Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/a51e21a0-3d47-398d-a9f0-d5e884b0b513.roa
File: a51e21a0-3d47-398d-a9f0-d5e884b0b513.roa (raw, json)
Hash identifier: oFT31jxmcDyf4WqDaKvzAwZxUxBZIys+1CcIc4TjctA=
Subject key identifier: 22:8F:DD:38:7B:19:2E:FA:0D:EE:41:DB:44:96:76:1D:1B:D1:86:EC
Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial: 010D0C9F4328584976A99708E683BB48E25B3B00
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/a51e21a0-3d47-398d-a9f0-d5e884b0b513.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 401390
IP address blocks: 2602:f7da:38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:97:08:e6:83:bb:48:e2:5b:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=cf87fec8-c853-4834-91af-02a810f35c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:bb:d4:ce:fe:6b:6d:37:6b:6a:09:db:b3:
69:e1:3d:42:cb:f1:e1:e0:a7:54:42:2e:3a:10:45:
c1:f2:a2:93:20:06:21:95:bc:e8:c1:8d:bd:34:31:
63:a0:67:c4:3d:eb:dd:6a:59:5b:d6:26:9f:4a:2a:
85:c8:57:64:76:07:5b:04:57:ac:5b:f0:6f:21:dd:
01:70:de:06:00:a8:82:02:09:3d:98:7e:d3:33:f1:
12:cc:bb:e7:31:e1:61:8a:64:03:34:0e:3a:fc:e1:
55:6e:4d:b6:5b:93:b4:2b:47:fe:82:fe:38:08:32:
6c:95:34:55:b2:82:2f:c3:c7:6a:9a:d8:72:00:9a:
7b:00:20:33:36:ae:4f:5c:9d:78:9a:27:77:4e:da:
36:2c:64:69:5f:65:7e:76:e8:f3:ed:bb:68:81:2f:
f4:0c:58:ac:f5:22:46:f4:bf:93:ee:c4:9d:bc:9c:
d7:a5:fa:57:89:0d:d6:29:fb:b4:fc:65:bf:bf:fe:
73:4d:68:14:4f:9f:57:3d:cd:8d:8b:99:f1:21:7b:
2d:e3:c3:0c:89:af:bb:6e:75:18:87:65:77:ed:00:
9f:2f:e6:75:33:69:db:4a:e7:bd:67:a2:78:b9:f3:
c4:5f:58:1b:b1:f0:30:41:2d:31:3e:e8:1e:cc:96:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:DD:38:7B:19:2E:FA:0D:EE:41:DB:44:96:76:1D:1B:D1:86:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/a51e21a0-3d47-398d-a9f0-d5e884b0b513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
X509v3 Authority Key Identifier:
keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f7da:38::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:74:e2:82:ea:27:e8:39:08:93:f4:a4:fa:a4:4c:d2:ae:ef:
28:79:cd:e7:4d:65:21:98:4c:85:17:bf:5c:b1:96:59:3c:27:
3b:73:78:f4:33:4c:e9:ce:67:e0:1c:88:7e:ad:e1:fc:cc:02:
32:6d:92:e3:04:41:a9:40:ae:96:71:ee:03:9f:9f:ed:74:34:
8f:97:5e:bd:d7:4a:d8:3d:2b:f3:c5:ab:58:97:ed:51:0d:32:
14:9c:8c:b5:1e:40:85:42:00:bb:c4:c3:2e:92:c8:1f:db:a0:
f7:b3:2c:8b:0a:60:32:6d:1c:45:76:6c:2a:cb:a8:e3:f5:90:
55:3f:e5:83:31:c5:63:01:53:2b:89:ce:3a:ad:1b:71:70:3f:
75:9d:88:0a:01:b2:5f:72:05:9f:3a:2b:93:f5:13:03:44:d1:
d7:ba:fe:19:3a:f8:ba:cc:c9:e9:c5:d1:d1:27:05:88:4c:2a:
7e:8b:fa:ea:b7:84:14:93:f7:3f:c5:3d:23:44:ce:a4:16:73:
e9:7f:ec:e4:5a:80:6e:77:14:87:de:35:27:64:c4:54:b1:ab:
c6:fe:22:fb:b2:74:84:df:ec:b4:62:84:1d:ad:9b:76:44:f6:
c3:c9:c8:43:dc:47:7c:f2:31:5e:3e:7a:25:b5:c1:df:1b:50:
23:e6:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:36 2025 by rpki-client