Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa
File: f11448a6-a06a-3ba1-854f-63ab44df87ab.roa (raw, json)
Hash identifier: p/vLT3qiKV9lEC6OdP4rMaKzmiswnQ4XsPJYuVAhsq8=
Subject key identifier: C9:90:E4:AC:CF:36:B1:63:18:2D:E5:19:E8:43:F9:3E:37:4B:D9:79
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848F9268DF4ED7ACB5A028C3580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397198
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:8d:f4:ed:7a:cb:5a:02:8c:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=83383ff1-f69f-4b54-b84a-def5b7d09611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d6:6b:dd:ed:b3:53:b3:63:02:a9:0c:9d:88:
f5:c8:5f:72:4e:2e:bc:50:5a:70:c4:98:17:c4:96:
e8:64:1b:89:c3:5c:45:0e:fe:8f:43:7f:e4:3b:e0:
f1:b1:07:49:55:0d:c7:c2:64:63:89:59:c1:b5:b2:
a8:45:e8:03:16:31:b0:e5:49:dc:01:8d:28:e2:d2:
e6:0c:b3:14:7e:52:a8:93:d7:64:8f:6b:50:2f:f6:
64:a8:4e:f3:5d:d9:9a:a0:4d:07:19:cd:be:63:d8:
3c:1b:4f:fe:0e:c1:b0:ea:df:5a:fc:fb:60:d1:ad:
10:17:44:e8:9f:10:ce:92:6d:c7:e0:4a:58:25:1d:
90:38:2e:0b:92:07:64:16:bf:47:18:6c:a2:13:bb:
83:da:a9:6f:63:be:34:34:12:75:7f:d4:9e:31:e4:
8a:80:04:8f:69:c2:6d:31:7d:27:f1:bc:b0:87:10:
ab:f7:36:be:3c:65:a6:1c:d9:ab:aa:ab:f6:46:a2:
4f:5e:d9:8d:b3:e7:50:0a:19:35:66:42:00:4e:f3:
96:00:e4:03:39:18:ae:7d:de:e9:90:e6:ff:3c:7f:
7d:3b:1d:54:a6:72:ee:18:2b:8a:7c:d2:8d:63:e2:
0b:1c:28:c5:19:56:fb:28:23:a5:d8:8e:88:f8:72:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:E4:AC:CF:36:B1:63:18:2D:E5:19:E8:43:F9:3E:37:4B:D9:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:a6:c2:5a:a7:83:a5:3d:71:4f:06:90:02:6a:1e:7a:00:ce:
2b:28:09:68:ce:5a:bd:9a:17:e1:81:80:22:76:1e:b8:b4:37:
2b:e4:9c:6a:5b:f3:b3:93:85:bf:ad:b8:c1:a4:ba:06:33:b6:
58:ee:ab:fa:0f:c1:23:8f:59:09:b4:4c:df:15:70:0b:e6:90:
79:4a:ca:c1:01:4f:d2:4d:af:14:e0:a9:1a:a4:1a:be:2d:d4:
92:18:51:15:79:d7:c2:66:0f:17:ed:cd:a1:71:72:71:e0:64:
9c:d5:cd:b4:86:16:fe:b4:55:5f:d7:f6:1d:62:f2:b2:d5:c3:
87:05:99:b6:90:22:80:46:93:a6:77:fc:62:c9:68:16:98:32:
39:97:cc:0a:f8:d9:cc:61:4a:34:28:7c:d5:8d:06:cc:c4:78:
07:83:2e:da:66:52:bd:ff:e7:f6:98:c2:e9:48:bb:b9:e3:98:
e7:22:c2:37:42:db:81:94:5e:b5:e7:25:ac:82:74:38:b3:a0:
c6:1e:54:d6:72:13:bf:06:ee:1c:94:ee:78:32:d5:6e:58:4d:
e4:78:bc:b7:4e:9a:0a:8a:6b:dc:a0:76:42:79:7c:71:a2:43:
8b:fc:3c:b3:7a:ce:d4:fd:79:9c:bc:94:38:5d:65:23:8b:23:
80:a6:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:05:10 2025 by rpki-client