Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bf76619d-b2c9-3911-a1c3-d8634f2dec52.roa
File: bf76619d-b2c9-3911-a1c3-d8634f2dec52.roa (raw, json)
Hash identifier: A9SmvPP9Wh0h3/B5jZzHc1otD4EsL8iqMylZrpSuwqM=
Subject key identifier: CD:5A:69:99:1A:1D:55:63:80:3C:7B:40:CF:62:CC:7A:10:11:BB:5F
Certificate issuer: /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial: 010D0C9F43285849393E6E1DF4B9B762BE6B6840
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bf76619d-b2c9-3911-a1c3-d8634f2dec52.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 400550
IP address blocks: 2602:fb9e:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:6e:1d:f4:b9:b7:62:be:6b:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=c436a4bd-624a-4be1-956b-337dc4ebb84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:91:b7:52:04:bc:a8:c4:ee:f8:fe:a7:28:
cb:ad:5f:c1:6c:56:f7:5b:5c:20:d6:6e:52:76:6d:
ca:25:ba:39:3c:7b:bc:f1:06:06:d5:60:8b:f4:9b:
c9:38:96:1c:0c:3c:35:b5:40:18:47:c9:ce:a6:11:
ab:82:a1:0b:e6:74:9c:6e:91:e5:62:c2:8d:ea:13:
91:47:b2:88:fb:f5:76:fc:bd:71:9a:66:b4:5d:f7:
70:a3:20:94:a2:63:cd:c9:8c:36:65:30:9c:37:a3:
b1:f2:dc:47:a9:b4:d8:8b:e6:49:81:29:a5:f5:ee:
69:77:07:14:9a:74:f9:5e:2f:1d:3f:50:53:4b:93:
c0:8d:c0:28:5d:ba:1c:0a:16:8d:72:7f:c3:a1:ce:
e4:20:41:92:0a:79:52:1f:44:60:b1:60:2c:1a:52:
ab:84:6d:42:85:a4:9b:cb:20:b8:ed:2f:9c:5a:63:
30:14:b8:bc:c6:f5:4e:62:0f:43:a8:5e:7c:52:ef:
5c:81:1f:13:26:d4:17:06:ab:aa:8f:95:1f:62:0d:
1f:ad:e1:d4:a6:05:90:c8:5a:5c:0b:ec:42:78:86:
6b:fa:06:c9:d3:19:51:eb:a6:01:65:3a:fa:0d:db:
cc:9f:4c:5d:f2:aa:de:6a:2d:2f:2c:4a:ae:d8:72:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:69:99:1A:1D:55:63:80:3C:7B:40:CF:62:CC:7A:10:11:BB:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bf76619d-b2c9-3911-a1c3-d8634f2dec52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
X509v3 Authority Key Identifier:
keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb9e:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:a0:3f:21:55:b9:97:c9:00:cc:a1:78:a1:33:ff:07:69:80:
67:d5:d9:04:ea:1a:8e:6a:f6:9a:3f:87:e9:85:8a:a7:32:e4:
c4:f8:34:c4:59:ef:a4:e6:77:7e:16:aa:41:1c:21:cf:de:2f:
bc:0d:45:d5:b1:5c:6e:27:79:83:17:1d:d8:7d:12:da:14:bc:
58:41:08:c7:76:ae:fe:be:30:a0:d5:01:e6:48:f5:fb:1b:fb:
e7:5b:7f:59:a9:45:2d:e9:d1:cf:ab:97:be:80:2b:9f:4b:e9:
3a:7f:77:8a:98:37:33:0b:77:67:2a:63:88:45:f0:49:10:0a:
a5:93:24:ba:5a:75:71:57:54:04:37:ad:f4:ef:57:f4:75:a2:
55:7a:0a:79:83:ab:80:70:78:c2:8b:75:b7:62:aa:df:e9:fa:
8e:03:ba:9d:82:4c:7a:36:97:2a:d8:7e:9f:0c:2a:d3:14:25:
ea:10:62:8c:54:ce:0f:4e:3d:d8:cd:3a:fa:f5:e8:6a:5e:db:
6a:9e:43:e9:e8:08:b8:02:19:52:11:32:35:2d:b5:6c:00:ce:
99:fc:1d:77:2a:90:8e:e9:7e:a6:3b:6f:4b:05:36:b4:2c:c3:
26:28:df:2d:a4:6f:c1:72:37:67:32:72:3a:dd:b4:49:0f:5a:
e8:c7:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:52:34 2025 by rpki-client