Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa
File: 900c34ab-638c-3774-a83f-faf44c9cf9a7.roa (raw, json)
Hash identifier: pAQZ8aycMR8ybuyZMhPK3cd9elHGbMUFbz0Ll7ET93M=
Subject key identifier: B5:7F:CE:AA:DF:75:2B:F0:F7:D6:08:D9:88:E3:A2:B6:39:2B:CA:46
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F4328584949FE91A15022A070A10BFC80
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 393885
IP address blocks: 2604:4a00:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:91:a1:50:22:a0:70:a1:0b:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=bb72921e-10d1-41bc-9d91-5745cf940c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:f1:0f:7a:0f:24:c5:38:d8:c5:bd:43:67:
00:53:26:f4:88:e5:38:92:d9:5d:8b:57:ae:cc:b4:
0d:c1:fb:1a:b2:ae:6a:70:15:cd:eb:87:f1:13:49:
b9:0c:e2:bf:52:08:3b:71:22:0e:98:53:90:4a:34:
b5:b9:bc:34:f9:c1:e7:f8:85:6c:71:0b:41:4f:97:
19:a6:0c:7a:33:b1:70:ab:c7:16:03:27:34:18:e4:
62:a4:da:97:85:6e:de:37:df:e3:78:b7:00:99:94:
78:5c:9a:e9:5a:bb:64:49:d0:13:55:e2:94:4c:54:
07:1f:cb:15:25:90:5d:70:97:f0:fa:0b:e9:25:a8:
90:49:c6:06:8f:66:dc:f5:d0:b7:58:22:8c:ee:97:
f4:4e:4d:b8:7a:50:2c:3e:4a:bb:00:6a:ba:0f:ab:
dd:f7:96:09:c9:d9:18:77:35:05:98:7e:0d:13:72:
31:3f:a3:3e:2a:8c:46:68:78:be:f5:cd:b1:8b:41:
75:88:e4:1e:1f:07:5c:8f:11:8c:a3:06:54:b5:67:
fc:13:c3:2e:9f:2b:34:4f:de:a4:b7:6f:df:59:f6:
94:ed:f9:53:8f:fb:8d:42:22:a1:9e:ff:91:34:f9:
16:d1:a3:77:47:5c:eb:eb:04:0f:fd:15:35:2e:7c:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:CE:AA:DF:75:2B:F0:F7:D6:08:D9:88:E3:A2:B6:39:2B:CA:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:cd:e8:3c:1e:a3:81:4e:9a:2f:b5:9a:60:62:15:9f:85:b3:
da:0a:c8:07:72:40:08:6b:b7:3f:42:fc:d3:da:e1:ae:cb:fc:
32:21:cf:96:ef:d8:80:c6:fb:19:6e:60:cb:1a:f3:bd:c7:41:
45:7b:69:bf:dd:f6:06:b7:d8:6c:bb:6d:70:4d:be:2d:f4:b3:
25:c5:05:d1:6c:cc:bc:73:62:6b:a7:17:f9:ee:ff:f4:59:5d:
da:26:d9:2e:5a:84:4d:d0:ba:e5:b4:c0:28:03:9d:5b:78:6a:
68:c5:06:5b:6b:ab:8e:fd:5c:84:48:2a:db:ce:b8:12:bb:37:
93:42:fb:ef:14:97:73:5c:21:a9:a2:92:e1:3a:fe:be:ae:8c:
64:55:a2:92:2d:e3:f3:4c:d1:29:0d:f2:71:96:84:95:c1:70:
6f:f3:96:22:81:7c:be:c0:4d:4a:2b:04:c9:fb:53:1b:df:98:
41:9f:88:28:0c:09:d8:f3:09:54:d2:96:b7:1a:c3:58:bf:11:
eb:17:75:78:cc:44:28:99:e8:7f:eb:e7:7b:4e:5d:a1:d7:40:
a8:06:27:61:a5:01:83:86:f0:91:cd:4e:8c:42:e4:bd:e9:4b:
e5:29:d5:93:85:bb:4e:a2:f0:5b:5d:74:be:2c:55:66:71:bf:
43:46:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:39:52 2025 by rpki-client