Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa
File: 2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa (raw, json)
Hash identifier: 7SGzPUgZbGmCY02dRY57r4WV4jNM3qOWtpxau/uwEV8=
Subject key identifier: 91:81:9B:8C:2A:7B:F2:EB:D4:C6:35:BD:36:9E:51:76:DD:45:43:3A
Certificate issuer: /CN=7df7e023-145a-4cd7-8721-998050ab91e2
Certificate serial: 010D0C9F432858494733FFADD4264BD65056D580
Authority key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 11848
IP address blocks: 2607:1e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ff:ad:d4:26:4b:d6:50:56:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7e023-145a-4cd7-8721-998050ab91e2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=0b30d72b-f421-4508-833b-dbc2259885b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:56:6a:57:83:30:21:77:ce:57:7e:26:6d:
76:b9:7e:0b:ad:31:63:00:e4:7a:ef:7f:00:d7:46:
3a:c4:10:26:95:21:89:a8:cc:99:ef:d6:69:a5:8d:
c5:67:97:ec:3a:47:fc:6e:0f:b3:f0:6c:d5:12:db:
fa:bd:66:83:d4:c5:96:aa:50:cb:00:cd:c3:b0:b8:
dc:e9:1a:04:e2:16:f0:2f:e6:7e:48:83:d9:85:98:
f2:6b:18:19:8f:a0:e7:52:01:4b:35:c3:3a:52:b9:
cf:1b:a1:62:42:67:58:0a:e4:44:ea:39:8e:aa:a4:
7e:e1:ce:5a:9e:75:ab:a1:f1:73:58:72:c4:2a:04:
99:97:f6:4a:8f:cc:9c:39:a9:43:29:14:67:b7:b3:
41:4f:ba:73:9a:f1:ed:20:0a:ce:4c:25:b0:0c:69:
64:d3:37:17:60:ec:27:3b:e1:83:b8:b7:aa:ff:c4:
0c:6e:9d:ac:80:ef:12:f5:19:2c:26:d9:4d:9e:b8:
23:fe:ed:9c:2e:29:b8:29:69:d7:7d:01:9d:b6:9a:
8f:48:16:21:ab:76:a2:5c:d9:2d:00:e3:01:b2:a9:
64:0d:94:28:d5:76:be:c4:34:d8:f0:53:a6:60:47:
a1:cd:38:48:97:ac:fb:4a:73:f1:bc:d6:04:68:0a:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:81:9B:8C:2A:7B:F2:EB:D4:C6:35:BD:36:9E:51:76:DD:45:43:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl
X509v3 Authority Key Identifier:
keyid:78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:1e80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:f1:fe:ba:4f:78:c7:96:ef:a9:f1:ea:e2:f1:50:3f:3e:26:
85:9d:5d:d9:ab:9b:50:c2:12:c6:5e:1c:17:56:7d:87:76:fa:
d0:12:86:68:65:a8:62:57:ef:c3:f0:80:17:08:6c:2e:33:da:
4e:1d:c6:6b:59:89:af:13:ac:8d:a8:aa:06:ba:7f:19:89:f2:
73:fc:8f:3b:df:3a:62:c6:20:ee:1b:8b:a9:a5:16:4b:d6:49:
90:e8:70:23:62:a2:83:3f:d2:a6:c1:55:c3:e2:51:d4:fb:13:
18:8f:a9:58:00:2b:d9:00:ce:36:72:70:19:07:7d:3c:df:7f:
13:ee:8b:64:3c:9c:a1:de:08:8f:76:a1:b1:f2:60:03:14:d7:
ab:be:82:1e:52:42:03:48:f7:21:af:cd:4b:4a:96:55:39:9f:
2b:6c:e8:ce:8c:2a:23:a4:33:b2:20:48:44:f7:02:d4:14:99:
27:34:ee:5b:ae:94:ad:04:30:83:4b:d9:b5:f7:43:d6:e6:48:
98:62:0a:50:ba:b6:a7:cb:ac:1a:58:22:da:69:a6:35:8c:29:
81:aa:ba:63:f8:bc:a3:b9:12:06:16:30:00:4d:c1:e0:6f:b3:
b5:f2:da:f2:5d:fa:21:d6:20:fc:d4:36:a6:5c:0e:61:30:e9:
be:51:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:48 2025 by rpki-client