Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa
File: 1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa (raw, json)
Hash identifier: sFNIZK/r9TnWYNE9TqY2nc0CRRrInVEzpG5tIDDAnoQ=
Subject key identifier: D0:05:80:8E:25:2D:26:C2:4C:F6:93:D1:C0:15:2A:02:9A:90:E4:4B
Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Certificate serial: 010D0C9F43285848DD3BA1B28A7B0F7327F65080
Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 12233
IP address blocks: 2604:6040:a20::/48 maxlen: 56
2604:6040:a25::/48 maxlen: 56
2604:6040:a27::/48 maxlen: 56
2604:6040:a70::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:a1:b2:8a:7b:0f:73:27:f6:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=1ec724d0-e11d-4b15-b61b-5a8b4c831895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:f0:20:14:b4:43:9e:e1:e1:3b:d8:7f:5f:
ea:41:d9:21:22:dc:3d:38:3a:9e:de:93:da:89:1f:
02:d9:f6:54:3a:4e:5a:63:22:29:d9:b8:25:e0:25:
38:8d:fb:fa:44:e7:ec:e3:84:7b:64:28:6e:9a:a9:
df:50:43:1b:9f:a4:c6:60:5a:86:c6:6c:b1:64:29:
35:23:c6:3d:15:b1:5e:fc:84:84:dd:05:8d:c8:39:
57:69:fb:b5:e4:f4:76:21:6f:c9:14:f5:4c:f1:e4:
09:2d:3d:d2:f3:42:97:f5:32:ec:98:6d:5c:6c:82:
ae:3b:11:17:bf:cc:66:2d:7c:e7:f8:3e:a8:7f:28:
c1:38:ba:58:2d:c8:86:6c:1e:b4:ed:7c:1a:3c:81:
44:8f:89:0d:d0:78:2b:90:79:7a:36:d1:8a:0f:66:
33:58:48:6f:cb:ab:72:b4:a6:c1:43:1f:bc:64:ff:
59:ae:56:8e:0a:fc:da:f7:6e:b3:72:5b:0e:da:c9:
39:e3:d8:be:8a:6a:56:2f:4f:47:64:44:c9:f0:32:
30:fe:fc:78:0e:39:e9:2d:78:b7:dc:a5:c4:aa:ac:
47:27:b5:47:71:72:6b:07:75:fd:ad:ba:ce:7a:72:
47:48:c2:30:b8:84:3d:82:77:04:f8:b6:75:2d:d3:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:05:80:8E:25:2D:26:C2:4C:F6:93:D1:C0:15:2A:02:9A:90:E4:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl
X509v3 Authority Key Identifier:
keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:6040:a20::/48
2604:6040:a25::/48
2604:6040:a27::/48
2604:6040:a70::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:90:b2:9f:6b:2f:61:ca:36:ab:7d:54:5e:90:b8:4c:45:23:
bf:83:6f:ba:b9:bb:3d:61:45:13:95:ec:ef:88:60:b8:c7:41:
c4:2d:21:ee:a2:15:03:75:84:65:13:f5:33:b9:c6:5d:1e:ab:
73:2e:50:a0:28:a8:ed:10:ff:8d:8c:c2:ca:cd:87:ea:eb:dd:
85:f9:4a:5b:7e:81:d6:4a:65:0c:f1:a9:f6:04:b6:ab:23:c6:
85:bb:bc:83:1e:10:8e:0c:f9:b9:9a:07:4b:e3:11:ff:ca:18:
c8:b4:81:7e:a3:c3:27:1e:4a:09:e2:d5:b8:90:0b:11:1c:c6:
3f:4a:bc:1a:b3:d0:08:b0:10:16:4e:de:9f:00:8d:8a:2e:4c:
bc:bf:af:3d:d9:91:ad:e3:a7:c8:45:4c:c3:05:18:c8:17:78:
e0:b9:86:02:82:15:36:fd:15:9a:18:b4:b0:c7:c7:96:97:1f:
50:31:c8:c2:2f:91:a7:7b:7f:9c:f3:35:f6:38:24:6e:09:a6:
cb:c7:ce:1c:ad:e4:b3:11:9b:62:10:fc:18:bc:c5:f1:6c:c5:
bd:6f:a2:7d:13:22:18:c6:f0:c0:a1:3e:a0:c2:6a:6b:42:d5:
bf:48:a2:5e:1a:df:e0:34:a2:5a:b8:26:5f:f6:61:45:27:75:
44:91:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:34:37 2025 by rpki-client