc:c6:89:a1:24:
b5:64:6e:03:5c:bb:69:5d:dc:15:bb:e2:83:cf:e5:
6a:d5:58:c9:8f:6a:70:f7:db:ef:81:3e:6a:7d:23:
ed:43:11:32:03:94:79:10:c8:d6:d2:e5:83:38:c5:
d7:dc:7f:24:af:cf:f5:d7:10:4e:52:53:6a:41:57:
5b:e6:e1:8d:72:70:d1:61:b0:99:d3:c4:b4:29:ba:
94:94:d6:d7:81:d5:aa:86:83:a7:5a:89:b9:98:97:
53:41:0f:78:06:d3:fd:b4:78:5f:0d:51:d6:a9:8b:
7d:64:4a:a8:28:63:d5:92:c7:e2:d4:63:2a:d9:1d:
58:4f:0b:f3:bb:cd:a3:72:3b:44:ce:f9:3d:df:85:
e8:17:f5:42:a7:9c:8d:e7:4c:da:96:21:3a:6c:9e:
e5:b6:d6:32:be:c9:02:8e:17:c6:34:80:d1:f3:c6:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:02:19:92:6B:3A:BA:53:89:F3:00:61:A9:E1:79:18:6F:75:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b83e7417-95bb-3b49-81e6-a7511e31f37e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:97:cf:cd:95:42:1c:8c:af:fe:de:07:6b:b6:87:6c:18:e1:
f1:95:f1:08:90:bd:29:b5:11:af:0a:46:4e:cb:2f:bf:d6:95:
c3:23:fc:ab:26:85:5d:db:75:f8:8a:a7:aa:be:71:20:32:a3:
d7:ad:a1:36:0b:56:d8:f1:b9:83:8e:ba:24:ca:52:e4:a9:4f:
e4:fa:15:ae:62:82:ef:4f:bb:63:ec:3a:a9:93:a7:28:81:8e:
0b:12:71:d5:44:69:06:4a:f0:c5:d0:b0:40:0e:dc:26:ec:87:
91:8b:04:fc:55:22:e7:6d:0f:1a:06:6b:16:58:f3:d9:ba:fa:
73:16:4c:0a:02:09:cd:b4:36:63:da:9a:73:2a:91:43:0c:ab:
59:12:64:06:47:4f:03:a7:94:17:1a:5a:b2:7d:23:35:75:c1:
4f:33:64:41:99:75:76:ee:e3:cc:f3:be:a7:ec:fe:c3:55:ad:
ab:12:40:ad:9c:28:c7:ad:a8:71:9b:be:74:d8:18:3d:c4:59:
ea:a7:5d:f6:0d:8b:1f:87:92:ab:07:42:80:63:20:e9:c5:9f:
bf:46:4d:6c:35:1c:65:8b:e8:3f:d4:d3:46:53:b9:4e:22:5a:
0a:09:15:51:a5:0d:d3:ce:0e:cb:fd:38:f1:87:21:e8:b8:de:
c0:92:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:18:50 2025 by rpki-client