Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/fac4c2f8-267a-3690-836d-512c52e5026d.roa
File: fac4c2f8-267a-3690-836d-512c52e5026d.roa (raw, json)
Hash identifier: Q8SmmICoLipizr4fwPH5p2qt4roumNKdhGIgtf/52ZE=
Subject key identifier: 38:2E:BB:8B:F0:B3:06:7F:F1:3E:E7:67:C6:67:CB:9C:20:28:CE:65
Certificate issuer: /CN=9035b0dd-99f7-4bcd-9674-bde532fa824a
Certificate serial: 010D0C9F43285848EC96A701318DD400F3CAA040
Authority key identifier: 2A:0D:D1:39:6E:7D:DC:60:9D:9F:C3:98:50:D4:39:2A:2E:8F:2C:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/fac4c2f8-267a-3690-836d-512c52e5026d.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 401288
IP address blocks: 2607:cc40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/9035b0dd-99f7-4bcd-9674-bde532fa824a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/9035b0dd-99f7-4bcd-9674-bde532fa824a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a7:01:31:8d:d4:00:f3:ca:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9035b0dd-99f7-4bcd-9674-bde532fa824a
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=6bb2ae6b-a57b-430c-baee-37fbb5aa620f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:e2:83:b1:4d:a5:a2:69:c8:7b:c6:fc:9f:
5e:ef:99:e4:71:7f:6c:28:40:60:2e:66:8b:bf:2f:
b8:45:0b:6e:d2:eb:4d:82:70:53:79:5d:75:0f:a1:
84:ac:a8:e8:c5:91:86:9a:88:91:27:e8:d5:9e:1e:
77:8d:14:f4:26:7d:f0:9f:50:fb:16:20:ad:ab:a4:
df:1d:99:ce:37:c8:a8:ff:d2:c6:4b:7d:67:f6:28:
3a:83:c4:82:47:a6:f4:da:85:ae:90:3e:e5:b4:ee:
2d:22:c5:27:1f:16:14:d3:8e:84:01:5e:81:b2:38:
52:9b:72:63:b7:d4:ab:30:a0:59:1a:cb:b2:35:77:
97:0d:5b:92:d4:4e:b7:b3:3f:bc:ee:c6:a0:3e:42:
41:34:6e:f4:fb:e0:29:36:bf:1e:74:95:7c:cf:ff:
bd:f1:1d:fa:21:51:02:1b:1f:dd:36:31:d5:8d:2c:
86:f6:42:b4:92:f2:21:7f:7a:e0:a5:ce:ac:ae:a9:
be:82:10:b1:bf:40:0d:dc:5d:fc:5f:d5:dd:18:35:
ff:c3:1b:4e:66:76:aa:c1:91:55:25:b7:d5:55:63:
b7:77:d2:bd:53:69:cf:93:f2:31:f2:4d:04:27:c6:
ce:a1:e2:e1:bd:20:52:1a:e5:b0:1e:18:ba:a3:79:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:BB:8B:F0:B3:06:7F:F1:3E:E7:67:C6:67:CB:9C:20:28:CE:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/fac4c2f8-267a-3690-836d-512c52e5026d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/9035b0dd-99f7-4bcd-9674-bde532fa824a.crl
X509v3 Authority Key Identifier:
keyid:2A:0D:D1:39:6E:7D:DC:60:9D:9F:C3:98:50:D4:39:2A:2E:8F:2C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:cc40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d4:3c:d8:d8:0d:00:15:3d:2c:cf:4a:58:5a:c8:0a:c2:b4:
