Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/c616e6f6-30e9-3db0-8152-8102e6e1ebf0.roa
File: c616e6f6-30e9-3db0-8152-8102e6e1ebf0.roa (raw, json)
Hash identifier: xca7FZ4xy/HVh4RTjH2XvJI4dQG2RQ/aNO7MI5JKjS8=
Subject key identifier: DD:9E:92:F3:FF:68:90:99:66:E6:63:55:2E:CB:4D:7E:9D:48:F2:EA
Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial: 010D0C9F432858491C0C25C5EECF9E73E11A4A40
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/c616e6f6-30e9-3db0-8152-8102e6e1ebf0.roa
Signing time: Fri 07 Mar 2025 14:00:52 +0000
ROA not before: Fri 07 Mar 2025 14:00:52 +0000
ROA not after: Thu 05 Jun 2025 13:00:52 +0000
asID: 3423
IP address blocks: 2602:fbdc:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:0c:25:c5:ee:cf:9e:73:e1:1a:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Validity
Not Before: Mar 7 14:00:52 2025 GMT
Not After : Jun 5 13:00:52 2025 GMT
Subject: CN=1bddeae1-ac3d-4914-b0d0-14e794d2c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:d7:91:10:e2:2c:02:a3:f3:80:0a:bf:f2:
93:7e:d1:95:4a:28:39:65:18:79:ea:8b:fa:fe:5f:
33:c2:5f:dc:76:08:45:33:fb:1a:d3:a5:22:bc:b8:
d5:64:40:ef:c3:ae:5d:3f:17:21:60:d4:da:b4:ad:
05:44:24:1e:b4:d3:b5:58:6f:50:aa:31:c4:7c:21:
9b:b4:b8:7b:a6:49:26:5a:a0:bd:8f:70:d1:15:65:
59:ca:8e:0d:45:a1:06:f5:9d:a5:4e:c2:8f:78:56:
f0:be:58:e4:19:0d:d1:fc:b8:a2:9a:f1:da:96:c1:
70:23:f2:e4:11:81:f6:9b:7c:18:2b:95:6e:c1:f1:
31:8d:57:20:a9:54:40:eb:ac:d9:0d:09:47:af:9f:
99:19:fc:c3:3d:3e:11:2a:a3:86:cb:ab:72:f3:8f:
b0:cc:04:e9:e1:71:d3:df:e9:14:16:03:46:1b:f0:
f1:d4:02:16:d8:e3:d2:4b:c7:34:65:ea:b4:8b:d8:
20:b3:a7:b4:2c:a1:42:d7:69:e0:9b:79:c7:2f:a7:
09:e2:fd:e0:ea:de:d2:bf:0c:bc:02:5a:cd:39:d2:
04:1c:4f:0d:00:fc:b0:4b:8c:75:b6:ea:99:4d:b8:
7a:49:b9:3a:af:7d:2d:ed:ac:99:9c:5e:1a:1a:f8:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:92:F3:FF:68:90:99:66:E6:63:55:2E:CB:4D:7E:9D:48:F2:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/c616e6f6-30e9-3db0-8152-8102e6e1ebf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
X509v3 Authority Key Identifier:
keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbdc:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:33:1e:82:cc:b1:1f:9b:c2:41:5b:c3:5d:f6:5b:22:ee:3c:
10:39:fa:3a:a5:ed:a9:e9:30:83:cf:ed:8c:71:33:f8:c8:50:
37:7a:83:b8:2a:f2:a9:6c:47:a9:f6:9b:74:36:e6:5a:69:83:
52:d1:e2:d3:16:31:cd:b1:ef:60:db:95:90:31:27:85:eb:10:
9f:35:2b:15:d5:17:b9:cf:c4:e3:d5:93:4c:12:ed:c9:a0:2e:
e8:8e:3f:0e:99:3f:2a:f4:15:e5:08:28:9c:24:48:29:47:53:
2a:e0:12:65:37:92:d6:0f:28:61:91:94:aa:f7:a2:1b:bf:da:
f5:db:9c:bd:c9:bc:5c:b9:0e:39:50:e0:d9:de:27:02:1e:fd:
a8:5a:8c:6e:c2:c1:9f:28:96:ff:1e:ce:c4:4f:bd:be:4c:bb:
be:a1:15:4a:c0:94:b7:26:53:67:b6:54:26:ef:1b:9c:b9:51:
1e:d3:4f:01:78:f7:9a:a1:d4:13:5d:3a:71:57:c4:19:56:31:
70:51:c7:f3:62:4a:a4:8f:55:89:0c:b7:2f:c0:a5:fa:d9:74:
e4:b1:0b:96:b7:44:69:23:3b:df:e4:bd:c0:b0:b5:bc:17:cd:
fd:12:2a:96:77:9a:30:8b:21:c8:ad:a3:cc:48:f9:28:f6:5a:
ba:ca:e2:ec
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkcDCXF7s+ec+EaSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MWJkZGVhZTEtYWMzZC00OTE0LWIwZDAtMTRlNzk0ZDJjMmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg3XkRDiLAKj84AKv/KTftGVSig5ZRh56ov6
/l8zwl/cdghFM/sa06UivLjVZEDvw65dPxchYNTatK0FRCQetNO1WG9QqjHEfCGb
tLh7pkkmWqC9j3DRFWVZyo4NRaEG9Z2lTsKPeFbwvljkGQ3R/LiimvHalsFwI/Lk
EYH2m3wYK5VuwfExjVcgqVRA66zZDQlHr5+ZGfzDPT4RKqOGy6ty84+wzATp4XHT
3+kUFgNGG/Dx1AIW2OPSS8c0Zeq0i9ggs6e0LKFC12ngm3nHL6cJ4v3g6t7Svwy8
AlrNOdIEHE8NAPywS4x1tuqZTbh6Sbk6r30t7ayZnF4aGvjLJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN2ekvP/aJCZZuZjVS7LTX6dSPLqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvYzYxNmU2ZjYtMzBlOS0z
ZGIwLTgxNTItODEwMmU2ZTFlYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANgzHoLMsR+bwkFbw132WyLuPBA5+jql7anpMIPP7YxxM/jIUDd6
g7gq8qlsR6n2m3Q25lppg1LR4tMWMc2x72DblZAxJ4XrEJ81KxXVF7nPxOPVk0wS
7cmgLuiOPw6ZPyr0FeUIKJwkSClHUyrgEmU3ktYPKGGRlKr3ohu/2vXbnL3JvFy5
DjlQ4NneJwIe/ahajG7CwZ8olv8ezsRPvb5Mu76hFUrAlLcmU2e2VCbvG5y5UR7T
TwF495qh1BNdOnFXxBlWMXBRx/NiSqSPVYkMty/ApfrZdOSxC5a3RGkjO9/kvcCw
tbwXzf0SKpZ3mjCLIcito8xI+Sj2WrrK4uw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:34 2025 by rpki-client