Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa
File: e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa (raw, json)
Hash identifier: jQjmIRWQoTEv/kmeBJk9Vuz1BKCKi0NtfNTezW3mMvU=
Subject key identifier: 1B:2C:B0:23:99:C7:28:16:1E:6C:17:AC:C5:D4:D9:FF:C0:79:F2:A6
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A830B057F0BB87439018B5C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 9009
IP address blocks: 2607:740:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b0:57:f0:bb:87:43:90:18:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=58730398-1e73-45ec-8db0-0adbb949b10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:0c:12:74:37:e8:77:5d:65:aa:35:43:ea:
39:15:4b:6b:37:e3:df:33:45:52:b2:15:02:91:53:
79:a0:00:c6:6e:9c:a0:2e:e6:34:53:6c:df:c2:c3:
18:2d:a4:ca:14:88:dd:48:59:fb:45:8d:4d:c5:82:
3a:fa:6f:d3:bb:19:d7:65:cd:5e:37:02:a8:8b:59:
b6:91:d4:79:df:0c:b3:93:d3:42:ec:6f:7b:27:48:
c3:a3:6a:bf:a6:72:c9:41:ee:66:50:46:0a:be:73:
a0:bd:9c:27:3e:37:fd:57:76:d7:11:6c:ff:c9:68:
56:51:52:3c:1c:1a:3e:d5:18:e8:3a:e0:55:2e:cb:
06:2e:a4:c5:15:13:86:bd:2f:da:70:15:71:47:c1:
a6:0d:9d:b2:85:20:7c:81:6e:f9:75:4d:53:d4:93:
e1:74:a8:9d:34:c7:4b:b1:38:ea:04:f2:98:e5:74:
1f:80:38:d0:8a:9b:68:6f:a9:23:e3:08:1c:e9:c2:
6e:1f:25:eb:7f:65:cb:52:1b:bf:69:98:c2:61:ef:
e7:f8:ed:90:d0:66:07:5d:d3:fa:83:88:0b:b0:44:
5c:b8:6a:64:57:d9:84:ed:36:08:76:60:5c:c2:9d:
00:27:d6:ab:8d:d2:0b:38:a4:99:b0:87:0d:ac:67:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:B0:23:99:C7:28:16:1E:6C:17:AC:C5:D4:D9:FF:C0:79:F2:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:dc:2c:a5:79:81:03:8e:99:17:ed:22:f5:6c:c7:c1:bf:85:
15:7b:32:74:8b:36:90:d5:ad:45:dd:10:33:c5:b0:9f:55:01:
36:22:20:be:82:0c:fd:4a:56:c3:35:22:67:8b:f6:ad:82:7b:
c2:05:54:87:ba:74:a3:e2:97:d1:c2:69:1c:93:75:00:39:7e:
0d:3c:e9:51:cd:e7:ac:11:64:76:73:82:0b:9c:f3:6e:a0:37:
19:b9:0b:8c:7e:e5:2e:c6:de:91:15:f2:25:c8:6c:7c:f5:9f:
38:99:0c:dd:3b:83:2d:3c:48:25:e3:4d:0f:bf:60:b8:6e:a0:
98:c4:0b:98:97:fa:a9:fe:5f:c7:f1:47:30:e2:52:73:f6:0a:
76:87:ad:62:c7:99:f4:6e:72:ca:28:58:d4:41:d7:f6:cf:86:
89:dd:a0:6b:ae:28:53:dc:5a:29:67:b8:d9:0e:16:8a:f2:82:
22:3f:80:92:4b:ed:dc:94:22:86:12:d5:ab:17:e2:f1:12:e2:
80:aa:a8:72:84:ee:e8:df:fe:3d:60:b7:4e:01:a5:5a:38:ec:
56:48:4c:77:40:e6:10:a2:b5:38:c3:f3:85:6a:9e:81:3c:8d:
35:cf:ad:27:a8:e5:71:11:f0:54:2b:97:1f:4a:b5:48:5c:32:
f5:4d:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:52:06 2025 by rpki-client