Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3abdc333-7267-3354-bea0-b6096260f71c.roa
File: 3abdc333-7267-3354-bea0-b6096260f71c.roa (raw, json)
Hash identifier: ueRCCkAeMuZLMIwhjAWTWISBWUAMqNfSsPzX+k1j1iE=
Subject key identifier: 02:99:0C:ED:A2:71:EF:8C:7F:D4:40:AB:0D:55:5F:D0:80:4A:80:E2
Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial: 010D0C9F432858491D717E9E73BF2D581A9F8640
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3abdc333-7267-3354-bea0-b6096260f71c.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 4473
IP address blocks: 2602:fbdc::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7e:9e:73:bf:2d:58:1a:9f:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=e98e394d-3566-4a54-ab2b-84226931d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:a9:64:b6:59:a6:bf:7b:4d:b0:29:23:ab:
f1:f6:87:66:c3:32:75:37:7a:fe:d4:36:66:d0:8b:
9c:04:42:72:74:b0:cf:ed:27:c2:ca:c5:9e:1f:f4:
e6:44:4f:ba:79:df:0f:35:8a:40:17:d1:fd:65:79:
03:b8:ae:87:1c:c2:08:57:d0:fb:7a:c3:4e:b8:b2:
c2:e1:7f:97:06:14:fe:da:8d:02:a8:05:f5:6b:b0:
77:68:54:41:ce:69:da:44:78:e9:67:54:ca:c1:ff:
5e:91:e0:02:ff:06:9c:88:cb:ff:ea:c6:60:53:8b:
8e:fb:5a:82:9d:b0:c1:f2:dc:ef:4b:19:32:a9:57:
92:93:82:87:9f:9b:f0:20:e9:90:fc:56:db:78:3b:
23:de:83:ce:af:a8:0f:53:2f:36:8c:e7:10:ad:b4:
d8:da:fa:fd:ed:4b:dd:58:f1:a2:6c:af:fb:6e:c4:
ee:b6:85:4d:61:d3:93:2a:5e:98:f9:99:2f:a1:22:
37:c1:ca:b3:05:b7:f4:55:84:b0:4a:b5:49:ac:54:
9f:1d:45:53:c3:64:7c:95:83:3c:32:fd:1c:17:b2:
7a:3f:01:a0:c9:e2:3e:fd:f7:7a:2c:eb:90:16:7c:
9f:1c:60:13:a3:75:5e:c0:7c:73:b0:75:fa:1e:c2:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:0C:ED:A2:71:EF:8C:7F:D4:40:AB:0D:55:5F:D0:80:4A:80:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3abdc333-7267-3354-bea0-b6096260f71c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
X509v3 Authority Key Identifier:
keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbdc::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:fd:62:ba:99:dd:58:c3:04:4e:40:94:7b:51:6d:8e:e2:4b:
11:a5:92:a8:61:ed:9e:03:a0:6b:57:81:3d:2e:1e:46:6f:c2:
09:2d:15:20:d7:e3:48:0c:af:1c:3c:d7:1b:5f:cb:42:71:51:
9b:b8:53:de:8f:5c:79:50:8b:90:21:91:fc:4e:9b:92:f1:13:
ae:c7:ff:de:9e:78:db:c5:5e:23:84:d5:a7:05:a9:26:b2:6b:
28:47:82:63:c2:39:46:71:fd:92:66:39:4b:bf:74:72:89:a4:
1c:cc:1a:d3:df:4f:d1:51:28:9f:38:65:f0:d1:e4:72:e9:e5:
cb:0a:e7:c8:27:59:87:7d:68:04:eb:5a:8b:89:fb:8b:e7:c8:
68:93:19:9c:58:ae:86:65:ce:7f:81:2a:d5:ff:e3:38:cb:1d:
fc:66:80:41:d6:9e:75:e9:5a:6f:9b:9c:b2:34:27:c6:8e:7c:
f3:54:dc:70:63:fe:3e:30:cd:0a:e9:11:04:a5:1e:dd:58:60:
6c:a2:40:f8:12:23:13:75:c2:57:e1:77:d0:df:31:44:55:a6:
8d:10:82:73:45:99:e2:8a:e2:94:9a:9f:8a:6e:91:99:52:74:
28:2d:5f:32:ae:af:5c:b1:09:6e:4d:d1:7e:dd:a6:82:b2:2e:
cf:85:1f:8a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkdcX6ec78tWBqfhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZTk4ZTM5NGQtMzU2Ni00YTU0LWFiMmItODQyMjY5MzFkOWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtKpZLZZpr97TbApI6vx9odmwzJ1N3r+1DZm
0IucBEJydLDP7SfCysWeH/TmRE+6ed8PNYpAF9H9ZXkDuK6HHMIIV9D7esNOuLLC
4X+XBhT+2o0CqAX1a7B3aFRBzmnaRHjpZ1TKwf9ekeAC/waciMv/6sZgU4uO+1qC
nbDB8tzvSxkyqVeSk4KHn5vwIOmQ/FbbeDsj3oPOr6gPUy82jOcQrbTY2vr97Uvd
WPGibK/7bsTutoVNYdOTKl6Y+ZkvoSI3wcqzBbf0VYSwSrVJrFSfHUVTw2R8lYM8
Mv0cF7J6PwGgyeI+/fd6LOuQFnyfHGATo3VewHxzsHX6HsKZZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAKZDO2ice+Mf9RAqw1VX9CASoDiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvM2FiZGMzMzMtNzI2Ny0z
MzU0LWJlYTAtYjYwOTYyNjBmNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL73AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALf1iupndWMMETkCUe1FtjuJLEaWSqGHtngOga1eBPS4eRm/CCS0V
INfjSAyvHDzXG1/LQnFRm7hT3o9ceVCLkCGR/E6bkvETrsf/3p5428VeI4TVpwWp
JrJrKEeCY8I5RnH9kmY5S790comkHMwa099P0VEonzhl8NHkcunlywrnyCdZh31o
BOtai4n7i+fIaJMZnFiuhmXOf4Eq1f/jOMsd/GaAQdaedelab5ucsjQnxo5881Tc
cGP+PjDNCukRBKUe3VhgbKJA+BIjE3XCV+F30N8xRFWmjRCCc0WZ4orilJqfim6R
mVJ0KC1fMq6vXLEJbk3Rft2mgrIuz4Ufig==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:05:39 2025 by rpki-client