Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa
File: bceabade-34a5-3fd7-aa22-752619bc3467.roa (raw, json)
Hash identifier: BDCLwX0VEZ0u1RwOqCrwqRw8ze4qRnmWoOWwNOB/9mE=
Subject key identifier: C3:AA:54:BF:DF:56:1E:87:B2:B2:CD:4C:4F:BE:77:1E:9D:1A:59:3F
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E59BD553175732DE80F9D880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 396593
IP address blocks: 2620:74:2a::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d5:53:17:57:32:de:80:f9:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=ba4f804f-e71c-4cea-9e65-d1f5377e90a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:39:9d:e9:f7:80:46:62:61:d3:00:d1:e0:
62:32:8f:43:64:fa:a5:d9:c4:0c:45:99:d3:fd:2a:
eb:f3:2a:7c:80:3f:d2:48:31:ea:c0:22:40:3b:64:
a9:dd:16:eb:22:3c:4e:f7:02:18:45:a7:80:70:41:
fc:e9:b8:c8:de:e3:bb:3b:02:74:73:1f:58:71:8e:
bb:ed:34:fb:ea:fa:d4:68:b5:13:ed:f7:ce:cf:70:
83:ee:8d:84:81:ed:7b:b1:48:bc:40:1a:86:03:fc:
b4:88:4f:b5:61:1a:01:89:13:1d:32:0e:7c:1f:9d:
af:89:a5:b4:45:59:71:89:f0:73:b0:4f:dd:c6:71:
8c:33:41:d5:b2:be:88:70:16:24:39:29:3a:d2:36:
ee:6d:42:dd:1b:df:6b:9d:a7:01:43:e6:7a:d7:30:
be:81:e4:95:47:b1:43:ab:e5:c9:a3:c4:0c:44:b2:
e7:f7:ba:81:ee:43:ef:32:de:e0:97:03:dc:30:28:
95:8f:6e:d1:ca:ce:31:ee:b8:d6:02:1f:88:64:dd:
f5:3a:4d:b7:b7:2b:2b:4e:6d:d1:ac:a9:04:38:18:
c2:3e:6c:cc:38:aa:e0:45:5c:1f:91:2b:75:99:05:
e2:c0:19:68:ba:95:35:e2:e2:fd:3f:6b:c4:c3:f0:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:54:BF:DF:56:1E:87:B2:B2:CD:4C:4F:BE:77:1E:9D:1A:59:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ad:c1:a7:fd:45:4d:88:6f:09:64:8a:eb:eb:a5:28:d4:fe:
4b:75:f6:4f:ea:cb:be:c3:d6:75:ad:33:8f:44:ad:eb:6e:b8:
3c:fe:ec:7f:30:c5:da:53:3b:d7:db:71:d6:6f:06:70:d3:98:
a5:61:9a:cd:ee:3d:bf:8f:76:31:c2:04:36:f9:52:3b:b7:2e:
fd:d3:68:0b:4f:0a:3c:ad:1e:d0:14:78:5a:69:d4:c9:91:91:
6b:dd:61:cf:97:59:f6:d8:06:20:ce:be:70:f2:28:6a:3d:2d:
44:cb:94:6b:3c:ed:c6:c2:c2:53:1c:9f:ed:5f:56:38:c4:80:
33:12:e9:60:ee:0a:0b:1b:bb:f6:0a:0f:30:6c:98:b1:5f:be:
d3:a8:0b:c8:5d:20:4a:5a:ae:3b:b1:dd:00:7e:74:ed:13:4e:
45:bc:92:64:58:cd:a3:5b:2e:6f:4f:62:da:df:41:6a:67:a8:
08:b3:07:1c:3a:dd:cf:4b:1c:23:2d:a0:92:7d:2a:aa:b0:1d:
d2:a1:b2:bc:88:81:4f:dd:fd:c2:d1:47:a2:da:62:eb:12:80:
d3:37:b8:2a:59:ff:13:7a:26:63:c0:07:f7:74:2c:7b:12:b5:
ac:b8:b6:38:b2:0b:d9:1e:f7:65:a4:c5:7f:24:ba:e6:b4:e7:
18:6d:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:22:27 2025 by rpki-client