Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa
File: 6c1c0587-f233-3a11-b157-ddc3c62d241f.roa (raw, json)
Hash identifier: l8tvUH4vvbG021U4KsiZPkd9JGvqTP1JqNYqgnyUC40=
Subject key identifier: 93:ED:CA:F8:F5:87:09:86:46:66:25:FD:71:40:1A:15:3B:0D:C7:56
Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial: 010D0C9F43285849203C13AFF3F688E685BA3700
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 32764
IP address blocks: 2602:f98b:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:13:af:f3:f6:88:e6:85:ba:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=99c701a7-3a33-4195-b93c-806eb14098ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:a4:78:f6:2d:52:e2:62:40:7d:bf:51:81:
4f:bf:b3:50:00:ad:f8:9b:45:9f:19:a0:cf:91:a6:
32:4c:d0:6a:87:e3:8e:25:bf:8b:8b:23:fb:63:ed:
08:96:ab:0f:ba:a0:fb:c6:bc:d5:bc:e4:45:0d:8e:
0c:60:62:1d:e0:23:d9:a8:71:ed:9e:55:8e:c8:c6:
ad:0b:38:dd:be:56:6d:77:72:12:fc:ef:14:25:59:
2d:f5:4b:c0:5a:a6:5a:c4:79:e5:24:db:84:f4:5c:
32:85:a8:08:13:48:22:30:a3:d8:da:09:18:3b:92:
f1:f1:ba:4c:79:58:73:51:10:16:48:65:a5:fd:de:
9f:dd:48:49:bd:8d:8f:32:0e:d2:62:00:eb:ad:90:
b5:42:4b:b9:00:09:87:3d:e9:46:64:fc:52:f2:7b:
35:62:ea:27:66:f4:0a:86:5b:16:b4:a6:2f:bb:45:
4c:2f:f0:ce:61:6f:ec:bf:75:a5:62:dd:a9:af:22:
a0:c9:bf:b3:f0:70:3a:49:65:d3:db:4c:d0:8c:c8:
8b:56:5c:1c:e8:79:6e:e3:32:33:f5:34:14:6b:26:
9b:74:ca:67:40:ee:9c:32:90:33:79:99:6d:87:86:
02:b6:12:a0:33:fd:88:dc:25:46:f9:da:13:72:b8:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:CA:F8:F5:87:09:86:46:66:25:FD:71:40:1A:15:3B:0D:C7:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
X509v3 Authority Key Identifier:
keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f98b:30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:54:d4:61:b8:c9:5b:19:a8:b1:7e:56:b9:06:07:5c:b8:13:
09:23:66:27:74:e9:a3:7c:c9:97:04:91:6c:b8:b7:fe:56:fd:
83:a4:56:89:ab:8a:2b:a0:1f:9d:6e:5a:fb:ca:8f:0a:80:d4:
e6:bc:89:23:a5:77:38:21:dd:93:36:72:2b:7e:c1:34:d9:b3:
1c:51:c8:0c:e1:c8:70:ba:65:d7:8d:c2:dc:35:66:a4:18:0f:
4c:38:b6:74:02:13:68:48:55:57:32:5a:d4:ac:e8:52:dd:66:
7f:77:71:0e:12:fe:26:7a:cb:8f:26:b8:dd:d0:73:de:3a:ea:
41:1e:21:e0:17:db:5b:90:35:25:fa:b5:37:d1:99:0e:c9:71:
45:11:20:06:63:4d:aa:eb:f0:b1:22:b5:7a:fb:8e:da:67:53:
55:62:da:16:86:ad:8f:6d:64:c6:18:87:e9:21:d1:b2:8d:f5:
c3:4f:3e:02:36:89:d0:36:a8:99:5c:4e:38:9c:72:fc:07:42:
b2:c4:14:9a:00:22:b5:09:ac:e9:92:3d:de:6e:2c:04:61:ab:
bb:18:4f:e6:31:ab:d7:12:b4:98:f2:4c:e5:98:27:e3:dd:71:
72:9e:49:02:d3:21:04:3f:1c:10:60:3a:9d:6e:2e:c1:95:9d:
a8:c9:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:10:52 2025 by rpki-client