Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa
File: d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa (raw, json)
Hash identifier: 1keEUDAml41JYPJAF6DhIuylobNeGw+O8iK/mYWMtJM=
Subject key identifier: 6D:0E:E7:F2:4E:B1:9B:27:77:64:DD:05:64:7A:20:5D:B0:2E:B4:A3
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B4C0D0FC19ED1B70CF8B6F80
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 4213
IP address blocks: 2607:dc80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d0:fc:19:ed:1b:70:cf:8b:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=b04f105d-07bc-487c-b516-b1500f6f35cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:ee:e3:f0:bb:f3:fd:ea:f4:ba:16:52:0d:
d4:11:64:f1:80:86:12:41:68:7c:21:43:57:01:7d:
35:1e:dd:2e:fd:72:70:57:cf:a8:99:25:bd:6a:66:
b6:69:0c:f7:9a:8c:94:7d:20:10:32:c7:5d:e6:3d:
3d:19:d9:18:ec:6a:2e:cd:1e:34:77:73:bc:3b:06:
58:24:46:1b:30:64:fc:87:70:58:86:f3:8d:bd:65:
d5:f5:08:69:98:3b:98:d3:aa:a6:9a:66:0f:ca:16:
13:b2:56:fa:c8:b9:69:1a:47:a3:40:d5:1a:f8:f8:
26:70:e3:b9:10:db:91:f3:7c:15:6d:4a:1c:3a:f1:
84:b4:9a:40:74:90:7a:fb:a2:95:ee:e0:cd:55:52:
3c:e6:4c:4c:6c:56:3d:3c:0a:af:a7:bb:4c:61:ad:
72:03:ec:0e:15:09:f8:dc:14:88:dd:65:d1:a9:67:
52:a8:e0:40:a4:af:7b:79:d7:99:80:1a:f1:05:c3:
d5:c3:fc:b7:45:80:51:96:d2:75:64:f7:b1:41:18:
0c:5d:b4:1d:e9:1c:9c:bf:28:86:03:cf:13:6b:c8:
b8:5e:b4:a7:9a:7e:04:52:ce:dc:82:52:66:92:ab:
c3:b5:a2:84:e4:6c:19:84:f0:57:0f:e8:5d:ef:53:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0E:E7:F2:4E:B1:9B:27:77:64:DD:05:64:7A:20:5D:B0:2E:B4:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:dc80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:39:11:c2:a1:f4:2a:25:a1:bf:65:28:53:68:98:f9:48:a7:
34:4b:c6:0a:f0:64:e4:bd:8e:76:f9:af:46:12:08:57:7e:1c:
c7:4b:c3:05:85:5a:07:6c:49:3c:7a:4b:39:c0:81:79:ea:ea:
ef:7b:b6:2f:a9:e9:12:63:de:8c:18:8b:bc:7e:c2:7f:4b:bb:
d1:9e:7c:87:6a:9e:95:5f:5b:70:77:dc:18:8e:a2:34:c7:f4:
06:58:1e:0f:46:62:8d:26:b7:67:87:ca:7c:3c:75:51:24:61:
0a:4f:70:12:fd:c2:33:66:d7:65:a8:1e:e7:ca:b2:7c:c7:c6:
77:fa:1b:71:35:82:e8:dd:fa:99:02:b5:c4:68:dd:ed:43:80:
3c:d6:eb:ce:ff:3c:4e:9a:29:31:7e:5d:81:2f:3c:15:f1:54:
98:3a:e2:82:7d:96:c2:34:87:14:69:2c:87:6e:16:6e:24:ab:
46:58:bb:da:5d:18:cd:ca:77:49:10:db:9a:3d:09:f1:06:f4:
30:cb:16:59:82:a7:8d:c2:59:42:00:8c:ae:eb:04:80:cf:e2:
70:82:0a:3e:23:7b:25:31:6a:b1:00:f1:10:71:36:1d:e3:6c:
8c:df:59:40:8f:97:b3:80:ce:a1:b5:d7:dd:b5:3d:89:88:7e:
8e:9e:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:16 2025 by rpki-client