Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/dd766bad-93f3-31bc-b2ab-fd2c88da7f69.roa
File: dd766bad-93f3-31bc-b2ab-fd2c88da7f69.roa (raw, json)
Hash identifier: ElJYMK3MGBHDwUK53G66NQrwaM1A96zrjjrtjIJAwUk=
Subject key identifier: D1:EF:45:1E:A2:0F:29:E5:A8:C6:CE:26:94:62:3F:B1:75:E2:AB:B1
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848FE511F9FD75243CC17FC7400
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/dd766bad-93f3-31bc-b2ab-fd2c88da7f69.roa
Signing time: Mon 24 Feb 2025 22:25:40 +0000
ROA not before: Mon 24 Feb 2025 22:25:40 +0000
ROA not after: Sun 25 May 2025 21:25:40 +0000
asID: 399970
IP address blocks: 2602:fc3b:c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fe:51:1f:9f:d7:52:43:cc:17:fc:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 24 22:25:40 2025 GMT
Not After : May 25 21:25:40 2025 GMT
Subject: CN=5e99e168-5d73-4b40-a1e9-9a4f45a89891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:4d:e6:ce:17:a9:cc:44:c4:66:0d:ea:f5:
45:ef:79:d9:4b:3a:35:a2:4a:43:a7:7b:15:13:b3:
5b:af:f9:e1:b9:8e:e4:5f:bb:d5:7d:84:73:69:0f:
bd:fd:0b:19:80:ce:33:84:e8:82:36:39:e2:54:ff:
d5:94:95:43:ae:5a:7d:f2:bd:d9:b1:b3:0a:8a:9c:
d2:f9:90:0a:79:fa:ab:56:14:25:fa:72:6d:3c:98:
ae:2f:c6:9a:cb:9c:1b:1d:cd:4a:64:78:2a:94:2d:
d7:e8:27:78:08:7a:81:e4:6a:d7:4d:ef:2d:3e:d0:
c5:96:97:ec:ef:9b:69:82:79:e3:be:65:27:5b:4f:
3c:5a:56:1f:59:d3:ca:ab:cd:bc:8b:07:70:4d:68:
4b:3b:82:ff:dd:84:22:94:c5:98:80:a2:f8:71:2a:
81:9e:44:56:7e:16:f7:f1:8b:66:37:bc:31:77:bc:
5f:1d:7c:c6:52:cb:83:6d:10:1d:f5:ca:22:a2:f6:
43:0c:6e:bd:5e:d9:85:5a:3d:e4:84:9d:40:db:d8:
fd:35:84:d6:c5:e9:64:2e:4a:8e:ed:1f:f5:aa:e4:
75:d0:3d:d4:57:83:27:fb:fc:28:65:f3:6c:6c:95:
a2:49:9d:bd:e4:51:fb:01:d0:b7:1f:c7:f4:4f:56:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EF:45:1E:A2:0F:29:E5:A8:C6:CE:26:94:62:3F:B1:75:E2:AB:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/dd766bad-93f3-31bc-b2ab-fd2c88da7f69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:c00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:f5:b8:8d:5f:4c:96:a9:a6:1d:a4:d9:19:f2:54:30:96:84:
05:45:60:25:3e:a8:b8:70:25:e8:43:50:4f:d7:27:fd:74:05:
e0:f3:33:88:98:0e:d5:bb:61:04:31:93:c5:8a:1a:f1:f9:f7:
0d:2d:28:cd:44:95:ef:89:fa:e4:e7:fb:ab:3b:06:92:f5:3a:
5a:e0:e4:93:f8:0f:b6:b6:45:ae:fd:48:3a:c5:ee:d3:c6:02:
28:51:93:77:d7:6e:8f:19:a8:82:3d:60:e0:ce:5e:ee:65:c7:
ed:da:6d:95:09:d3:f4:5a:87:db:1d:f5:ff:3e:e6:7b:ae:d5:
32:20:d5:cd:8f:0d:e3:2b:e7:da:b6:b3:e0:af:27:3b:a9:cb:
da:7c:23:da:43:20:05:5e:8f:b6:78:bf:e0:45:87:a1:20:23:
99:11:4b:9d:e4:76:18:86:75:e8:09:57:93:5b:33:17:60:bd:
d2:df:c5:6d:35:9a:48:3d:c6:58:41:86:76:b1:a8:68:d7:da:
a7:d0:7c:4a:63:f4:c3:d9:26:71:d6:fd:bc:9f:fa:ce:50:b8:
41:ba:60:4f:5b:b9:33:05:a1:ed:fd:4a:a6:cc:6b:c9:d0:de:
4e:95:b0:89:75:3f:3c:0b:b8:25:a7:27:c9:82:bf:ee:51:a7:
4f:03:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:31 2025 by rpki-client