Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa
File: b9001f23-1985-332d-89db-692bdc60fc6a.roa (raw, json)
Hash identifier: QcWD2W7yalCSoUmK6GdAQlJcGL6ij0ZGkHG7roU+J9s=
Subject key identifier: 66:97:74:39:A1:5E:51:D1:14:F9:52:66:6C:C3:44:93:8B:52:C4:EE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9E76C5C916097C753100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 19836
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9e:76:c5:c9:16:09:7c:75:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=6c83b453-c527-4214-8e03-4aaab6a77344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:4f:97:62:48:54:bb:aa:9f:83:08:a6:a4:
ba:a4:19:be:da:f4:b1:43:7e:86:54:c4:63:87:1f:
4e:48:6c:c0:6b:93:08:ee:e6:f0:43:78:45:6c:89:
ee:55:ac:4c:2f:4d:5b:24:d2:32:fa:96:49:a4:b3:
bd:ea:a0:fd:f8:9b:25:19:0c:eb:1b:26:e0:08:42:
f5:48:c4:ef:4e:59:f7:5d:68:6a:6d:44:72:63:4b:
71:7a:3e:58:23:53:13:9b:08:ee:6f:6c:4c:7d:ff:
02:30:5b:a3:5b:e3:16:ca:92:ed:67:af:60:1b:06:
80:15:2d:19:75:36:db:76:04:0d:90:85:07:38:c7:
b6:84:05:9f:53:6d:2f:20:4d:8c:dd:0a:bb:95:5e:
4c:d7:39:36:a5:f3:16:28:2e:b1:19:d4:f6:46:55:
a6:30:e7:c8:30:78:e9:b7:80:a6:37:7d:84:ed:3b:
9d:a0:95:d7:3a:44:f0:7f:cc:5f:cb:91:6a:8f:1a:
25:3f:a2:b8:9a:2b:a3:1a:4e:01:de:8b:9b:e7:47:
6d:74:4c:76:47:9a:56:2c:0a:7a:1f:c3:c9:5a:12:
45:ee:00:e6:df:c9:46:f1:e4:8d:4a:db:ff:f6:a5:
11:38:a9:7a:45:ed:8c:09:9d:d6:7c:24:15:c4:a7:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:74:39:A1:5E:51:D1:14:F9:52:66:6C:C3:44:93:8B:52:C4:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:fe:05:8a:37:8d:fc:2d:34:40:be:82:a4:35:7e:62:07:60:
d8:7d:24:2e:01:c2:c1:14:9e:a4:06:02:10:65:ec:9f:20:f1:
b6:68:ac:f2:86:ef:26:cb:db:24:cf:94:e0:d3:ce:c0:bc:32:
77:e8:e9:27:7e:54:89:41:60:1a:eb:5f:e3:c4:62:03:5e:80:
59:1e:e8:60:d8:2d:4a:d0:40:ff:1e:10:24:31:3f:b4:20:39:
cb:d5:82:14:41:26:b4:81:99:04:15:b8:f4:0a:ee:8a:0f:97:
68:9c:f3:a9:6a:8d:ae:57:24:f3:97:77:47:40:73:0b:80:8e:
44:8b:2b:b9:44:37:e4:12:27:0e:87:50:65:28:e9:4e:9f:b9:
27:c3:80:58:60:b8:ad:f7:12:8f:73:74:80:f9:b9:bc:b0:6e:
d3:5b:84:17:c0:a3:2d:64:9a:a6:4f:22:1f:51:5e:ac:55:68:
2e:18:9b:ec:95:38:0b:02:b4:8b:e1:f1:7d:8c:fb:e5:90:34:
b5:da:6d:6e:b0:1f:2b:f2:35:35:2f:20:b9:4a:f0:ab:3e:d2:
6d:4d:7c:d6:87:69:68:dd:ae:8c:03:6f:99:c9:15:d3:c5:16:
6d:3f:a9:05:6e:29:a8:58:5d:62:b8:ff:19:5c:81:57:e7:d3:
de:b9:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:59:31 2025 by rpki-client