Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa
File: 47a38678-065d-3329-a105-fa94cfdcfee1.roa (raw, json)
Hash identifier: PBALi6HXJuG2zP+OsDWKi86ZCr3mj19iEsVEWXAuxEU=
Subject key identifier: B8:C8:AF:BF:DA:89:B9:8B:3D:6A:19:AC:C5:BF:FA:86:95:9B:2A:FA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21128DA03D1940252708C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2600:5000::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:28:da:03:d1:94:02:52:70:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=cdd96257-f63c-429c-8db3-ca86a52dd60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:a7:18:a6:ec:1f:e8:7f:33:c4:82:1f:64:
44:96:0d:9c:c3:d9:3d:cd:99:97:58:64:82:b8:91:
dc:a8:de:01:29:14:db:c5:7c:cc:59:33:cc:95:79:
22:2c:b4:67:4f:9f:21:b0:ea:62:b7:1f:c4:68:28:
d8:9a:36:c2:ef:26:68:33:7c:a1:95:04:c3:4f:0b:
bb:60:68:dd:a1:00:39:31:33:e5:81:23:a4:54:85:
ed:b1:fd:73:be:40:28:c1:5f:e7:0e:42:f6:7e:5a:
2f:1e:1b:74:69:ec:48:41:a1:00:77:5f:a0:e8:30:
12:b6:cb:2c:07:a5:56:04:cd:d0:4a:de:e4:a5:78:
55:4e:f3:03:04:11:f6:89:56:42:7c:1c:e2:e0:e6:
7c:db:02:9d:3c:6d:19:91:6d:5b:08:c5:fa:ca:d8:
e6:05:d0:e2:be:89:6b:d4:1d:ab:7a:92:a0:39:ea:
a9:e4:9c:80:b3:5e:6e:81:8e:9e:07:c9:cd:ee:6d:
d1:65:14:48:c5:91:ea:94:13:5e:1f:48:95:1d:85:
84:ee:16:03:9c:56:43:3d:00:5d:19:0e:6d:f2:97:
f5:8d:06:c4:cd:a6:98:10:fa:d7:1f:1b:e5:25:63:
d4:27:76:04:69:dc:01:91:ee:50:a3:94:df:db:ce:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:AF:BF:DA:89:B9:8B:3D:6A:19:AC:C5:BF:FA:86:95:9B:2A:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:5000::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:4e:f6:93:bb:de:27:ec:b4:36:6f:08:bc:b9:b8:82:3e:62:
bd:d1:b1:20:2d:a9:e7:26:19:51:21:a9:fe:4b:1b:c8:7f:b4:
12:6d:34:13:64:f6:e6:23:bc:b8:da:81:13:05:90:1d:11:12:
1b:e7:24:c6:bd:70:07:12:f9:b0:a6:01:46:a8:dd:1f:d5:1a:
72:69:30:24:82:98:7e:0e:e6:31:d8:d6:c1:ad:b0:c1:f6:76:
d6:bd:ad:3d:6e:b8:89:3d:a4:d3:c7:a3:37:9c:38:7a:3a:2a:
10:7b:d7:95:af:78:7d:23:53:89:ac:80:13:d5:10:65:ea:4b:
a3:56:02:ce:00:3b:9d:da:86:be:12:16:43:14:70:06:d7:1f:
c9:ea:01:e6:c4:75:dd:23:2f:94:ec:cd:14:cd:c3:a2:53:8c:
4a:2b:8e:e2:83:9e:e6:65:63:85:64:b8:e1:6e:93:e2:a3:13:
83:b3:74:ac:f4:44:bf:1b:b3:90:d6:95:8e:2c:37:2d:1d:47:
0a:48:d7:1a:0a:c4:6f:4d:0e:d5:32:af:9f:9d:a7:49:d2:73:
fb:92:b7:46:93:62:15:13:b3:e0:86:21:5e:27:1a:dd:7e:49:
6b:40:ba:9f:00:9f:00:a2:0f:9f:c1:f0:7f:71:3a:59:ff:26:
9b:5c:02:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:40:09 2025 by rpki-client