Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e038ac36-23fb-3212-9538-877203134655.roa
File: e038ac36-23fb-3212-9538-877203134655.roa (raw, json)
Hash identifier: M6r5lXdH+ael5Qh/1VzLI8PZzdcDPpCoXjGkaZ5YAWQ=
Subject key identifier: 3B:C5:D3:B7:81:F4:01:EE:92:8F:85:58:55:21:B2:A1:A2:99:AC:16
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F4328584940397B284603FD822CBA2D80
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e038ac36-23fb-3212-9538-877203134655.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 37277
IP address blocks: 2607:f4e8:ac2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7b:28:46:03:fd:82:2c:ba:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=330ec68b-047d-4c7c-87c6-8c7abf5c1eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:90:b6:bd:7d:bc:32:7c:d3:49:6d:7a:42:
3c:a1:d7:7b:5d:3e:3a:a1:81:be:6c:99:42:16:1b:
4c:5c:59:5a:9d:4e:fa:10:f1:56:6c:f2:6b:f8:c8:
29:84:8e:9f:d9:04:7f:30:0a:cb:d3:9e:4a:d7:9e:
4c:88:e1:5d:ff:6d:b6:6a:5b:55:0c:21:f2:03:0e:
26:83:7d:7d:7c:b6:60:bd:78:67:66:12:2a:0d:dd:
58:c8:f3:0b:58:f6:70:a8:b7:06:68:c4:c1:14:6d:
02:87:c2:d1:d6:db:d7:67:6b:a8:90:d8:3e:bd:e5:
b7:57:10:20:3c:09:7c:39:23:ba:7e:37:ae:7a:77:
a5:7a:86:b8:20:5a:1c:5d:4c:e6:67:24:a9:a3:e9:
34:cf:ef:5b:68:17:53:26:75:25:be:22:b5:3f:08:
36:4a:32:0e:be:10:64:ef:e7:e2:f1:49:15:a3:18:
1f:58:1e:85:26:f2:1d:5f:fe:8a:3f:04:ca:40:7c:
94:44:03:e6:88:a4:be:07:2a:1e:01:14:4a:ed:c7:
5a:33:2e:f3:c2:fe:77:5b:b7:de:3a:ea:cd:3f:33:
72:03:ba:b2:bb:f6:c2:4d:da:35:e6:22:07:19:0d:
3f:d3:10:ba:a9:23:d7:e7:da:0e:d6:aa:f5:17:eb:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:D3:B7:81:F4:01:EE:92:8F:85:58:55:21:B2:A1:A2:99:AC:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e038ac36-23fb-3212-9538-877203134655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f4e8:ac2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:50:0e:fe:3e:a7:c7:37:df:42:03:9d:5a:7f:6e:f3:10:c2:
d7:51:ad:c1:06:91:cf:44:8c:02:dc:a4:c6:43:2d:48:72:61:
85:3e:f6:34:0b:77:84:e8:15:ab:88:5b:e2:9a:6d:5b:be:85:
14:1e:df:f8:85:0a:82:55:c1:03:02:6a:4d:79:0c:61:ee:23:
7f:32:ba:02:d6:5e:89:d2:96:a3:8a:ad:d7:ba:2e:51:3d:cf:
a0:3f:dd:38:17:83:7a:1f:05:67:3d:46:3d:f2:58:21:b4:c2:
f5:53:4e:77:6f:6a:5a:37:38:16:f7:11:db:12:72:56:33:65:
7b:0a:5f:24:bb:54:84:a6:00:af:e6:2b:b9:3b:4e:23:5d:b5:
ef:5b:6b:d0:95:26:fb:4b:ea:02:0d:fe:7c:ad:a9:f5:0b:fd:
ef:b3:bf:dd:58:3f:87:12:f2:98:60:2e:34:5d:4b:be:08:97:
7b:08:d6:f7:cc:c9:01:1d:e0:9a:42:82:67:03:22:fa:02:6a:
bc:5a:67:2d:6e:53:06:bf:1b:19:5d:f3:b4:81:cb:5f:9e:e7:
0f:8c:d9:6e:2f:41:dc:58:3c:92:52:a1:ec:3d:85:6c:be:df:
ae:37:cf:28:86:59:72:d5:a7:a5:22:c1:69:53:f0:82:ff:37:
14:fe:ea:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:36:22 2025 by rpki-client