Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/f8e4d692-b8c2-33d6-a3dd-f54f9e557e81.roa
File: f8e4d692-b8c2-33d6-a3dd-f54f9e557e81.roa (raw, json)
Hash identifier: fy7Y7BKDfOTxyBxc/cTtzIZ+fLPQLtojFzHB1zoM0CQ=
Subject key identifier: 38:96:63:56:F4:3F:49:84:2A:0A:C0:B4:6A:29:AD:86:18:C5:D4:E9
Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial: 010D0C9F43285848A315D1B743F2329A07541E80
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/f8e4d692-b8c2-33d6-a3dd-f54f9e557e81.roa
Signing time: Thu 23 Jan 2025 06:07:37 +0000
ROA not before: Thu 23 Jan 2025 06:07:37 +0000
ROA not after: Wed 23 Apr 2025 05:07:37 +0000
asID: 19165
IP address blocks: 2604:5500:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:15:d1:b7:43:f2:32:9a:07:54:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Validity
Not Before: Jan 23 06:07:37 2025 GMT
Not After : Apr 23 05:07:37 2025 GMT
Subject: CN=b08c01d0-bd64-486c-8f25-3d95679af180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:e8:a0:f6:53:b1:32:67:88:a7:b3:63:e3:
b4:02:11:a5:35:c7:b9:9e:5b:91:b1:eb:e8:d5:87:
9b:df:00:3a:5e:25:0c:c0:35:88:66:53:f7:f2:51:
1c:5b:29:03:b6:be:cf:8a:d7:be:76:c4:00:cc:6a:
c1:94:81:95:55:74:98:09:a2:ce:7d:75:d6:3e:72:
5f:cd:93:ac:63:d2:c4:ac:b1:e7:95:a3:a2:26:c1:
cf:67:9a:8a:77:c3:09:1c:67:20:11:1b:79:59:35:
43:04:39:24:ad:e1:16:b9:58:a0:4e:e4:f5:2e:2e:
08:2e:39:d8:d6:eb:85:af:40:b8:bd:e9:a4:5a:da:
48:27:72:6b:68:b5:d3:8e:95:6e:d4:ba:85:ef:49:
92:af:01:34:f0:ec:ab:b0:86:86:1a:85:88:45:d0:
5a:2f:d9:e3:31:33:30:82:39:58:46:cd:22:a8:a4:
a8:6d:bb:cc:e6:22:e5:0f:61:ce:67:fd:8f:5a:ab:
3c:cc:12:8d:20:20:e0:31:a6:72:c2:f2:ae:a6:2e:
95:de:7a:c3:dd:59:37:4f:32:74:61:25:5a:c0:74:
91:7e:51:ec:e4:4a:39:87:39:40:90:44:42:ab:15:
94:10:a7:87:f7:f6:4f:c7:47:6f:ce:88:a0:89:7b:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:96:63:56:F4:3F:49:84:2A:0A:C0:B4:6A:29:AD:86:18:C5:D4:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/f8e4d692-b8c2-33d6-a3dd-f54f9e557e81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
X509v3 Authority Key Identifier:
keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:5500:8000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:e1:f7:d0:6f:5c:88:fe:39:5a:d6:24:77:c9:79:28:93:75:
82:ab:49:c3:2c:54:e1:b5:54:c5:ba:fa:fe:91:19:b3:ab:76:
16:c3:f4:56:dc:15:9d:6b:a7:a0:02:18:38:7a:99:ba:34:d8:
b7:22:ac:40:c0:b0:6d:ba:ee:76:58:1b:81:f0:c0:54:02:d2:
b6:8f:78:b2:5a:80:f3:8d:9e:c8:08:c8:de:b4:8f:d1:af:f6:
98:18:49:27:e4:3d:70:8e:04:ef:15:8f:e5:98:29:a9:d9:3b:
46:f7:e1:a7:99:8e:df:03:96:ee:9c:ba:5a:34:12:68:41:17:
58:68:a4:85:ab:4d:c1:5f:a5:ca:8f:42:a6:74:a9:9b:b3:3c:
88:d3:aa:9d:eb:c0:be:6f:6b:14:1f:18:48:36:ed:54:ce:64:
dc:ed:69:d0:86:09:69:7b:15:0e:92:80:83:3a:f0:c4:78:07:
08:6a:0d:21:c2:78:d3:d0:cc:f6:d6:90:90:95:42:38:62:98:
69:16:c7:72:1d:dc:2c:fe:97:44:ab:64:1a:7e:cc:bf:02:55:
48:f1:73:d3:85:ff:d2:1a:09:d4:4a:03:a6:83:3a:e2:2e:40:
27:72:22:d7:40:a9:a2:d0:0d:03:7e:c0:93:fd:3a:e9:7e:25:
cc:80:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:26 2025 by rpki-client