Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa
File: b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa (raw, json)
Hash identifier: 9fqIA+b7/NVpXKBZTOEH+dP2yPZvcdZba6Yq5e8Cxy8=
Subject key identifier: 42:07:3E:C4:6A:27:CB:70:73:AA:C6:07:0B:62:2D:F2:58:DC:F6:6E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849244E8B77A8EADC95BC76B640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 22773
IP address blocks: 2001:578:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8b:77:a8:ea:dc:95:bc:76:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=babf40ed-e4bd-4de2-a00b-105437a29b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:d1:7d:df:5a:3c:b3:e0:a0:d7:b3:4b:13:
ba:30:ec:d5:0c:d8:53:09:63:65:7b:48:41:bb:3c:
60:bd:2b:8c:d9:e0:b2:ed:30:a4:51:f6:95:ed:27:
78:d9:b8:6e:fe:f4:4c:b1:06:3f:c3:0a:59:27:fb:
2d:57:34:72:e6:fa:7c:e8:a6:46:eb:7b:59:d8:32:
84:2c:df:8e:a0:7d:ea:dc:5d:83:e2:63:19:b5:0b:
2a:67:2d:fe:a9:a0:cf:e1:47:01:4e:37:db:74:f2:
0e:47:b7:d9:b2:17:aa:f7:cf:fd:bf:42:18:70:34:
55:e7:2a:30:7a:e6:25:6b:6c:b6:9d:61:fa:63:1d:
69:9e:ad:f0:4e:b5:65:f9:8f:57:e4:16:5d:b2:bb:
db:84:a6:6d:29:f5:a4:eb:5d:52:b7:31:3b:e1:30:
cc:9b:e6:87:b3:23:03:4e:2e:07:81:ab:66:60:34:
30:3c:d0:61:a5:e8:58:4b:ff:2e:68:98:26:95:0f:
81:fb:4e:30:8f:c2:5e:ff:4c:01:38:c3:1e:4d:02:
78:06:d5:94:ab:aa:d7:8f:1b:98:ce:72:93:81:5f:
6f:8a:c7:57:d9:f7:fe:86:b3:39:ca:39:9b:bb:c9:
90:ce:f1:cd:55:8f:fd:ad:89:e5:b8:a7:f1:4f:38:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:07:3E:C4:6A:27:CB:70:73:AA:C6:07:0B:62:2D:F2:58:DC:F6:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:578:2b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:32:2e:0c:69:d7:b6:39:c9:eb:cf:0a:db:ae:0a:f7:05:63:
b6:e8:bf:a9:5a:fb:f0:a0:05:c3:33:92:b9:9b:95:32:d4:4a:
26:02:e3:97:86:e4:12:1e:57:3f:e2:df:ca:ed:47:ba:b9:e0:
4f:7d:64:7d:6d:34:ac:01:84:2e:03:5c:e1:c7:c6:3f:7d:32:
46:ae:b7:06:cc:f9:10:56:7d:57:c0:cf:2f:e7:90:da:b3:3f:
a7:f9:63:08:c9:e9:25:a6:87:97:94:0f:c4:29:96:a4:d0:d4:
56:46:e3:50:1c:43:ba:d3:cc:5b:2e:91:62:8c:87:06:1a:d9:
fd:44:55:8c:08:b3:ec:20:fa:9f:33:df:77:a1:f0:a4:d7:82:
da:c7:61:a9:48:1e:2d:05:99:52:8d:61:aa:f8:9b:57:c3:1a:
99:bc:f9:dd:72:de:a0:76:45:91:58:8d:55:17:2b:f1:e5:b6:
fd:0e:f9:8c:7f:4f:e6:32:4d:e9:5e:12:68:b6:45:56:67:10:
3e:f5:b2:1c:7f:61:53:64:02:80:21:69:d6:64:93:38:88:45:
e8:21:87:ee:ae:27:2a:25:c0:be:91:b0:4e:27:96:2e:d1:c0:
63:40:04:29:d7:d1:2b:b5:60:fd:9d:16:55:bc:5a:a4:ec:e6:
53:2b:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:17 2025 by rpki-client