Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
File: 689b6d84-5481-319d-a444-836935fcee29.roa (raw, json)
Hash identifier: UX4ex9cbdiho2P++6g1SCt78w3Gw99iCj81ZLiKXNiE=
Subject key identifier: E2:FA:69:9C:3A:6E:DD:70:BE:61:FE:4D:91:14:D8:60:66:87:40:2B
Certificate issuer: /CN=17624d03-2126-49cd-8e8c-c3d5089ac686
Certificate serial: 010D0C9F43285848E9CBEAD7770B87B62A23EC40
Authority key identifier: 32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 14923
IP address blocks: 2602:f92b::/40 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ea:d7:77:0b:87:b6:2a:23:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17624d03-2126-49cd-8e8c-c3d5089ac686
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=08e54b1e-29ff-43b2-b2c9-4a73dac63bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:8a:b9:c8:95:c7:ca:ee:29:e1:47:26:d6:
ba:0f:81:0d:1d:4f:46:76:d9:f8:de:77:3e:d7:2a:
db:09:d5:64:26:75:77:7e:9b:11:20:90:72:ed:e5:
8d:1e:b9:ef:4e:0d:89:6c:3e:e2:fb:26:b9:ea:fd:
b1:47:35:50:1b:14:6e:28:c2:bf:74:b3:27:ff:41:
2c:cf:af:45:e9:d6:71:54:a9:c6:4e:71:ee:91:bf:
af:37:b8:c7:a4:3f:e8:b1:2e:3c:a4:e8:d4:4e:59:
16:b4:f8:06:71:ba:d5:69:a0:58:79:f1:e0:7e:55:
fa:0a:9b:96:05:93:b6:ba:c5:a9:59:df:59:0a:a1:
5c:62:0c:4b:d5:b0:d3:82:fe:a7:de:fe:6e:1a:1b:
c5:5d:87:ca:00:ac:68:58:37:eb:48:97:f2:4b:68:
0b:f9:34:b3:17:bf:ed:5c:da:2e:9d:f7:6d:e4:81:
d2:3d:60:87:47:03:da:1a:55:35:98:70:b7:5d:8c:
c1:7e:41:5d:f7:1e:87:5a:39:82:35:2a:bd:e4:d5:
23:05:5a:1c:44:73:d6:92:a6:c2:8f:95:0f:74:61:
05:c3:b3:5a:62:d9:03:94:9c:d5:64:84:d7:1a:9d:
f7:55:48:28:a3:04:f7:05:22:9d:fc:58:ee:83:45:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:69:9C:3A:6E:DD:70:BE:61:FE:4D:91:14:D8:60:66:87:40:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl
X509v3 Authority Key Identifier:
keyid:32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f92b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b4:49:64:2b:11:52:ed:b1:89:74:fe:b9:9b:3b:15:b6:dc:
26:13:8f:59:ec:1f:3b:cb:e0:fe:16:19:1e:86:bb:96:de:7c:
d4:f1:0c:bf:0a:cd:b8:3a:1b:c0:d7:82:9e:fb:f6:84:48:d6:
d9:36:a5:8c:45:5b:bb:ec:4e:f7:a2:2e:56:9a:f4:1d:9f:b9:
a4:eb:df:e0:ea:df:f1:7d:74:8e:7b:93:22:3e:f1:c7:3d:4a:
a2:3e:f0:0d:53:84:46:b6:30:35:12:84:9a:02:22:f1:55:df:
02:6b:86:08:0c:ab:b6:e4:5a:48:94:c0:d2:46:74:d0:30:70:
d9:e6:5d:67:ee:ef:37:90:62:2e:b3:d5:35:fb:d4:c5:df:a1:
72:01:58:8d:63:cb:11:3c:12:0f:4d:85:c3:f5:3e:55:9d:de:
71:7b:45:5c:3f:52:77:44:07:a1:97:bf:52:48:0c:77:f7:74:
f3:4d:7c:6c:18:ba:70:ab:d9:fc:65:62:b5:3b:6d:a4:1b:73:
3c:ce:89:8f:bc:b2:74:03:01:85:78:57:26:ab:86:4e:03:d3:
91:4e:9a:c9:ac:aa:9a:96:61:d4:06:cc:33:2f:b0:16:71:39:
02:58:06:69:31:3f:ec:d1:28:33:21:87:aa:d1:40:ff:e8:50:
fe:aa:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:32 2025 by rpki-client