Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dad6468a-7b95-3c11-81af-db6e80f0d048.roa
File: dad6468a-7b95-3c11-81af-db6e80f0d048.roa (raw, json)
Hash identifier: cKtqkZ3YJQ8DqfrlQE20C95TcTF5FwG8qlMaYCTDV0Y=
Subject key identifier: 1B:D7:64:E7:56:ED:45:9E:7C:86:6F:B7:F9:CE:16:66:C0:75:82:CA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848C57339B4FF14EB5E31A004A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dad6468a-7b95-3c11-81af-db6e80f0d048.roa
Signing time: Tue 04 Feb 2025 13:33:18 +0000
ROA not before: Tue 04 Feb 2025 13:33:18 +0000
ROA not after: Mon 05 May 2025 12:33:18 +0000
asID: 396610
IP address blocks: 2001:503:c27::2:30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:73:39:b4:ff:14:eb:5e:31:a0:04:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 4 13:33:18 2025 GMT
Not After : May 5 12:33:18 2025 GMT
Subject: CN=65e4dbb1-128c-4bd6-9aad-0eb01e4af875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:79:04:4b:7b:f9:89:7e:52:fb:94:ac:bc:
9b:bd:bc:93:11:08:5b:d1:df:3e:88:56:56:75:98:
89:43:ae:69:a6:24:77:f5:df:09:31:5f:3a:3c:44:
46:79:32:b3:d8:e1:1f:4a:0b:1c:ad:fd:ff:69:47:
11:2d:20:55:06:5d:24:b1:de:63:f8:f9:91:6e:7e:
24:63:2a:64:d1:c3:25:91:26:46:10:6f:78:6b:3b:
8e:9a:19:78:e1:97:da:af:d0:e4:84:c1:3b:56:33:
f5:23:4a:cb:29:b2:6f:15:8d:90:13:b1:44:38:aa:
bc:c1:a4:79:ef:38:a9:9e:c5:0d:88:fc:a7:b7:41:
de:6e:53:6f:59:ce:a3:c9:68:60:98:de:e9:28:e1:
a5:a0:5b:32:52:1b:96:32:53:16:82:06:fe:f8:a4:
a7:62:b8:bb:43:f2:f1:13:87:21:ac:44:a0:50:d6:
d2:44:36:ef:00:52:81:f4:c5:23:8a:10:84:22:1f:
c6:cd:7e:cf:3e:5d:f5:6c:4f:4e:63:0e:76:d9:41:
38:f6:ad:58:a8:27:dd:d5:12:bf:3c:8c:b0:a7:4d:
d7:6c:0f:24:d8:68:6d:a3:3e:a9:49:61:d7:d1:f8:
0f:8d:51:05:4d:3a:13:f0:0b:dd:79:14:29:bd:c8:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:64:E7:56:ED:45:9E:7C:86:6F:B7:F9:CE:16:66:C0:75:82:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dad6468a-7b95-3c11-81af-db6e80f0d048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:2d:60:99:b4:7c:f2:b8:57:fa:75:1d:32:90:6b:c6:83:3a:
c2:e0:14:04:73:15:28:a2:ab:f9:74:1a:bc:a3:a5:2c:6e:b7:
93:3b:f6:c0:b2:e3:18:27:1d:c6:36:ea:ad:2e:e6:89:c4:9f:
dc:d8:c7:51:37:f3:67:76:6c:3c:82:be:ec:44:a0:d9:6c:c9:
67:27:ae:9a:f9:dc:56:49:da:02:b3:47:de:43:dd:94:36:50:
64:81:7f:da:27:22:b6:68:09:bb:b2:f1:29:b9:9a:9c:63:fe:
78:ca:09:00:7e:f9:8a:fb:ca:61:85:09:c5:7f:cd:90:4b:54:
63:f2:e5:ec:b4:b9:7f:26:9a:77:51:58:2a:a0:79:2e:01:9a:
4a:2f:ce:00:94:2a:7c:b9:2f:37:93:e9:ce:a6:d6:38:8b:6c:
f3:14:e4:26:3b:94:25:63:5b:7b:1f:6f:29:32:8a:0d:32:ba:
ae:99:45:7a:ea:bb:58:ac:b3:1b:63:9d:da:c9:92:74:86:5f:
98:1c:3a:14:b5:43:74:43:fd:24:f6:ed:59:20:2b:0b:87:4d:
cd:1a:1c:17:f9:d9:72:a7:21:cd:db:e1:4c:dd:fe:9f:0e:56:
7e:ef:eb:69:7e:94:9a:ec:d0:84:05:df:b2:5d:a6:69:da:40:
47:d3:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:06:22 2025 by rpki-client