Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
File: 60cb61fc-8048-3d70-a4c8-ddf43df58222.roa (raw, json)
Hash identifier: Ex1tS2kK6NUlLU16GzV9+8fgcMXsfT/egsESCDl7Buk=
Subject key identifier: 88:EC:F5:0E:B1:8C:90:B6:19:71:38:D9:64:64:84:A5:C0:37:B8:64
Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial: 010D0C9F432858491AA6AE0006DD647260686F40
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 3423
IP address blocks: 2602:fbdc:88::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:ae:00:06:dd:64:72:60:68:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=a0e7ab33-9ee7-4503-8335-9ab8c5531fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:c4:9c:a6:42:ff:47:47:bc:d2:b9:92:b1:
f5:b7:c3:6a:d2:fc:40:cd:06:40:26:03:bb:02:41:
53:79:ad:3d:71:0f:d2:75:3b:f2:bf:eb:66:f1:b9:
81:f1:26:2c:4f:33:59:f9:97:cf:45:09:60:3f:fc:
66:b3:2b:fb:87:88:0a:09:bb:9c:aa:83:d6:71:0a:
07:b0:d8:7b:07:b4:bc:e3:f5:40:fb:4d:9a:14:d5:
30:70:6f:c0:a1:90:0d:8b:7b:91:c8:d8:34:e4:63:
c3:2d:75:6e:bb:ea:4b:9c:1c:95:9d:e2:9c:1f:f4:
c7:08:65:09:a3:df:e7:0e:38:00:52:41:53:60:b1:
e3:ac:a7:a9:54:ed:fe:f8:47:28:1b:fa:cf:ce:ba:
52:5c:92:16:1c:3f:44:e0:28:ff:bb:db:49:57:ad:
ab:d5:9a:5b:ed:ec:a6:fa:53:6b:5e:ab:4f:af:67:
d4:ff:f7:61:0d:af:78:57:ec:ef:d2:d8:13:35:3c:
1d:06:64:08:62:ee:b8:90:3f:c9:f8:d3:a5:7e:26:
0d:7f:62:cb:eb:5e:5e:7e:cd:e1:16:eb:42:ba:9d:
b1:65:dd:88:34:6f:3c:c4:2c:fd:ef:cb:48:92:01:
68:93:6f:f6:5d:12:c3:25:ca:b4:b2:e6:d5:82:8d:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:F5:0E:B1:8C:90:B6:19:71:38:D9:64:64:84:A5:C0:37:B8:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
X509v3 Authority Key Identifier:
keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbdc:88::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:4f:9b:db:00:ab:ee:13:29:b4:b7:bb:92:6a:34:9b:4a:be:
5f:11:d5:78:d1:66:8b:59:f4:94:31:be:09:5e:8a:9c:d7:1b:
25:75:ec:4f:89:ac:43:5a:2d:43:06:01:97:9b:c4:20:72:08:
2d:ce:8c:dc:5e:50:72:e2:fe:60:fe:20:37:51:af:60:d5:c0:
a6:61:e7:f0:91:f7:8e:78:f0:32:43:45:c3:1f:0f:27:d2:d1:
e7:cb:a7:75:af:1b:91:cc:73:9c:99:7a:93:91:29:7f:6a:ed:
b1:36:3b:40:cf:af:29:80:7a:18:6d:c2:6c:cc:09:f9:bd:b5:
e9:e9:13:e4:65:b0:15:50:fc:e5:97:b3:cb:d3:1b:57:c1:ab:
8a:26:84:bd:72:2c:3e:7f:d3:84:0d:d3:95:37:cb:45:ff:89:
87:cb:8c:86:62:da:05:ea:76:7f:4c:77:d8:e6:28:1a:6a:f9:
4c:ee:10:b4:a8:48:6b:3a:94:1c:5c:2b:8a:89:3b:15:31:e1:
07:5a:29:e9:5b:01:bd:9c:48:b8:9f:5e:d8:c9:96:09:ed:83:
dd:06:e8:f2:a0:1d:c2:6c:b1:78:75:8d:0a:20:94:f8:9d:fc:
2f:a7:46:e3:03:e2:9b:21:74:e7:04:87:cf:59:b7:df:5a:d2:
b9:12:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:34 2025 by rpki-client