Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5331b95e-b441-3adb-a7ba-807636e60ca8.roa
File: 5331b95e-b441-3adb-a7ba-807636e60ca8.roa (raw, json)
Hash identifier: JNT5Z3rWaccRJ9R/XJ4T5SejRzFOTbX9zEQvbhWnAfQ=
Subject key identifier: 8B:01:78:B5:0E:36:4B:ED:A9:13:22:A8:72:37:2B:0A:1F:98:47:50
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285849403964FAD82768A82D515800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5331b95e-b441-3adb-a7ba-807636e60ca8.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 54113
IP address blocks: 2607:8940:5b70::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:64:fa:d8:27:68:a8:2d:51:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=e503d4f3-d35e-4c34-8d20-4b690b849bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:3d:17:7b:90:e7:3e:96:33:59:fe:8f:b8:
c9:c0:6b:bd:54:9c:a0:86:10:d5:c8:03:2f:76:54:
f0:dd:73:01:9e:27:48:73:87:87:d0:53:a8:16:53:
7f:af:eb:fa:b8:88:22:4c:f9:cf:3c:f0:e8:73:68:
99:e2:54:b1:63:fb:9e:f9:ce:53:b8:4d:4f:1b:88:
18:2d:df:bb:f7:b8:88:b3:15:ba:8a:6f:60:eb:54:
3d:7e:8f:32:cb:3e:2a:39:ce:38:95:a1:20:eb:18:
a3:3b:d2:0c:f7:f8:fa:c2:37:aa:a9:67:6f:c2:a1:
b3:12:2f:f6:53:ca:68:7b:31:99:e1:1b:69:45:16:
fa:4d:ae:82:77:35:05:ee:8b:4e:46:ea:3f:a1:c2:
8c:7d:46:14:ca:6e:ee:de:26:1e:ca:9e:6c:aa:76:
f4:6f:1a:74:a3:f2:a4:b7:e8:13:7f:b6:ea:cc:26:
83:c8:d5:c0:07:1c:be:cd:d8:90:68:1b:8c:94:f8:
fd:64:8e:2e:2e:22:bc:5a:6c:c1:a6:fb:85:92:38:
c2:b0:35:7a:6c:84:44:06:6a:3e:c2:5a:09:f8:96:
7a:68:22:04:a0:38:7a:ff:76:b5:ea:a6:b0:c0:7a:
1a:c6:2f:c9:ad:f7:bb:12:b8:82:f1:82:84:4c:6b:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:01:78:B5:0E:36:4B:ED:A9:13:22:A8:72:37:2B:0A:1F:98:47:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5331b95e-b441-3adb-a7ba-807636e60ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5b70::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5b:e2:e8:a0:dc:87:db:98:d9:e5:a2:c5:62:53:bb:75:e4:
fd:b4:06:6b:e8:f4:d9:30:88:56:f8:24:4a:4c:17:1a:63:d9:
1f:25:e6:6c:d4:d5:14:3f:88:34:2e:c9:ea:b3:8c:30:ab:d4:
b7:39:6c:fe:1a:7b:5c:09:97:b6:07:56:23:5d:4d:a4:1c:6b:
22:fd:32:24:ca:6f:56:fe:72:15:ce:87:df:f4:fd:a5:0a:dd:
07:6c:c8:7f:b9:51:9b:3f:93:af:63:39:3c:7e:51:03:32:61:
12:f3:31:49:10:dd:4e:49:a9:79:6a:ae:ff:9a:01:20:0d:30:
52:d1:f0:d7:b6:4c:85:20:c6:9f:6e:1a:f6:97:6e:7a:cd:e6:
dd:51:4b:62:74:58:22:58:be:ff:1e:03:58:1d:90:06:cd:cb:
71:39:11:1d:a3:4a:42:e8:bd:4f:3c:a0:ed:9a:97:4e:a0:90:
24:54:ed:b2:71:4b:3a:24:65:e3:a6:79:54:ce:a2:62:48:94:
4c:1f:a9:cc:8f:b8:2c:bc:b1:59:7b:35:5a:69:0e:24:39:b6:
53:74:75:fc:ac:df:34:a0:a4:3c:6d:57:9c:b7:03:1c:83:48:
d5:3b:cf:a1:2b:76:26:7a:cc:66:ad:a5:dd:d9:d0:aa:92:a7:
ec:9d:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:35:42 2025 by rpki-client