52:51:93:32:aa:45:a3:8a:0d:fa:b7:14:35:16:51:82:c8:29:
53:50:af:01:43:58:31:11:f8:16:23:17:43:b6:8d:fc:06:99:
22:42:4d:b4:ca:ae:1a:6e:5f:59:2e:e9:92:92:31:78:d0:05:
04:ba:61:76:28:ad:0a:85:30:d7:1e:18:e7:70:2d:a1:d7:e8:
0a:78:28:c5:45:2d:d6:e0:7f:41:69:63:62:0f:9d:21:b5:dd:
f8:ad:ca:93:a0:1b:e9:ae:2d:ff:d8:4b:a4:1b:59:41:49:bf:
f3:7e:24:3e:a8:71:ef:ce:bc:9d:2a:20:eb:cb:c1:f0:ac:8b:
89:c0:a4:3e:a6:8f:5a:67:fd:a2:9d:b6:f7:00:ca:2c:92:15:
08:ef:33:a0:ca:16:c6:cd:56:46:db:23:89:0d:93:15:65:cd:
97:6e:21:39:56:06:e6:db:46:e9:e5:27:2f:f4:09:26:a9:56:
ae:0f:03:c6:7d:16:59:54:d3:86:a7:7e:7e:29:fa:d3:08:c2:
be:87:2e:11:27:a7:2a:5f:ac:2e:4f:01:24:b9:90:36:ed:d6:
0a:a2:42:55:2f:2b:db:f6:01:60:36:3c:ec:b0:96:df:54:c8:
b2:bb:63:f9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjslqcBMY3UAPPKoEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAzNWIwZGQtOTlmNy00YmNkLTk2NzQtYmRlNTMyZmE4
MjRhMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NmJiMmFlNmItYTU3Yi00MzBjLWJhZWUtMzdmYmI1YWE2MjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpzig7FNpaJpyHvG/J9e75nkcX9sKEBgLmaL
vy+4RQtu0utNgnBTeV11D6GErKjoxZGGmoiRJ+jVnh53jRT0Jn3wn1D7FiCtq6Tf
HZnON8io/9LGS31n9ig6g8SCR6b02oWukD7ltO4tIsUnHxYU046EAV6BsjhSm3Jj
t9SrMKBZGsuyNXeXDVuS1E63sz+87sagPkJBNG70++ApNr8edJV8z/+98R36IVEC
Gx/dNjHVjSyG9kK0kvIhf3rgpc6srqm+ghCxv0AN3F38X9XdGDX/wxtOZnaqwZFV
JbfVVWO3d9K9U2nPk/Ix8k0EJ8bOoeLhvSBSGuWwHhi6o3lF/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDguu4vwswZ/8T7nZ8Zny5wgKM5lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDM1
YjBkZC05OWY3LTRiY2QtOTY3NC1iZGU1MzJmYTgyNGEvZmFjNGMyZjgtMjY3YS0z
NjkwLTgzNmQtNTEyYzUyZTUwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTAzNWIwZGQtOTlmNy00YmNkLTk2
NzQtYmRlNTMyZmE4MjRhLzkwMzViMGRkLTk5ZjctNGJjZC05Njc0LWJkZTUzMmZh
ODI0YS5jcmwwHwYDVR0jBBgwFoAUKg3ROW593GCdn8OYUNQ5Ki6PLOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDM1YjBkZC05OWY3LTRiY2QtOTY3NC1iZGU1
MzJmYTgyNGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfMQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA71DzY2A0AFT0sz0pYWsgKwrRSUZMyqkWjig36txQ1FlGCyClTUK8B
Q1gxEfgWIxdDto38BpkiQk20yq4abl9ZLumSkjF40AUEumF2KK0KhTDXHhjncC2h
1+gKeCjFRS3W4H9BaWNiD50htd34rcqToBvpri3/2EukG1lBSb/zfiQ+qHHvzryd
KiDry8HwrIuJwKQ+po9aZ/2inbb3AMoskhUI7zOgyhbGzVZG2yOJDZMVZc2XbiE5
Vgbm20bp5Scv9AkmqVauDwPGfRZZVNOGp35+KfrTCMK+hy4RJ6cqX6wuTwEkuZA2
7dYKokJVLyvb9gFgNjzssJbfVMiyu2P5
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:44 2025 by rpki-client