Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a610954-f847-3c0b-9583-164d43757cf4.roa
File: 0a610954-f847-3c0b-9583-164d43757cf4.roa (raw, json)
Hash identifier: Rshvxp0OG2CbM+vGUNJFnRTrRq1avFkFXm9PYV8YAt4=
Subject key identifier: F5:71:E9:4D:AB:96:9B:B6:88:7B:B2:E0:9B:9F:B1:34:5F:38:A0:D6
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584940396F622BC7EAE719A71980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a610954-f847-3c0b-9583-164d43757cf4.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 54113
IP address blocks: 2607:8940:49c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:6f:62:2b:c7:ea:e7:19:a7:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=13d4bdb8-0236-470e-8d4f-25b0561fbca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:fe:c7:15:1a:7b:a4:01:f9:16:d1:78:96:
4c:70:c9:10:ba:fb:17:0d:b7:ae:bf:df:6a:0b:91:
7b:9b:d2:30:2a:08:4f:30:7c:c1:c3:be:37:38:ed:
29:e5:da:99:e8:74:15:c0:0e:da:6b:b4:80:71:1f:
46:57:7c:25:29:e1:62:7f:be:17:4a:b9:d4:a2:be:
e8:e3:94:12:4c:df:5e:57:8f:ba:4b:be:76:4f:e0:
be:b0:65:b9:8b:7d:0b:c4:02:bd:25:f8:4c:3c:19:
8d:69:27:85:25:be:48:3f:e0:41:a0:fa:68:8c:2c:
d6:d0:aa:d5:67:10:44:cb:a3:47:c7:37:a4:ac:fa:
a8:d7:dd:21:c3:5f:cf:9d:87:8e:3e:09:e1:65:0b:
03:9a:66:d1:e2:b1:f0:09:f8:9a:07:47:bd:fc:77:
9d:02:35:97:eb:da:3e:a2:e6:56:b6:56:65:ab:8c:
8d:b5:65:0d:80:c2:62:0f:56:f6:a7:54:bf:39:42:
3a:83:6a:d3:1c:b7:1d:9b:c7:0c:13:8d:e4:1b:d7:
c8:47:da:77:c4:91:1f:c1:d7:41:05:47:3c:26:21:
9c:3e:77:a0:8c:8d:e9:6b:37:28:09:f8:ca:97:c2:
70:88:d7:ca:78:86:28:27:85:4c:7b:17:fc:9e:e2:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:E9:4D:AB:96:9B:B6:88:7B:B2:E0:9B:9F:B1:34:5F:38:A0:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a610954-f847-3c0b-9583-164d43757cf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:49c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:fa:77:8c:4c:ec:40:d6:a8:a6:40:8c:ff:d5:95:ea:53:19:
20:10:7c:58:ba:bc:80:8e:ec:87:49:91:a7:03:28:02:32:95:
44:c7:5f:88:ea:21:1e:4d:bc:dd:17:71:73:79:50:1d:21:86:
2d:e7:f4:17:b2:bf:96:cd:46:7b:82:10:73:b7:2a:5e:48:21:
dc:c1:b1:6e:3b:af:2e:cc:fe:77:0b:ba:18:e0:16:bf:28:a9:
d8:b3:c1:be:bb:a8:f4:f4:9f:9c:2c:ad:49:9f:dc:be:c7:e9:
6b:dc:0a:95:17:5b:54:33:2f:56:c1:c1:b9:e3:9e:85:6e:97:
49:7c:a6:3a:e1:bc:23:3d:1b:23:39:52:25:f9:bd:98:a7:4f:
50:bb:a9:89:1d:38:dd:97:ea:d5:cd:fa:0b:92:ec:d1:3a:25:
4d:c5:28:2c:c7:da:1f:b7:1d:e6:5c:51:39:8f:f4:0f:c4:b5:
fd:5d:09:46:51:93:54:cb:10:bc:e1:10:19:11:92:ac:2e:8d:
b6:18:9b:69:6a:7d:44:d4:c7:76:33:75:2c:3c:77:b2:6f:16:
f5:dd:4b:37:e3:4e:4f:d2:05:07:9b:04:33:d3:e2:5d:63:fe:
a3:c7:52:f3:4d:78:50:3d:a1:b7:6e:e0:20:fe:bd:bf:5f:65:
d6:c2:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:45:16 2025 by rpki-client