Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
File: 78a6b278-a386-3ab9-ae89-23d472527cd2.roa (raw, json)
Hash identifier: BhdjJBY7tC8EzfYOT3b7iasPGz799HKpzW2bydxxb6A=
Subject key identifier: 5E:3F:7F:FC:FD:47:8E:AC:7B:A5:CC:DF:F3:C2:DB:1F:8B:F0:68:D2
Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621
Certificate serial: 010D0C9F432858490B4C22E687B8B896F420A73C
Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 6939
IP address blocks: 2605:3ac0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Apr 2025 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:22:e6:87:b8:b8:96:f4:20:a7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=8c615aa6-ac31-43e0-a4b9-a8693e234790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:16:c3:e5:1a:c8:bf:80:6c:fd:92:6e:66:
79:f2:a3:e7:69:42:c8:59:36:2b:6d:b1:f7:8d:d1:
1f:7c:30:19:3e:58:57:16:0c:a9:31:b1:68:0e:dd:
61:69:e1:71:70:b2:82:9a:6a:55:ad:11:2d:c2:6f:
90:60:d8:07:06:80:52:db:3b:1d:c6:3e:2e:ed:0f:
6f:cc:20:ec:1e:6d:89:47:9c:86:1a:73:f1:52:f4:
2a:de:e6:6b:65:de:fe:10:5c:ae:e1:10:21:06:d5:
b8:fd:f2:f0:37:7b:93:9c:27:7d:5b:d4:2a:e2:dc:
2d:d0:f3:35:e1:44:a5:23:86:7d:9e:67:6d:bc:32:
70:e6:fd:29:06:42:90:86:bd:fc:2b:35:7d:9c:87:
70:ae:2f:65:af:00:94:3e:92:01:74:2b:b7:ac:9c:
13:08:44:5a:5a:3b:99:60:bf:e2:ad:44:c6:7e:91:
76:fc:de:fc:05:38:40:9b:b8:b9:df:70:c1:67:90:
00:d3:d4:50:60:eb:58:90:bf:85:e3:d5:4f:14:4f:
64:be:14:8c:0f:4b:5f:75:9a:ec:bc:4b:2a:5e:72:
92:21:25:40:a0:cc:fa:b0:ca:79:ba:1b:69:43:81:
fe:af:b8:af:b4:77:1b:d2:28:6f:5b:42:e8:6a:76:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:7F:FC:FD:47:8E:AC:7B:A5:CC:DF:F3:C2:DB:1F:8B:F0:68:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl
X509v3 Authority Key Identifier:
keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:3ac0:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7b:df:e9:72:02:88:11:7a:bf:78:7d:92:83:8e:98:e6:dc:
03:91:6b:fa:c3:6a:aa:7a:94:c1:f3:44:fb:78:30:e2:f4:a2:
32:d8:f0:6a:70:25:0d:fe:29:a3:2e:66:8d:65:86:6c:1c:8e:
40:81:07:72:34:44:04:93:5a:27:5a:5b:91:e8:63:1e:ff:1d:
87:e0:3b:8c:b2:a3:c8:64:77:c8:01:ea:f8:71:45:1c:42:7c:
f9:50:6d:02:da:bb:00:1e:4b:ea:f0:4f:a7:98:ce:d1:f1:e2:
9e:b1:20:f9:c6:5b:37:69:10:a0:2f:a9:a1:d9:2c:ae:9c:de:
d3:f0:85:08:36:b9:34:dd:e6:2b:a8:9e:96:4e:d1:a0:75:29:
ed:0d:5b:42:85:6f:1b:08:1b:7d:60:d7:81:03:09:2a:49:c0:
fe:96:5e:e3:e7:6a:4f:6b:7d:2d:be:bb:b1:a1:ae:b4:3f:4f:
f1:6c:b8:ae:ce:bd:39:f4:fd:ec:83:a5:e0:2b:e3:c1:4a:d8:
b1:03:0f:9a:68:9b:d7:e6:56:18:89:5a:52:9d:8d:9e:33:db:
62:32:1d:15:3e:d3:85:d0:07:2a:f2:30:3b:84:d4:0b:2d:c0:
06:02:7f:2e:b6:ab:69:c0:29:e3:5e:c8:30:d3:39:61:d6:e2:
24:63:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 18:30:48 2025 by rpki-client