Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
File: 4d1f008f-67a9-308d-9f82-30e56f078c23.roa (raw, json)
Hash identifier: IYpacZTUhKE8KsbQRn6t7IRprX2Mu6i0Ke9NXPP9I+c=
Subject key identifier: 86:5D:54:2D:05:C3:28:94:17:C8:E8:98:E6:DE:02:3E:66:A1:93:B2
Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial: 010D0C9F43285848FD56BB7745A2397CE73E7F40
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 30690
IP address blocks: 2602:f99b:a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bb:77:45:a2:39:7c:e7:3e:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=d386133c-b18a-497c-b20e-43c0564576a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:d5:e9:7f:be:5a:5c:03:f1:9d:7e:bd:b4:
50:5b:1f:be:2a:56:7c:49:5b:1a:4f:d8:84:19:c3:
3c:40:f1:62:ae:4c:a7:f3:35:30:be:15:4e:bb:46:
ee:8d:ce:d2:0d:ee:73:ae:fe:a0:46:46:ad:e9:41:
0d:4b:04:91:26:17:f0:d7:37:0f:28:b7:7c:23:bc:
18:0a:df:4a:f7:41:6a:c3:ff:e4:9b:85:9d:e9:5d:
25:77:d6:c2:11:00:9d:bc:31:40:1e:8c:1e:cb:c9:
2a:42:7b:02:c8:e3:bd:66:ed:72:74:9e:ef:06:23:
2a:28:bf:7b:f5:32:33:be:26:aa:5d:b3:dd:9b:b4:
3b:5a:b8:d1:46:c1:0e:1a:7c:5b:fb:ca:76:2e:81:
8b:57:97:7e:a1:a1:35:b5:9d:1e:77:e5:5b:2d:4c:
db:02:d5:c8:5e:8d:0a:17:c9:f2:86:e4:f0:49:99:
ca:95:d5:82:61:58:2c:bf:b4:85:6b:96:e5:58:06:
05:6e:f0:c7:69:78:5f:19:1b:be:48:10:53:3f:97:
93:44:d0:bf:be:c4:57:24:b8:8e:77:b0:fd:99:42:
b0:81:63:eb:15:64:35:6d:6f:18:79:fd:48:87:a0:
f5:b8:83:1e:54:ff:db:58:dd:c1:1a:df:fe:b8:fc:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:54:2D:05:C3:28:94:17:C8:E8:98:E6:DE:02:3E:66:A1:93:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
X509v3 Authority Key Identifier:
keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f99b:a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:e7:bc:82:62:d9:d2:6a:c7:df:03:ed:6d:62:e5:b3:24:26:
cb:c7:f7:ee:df:85:94:81:da:b3:15:c2:dd:a6:fa:61:b6:82:
55:cf:f8:49:18:34:fb:dc:24:f4:37:41:73:f4:cb:2e:06:e2:
6d:9c:20:ad:cb:e0:e5:d9:4a:69:f1:71:91:10:69:93:ef:45:
ec:b0:df:a1:44:59:e5:f8:1f:c6:83:72:ee:f1:5d:c4:34:c6:
50:43:e2:75:ca:28:4c:f5:5e:cc:a3:6b:81:c4:f1:04:07:5a:
67:8a:16:e7:3f:68:e0:50:1c:35:bc:1b:01:83:89:b8:ef:c9:
e3:d8:00:5a:ea:95:70:fc:98:a1:68:0b:b7:16:ea:1e:c0:a1:
a7:aa:85:b9:23:f8:30:db:40:2e:15:43:2d:3e:03:fb:92:a9:
94:56:33:00:db:a1:f6:c8:79:dd:b4:c2:59:9d:d8:9f:3c:e6:
71:1a:12:d2:ae:db:77:36:9b:b7:0e:41:a5:ca:e2:5f:3a:74:
95:58:27:4f:f0:c5:55:2b:8d:b0:bf:1d:5d:90:85:5a:f4:df:
cd:6b:f6:04:c5:3d:25:47:43:3d:3a:32:cb:0d:7d:87:19:ee:
bc:89:89:49:7a:9f:06:4f:68:34:6e:42:79:e1:f2:cc:df:a0:
0c:fb:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:33:57 2025 by rpki-client