Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/dd75fe11-d53d-39a1-9abd-38b1623fb97f.roa
File: dd75fe11-d53d-39a1-9abd-38b1623fb97f.roa (raw, json)
Hash identifier: b9MkCaTM4Bx35wZ7QYqbt+ExKgZoJ+gZFWg/vZXR/As=
Subject key identifier: F9:FB:3C:FF:F9:5C:C7:A7:EE:29:3D:8E:42:D1:E7:C4:43:BC:94:54
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F4328584940397CDC13D7742CA80CBCA0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/dd75fe11-d53d-39a1-9abd-38b1623fb97f.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 38622
IP address blocks: 2607:f4e8:ac2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7c:dc:13:d7:74:2c:a8:0c:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=4544f136-9227-472b-9ac6-14bdf24aeee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:13:f2:b1:2a:0f:d2:0e:3c:5c:48:b3:90:
98:cc:3a:4d:62:19:ac:59:75:10:05:74:47:88:f0:
f3:63:6b:6e:89:a6:33:f9:c2:8c:08:c2:5e:39:b4:
10:bf:ec:3f:2e:e4:ad:2d:89:f4:9c:4d:6c:fd:58:
37:1f:dd:37:5d:13:7c:49:5d:b6:8b:ff:06:42:55:
79:e7:bc:9c:11:bd:0d:63:0a:42:cc:cc:8c:8e:32:
8b:92:87:a3:46:69:96:09:b6:2f:5c:0d:a9:24:ff:
e7:c5:7f:4d:71:f4:6e:d4:af:57:e3:6b:56:32:2f:
b2:4e:b6:bb:ca:13:20:47:ba:09:81:4e:2e:19:5d:
8a:c5:25:2a:a5:83:78:7d:7a:e8:58:a5:5c:7f:92:
f4:0e:29:20:83:ea:33:8b:0b:fb:bf:e3:49:c0:76:
c7:4a:6c:92:ab:1c:bd:9c:57:ef:01:2e:62:0c:02:
b2:f4:ec:ec:ca:55:e8:88:01:d4:0c:8a:58:d4:62:
6b:af:24:38:12:08:14:cf:ef:a5:3f:06:ed:58:97:
e2:92:c6:bc:cd:45:d8:6b:90:7d:e9:1b:4e:2a:4e:
04:07:02:4b:e6:30:59:be:07:ed:1f:da:a3:c0:ad:
40:7f:a9:dc:fe:62:4a:4f:12:56:3a:72:81:15:af:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:3C:FF:F9:5C:C7:A7:EE:29:3D:8E:42:D1:E7:C4:43:BC:94:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/dd75fe11-d53d-39a1-9abd-38b1623fb97f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f4e8:ac2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:2a:ba:fe:a8:50:96:60:ac:a7:ad:53:2c:62:91:8c:2c:b9:
26:b0:91:b6:e8:96:23:ba:c1:31:db:03:a8:c8:4c:c2:7a:63:
b1:8f:84:d2:60:9d:5d:e1:6e:4d:85:26:61:40:65:bb:8e:df:
90:20:d8:fd:31:ba:bb:d3:f7:b3:60:c0:ba:7a:31:fb:69:6d:
7e:5b:06:a7:fa:c5:98:c1:0e:0e:18:fe:cc:6e:6b:52:78:fd:
3e:bd:02:5f:ca:eb:42:90:0b:15:ba:e8:b6:d6:08:07:38:b9:
19:bc:8c:d4:8f:47:fb:07:e5:d9:5c:da:25:6e:12:fc:7f:8c:
55:cd:fc:5f:d7:73:90:83:ce:49:31:c9:2b:a8:21:6a:e7:2f:
ba:a3:17:11:05:48:a8:e3:49:e7:c8:cd:de:bf:55:95:12:84:
c9:d8:91:52:26:46:e3:9c:f5:2f:da:8e:87:66:20:c9:63:47:
81:2a:47:df:38:cc:1d:94:bc:58:a6:b2:87:c6:72:f2:48:2d:
87:64:4b:9c:9c:2f:da:cd:54:6d:24:30:5c:43:83:d6:6d:be:
dc:fc:ea:30:a5:99:e2:77:b8:15:c2:47:e5:1b:5a:49:44:ba:
ab:2c:9e:c9:f3:f8:01:ec:b1:6b:3a:d5:1b:bd:84:6c:dc:c9:
c4:8f:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:34:16 2025 by rpki-client