Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa
File: 836ea4ce-858f-30f8-a6a2-0103c3000406.roa (raw, json)
Hash identifier: FqO717E4wRERWIGk0nCjhjijTfmZbSNvu1z1+Uy1N2Q=
Subject key identifier: 57:BE:DA:67:03:FA:47:E4:83:7E:CC:E8:97:42:17:9F:8B:79:2B:DF
Certificate issuer: /CN=874f7cf0-cad4-4f53-86bd-48dca2b8186c
Certificate serial: 010D0C9F432858492CAE968B0399AAEA4ACE1A80
Authority key identifier: 7F:05:9A:C0:C8:9C:A6:1E:23:AD:EF:1D:19:66:B8:21:37:FB:92:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 22603
IP address blocks: 2607:4ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:96:8b:03:99:aa:ea:4a:ce:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874f7cf0-cad4-4f53-86bd-48dca2b8186c
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ededea36-b7a6-4dff-94e2-7aad8d628150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:ee:59:b0:8c:75:a5:f6:f1:62:06:0b:30:
08:3a:13:bb:6c:e1:aa:7d:67:ea:4d:13:ca:d0:d4:
67:05:c4:36:7b:ff:74:f9:b2:59:11:22:11:6a:cc:
0b:dd:c6:74:f9:54:02:25:de:5e:31:aa:34:a6:98:
b1:3e:6c:dd:77:4e:ef:cc:23:8e:f1:36:3b:d8:e8:
c5:be:47:23:20:14:8a:ef:fc:75:ca:77:45:2e:17:
7e:7e:ad:17:b8:b6:84:46:e0:37:6f:00:40:82:55:
25:60:e0:92:dd:76:f4:92:8c:3e:a2:68:0d:ee:c7:
4a:ff:ea:79:6f:c3:e8:37:0d:94:42:20:48:2b:ff:
c5:0f:da:03:0e:04:cc:8c:72:44:d1:8c:0a:59:c2:
80:7c:f2:df:a4:12:05:5a:62:27:0c:21:d9:b0:5d:
5f:11:cb:72:82:27:23:3e:77:05:7f:b1:85:02:f8:
50:d3:2c:3b:01:66:fe:c2:75:79:28:70:9c:76:f1:
13:78:26:3e:ae:35:25:df:82:9c:dc:29:02:2c:98:
10:2a:de:b0:92:ed:62:34:53:d8:62:be:94:f3:39:
56:be:f2:c5:9b:ed:80:c3:d3:03:87:66:dc:19:2b:
53:48:96:41:0a:f6:7a:e7:09:9e:7d:f4:73:22:0a:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:DA:67:03:FA:47:E4:83:7E:CC:E8:97:42:17:9F:8B:79:2B:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.crl
X509v3 Authority Key Identifier:
keyid:7F:05:9A:C0:C8:9C:A6:1E:23:AD:EF:1D:19:66:B8:21:37:FB:92:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:4ec0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:19:c9:5b:e5:4b:ec:f1:2a:a1:c4:d7:97:4b:2d:53:55:4d:
42:b3:a7:7e:48:e6:85:47:ee:e3:0c:35:c4:15:ec:51:6d:e0:
19:35:a6:b8:88:f6:1c:0c:ac:13:69:04:53:04:59:7e:97:77:
b5:07:04:6b:99:9f:9e:28:81:e7:9a:e6:7b:a2:a7:84:dc:e1:
ed:8a:f5:0e:3b:b8:94:b1:24:80:c5:ba:45:4c:a4:f5:a9:1a:
8d:c5:06:1c:fc:80:9f:3c:58:f1:d6:5b:59:4b:60:06:67:b0:
46:1c:00:27:79:78:65:5b:11:00:e4:77:cc:08:07:61:4f:d1:
1e:e1:0f:a9:db:89:bd:78:1e:21:29:e0:ae:82:8a:04:89:fc:
90:8d:e4:27:d3:a5:ec:dd:99:d7:37:41:ca:57:4d:ec:99:b1:
bb:63:82:f2:d3:cf:86:e7:74:2d:6f:46:1c:c3:69:0a:e7:82:
d8:b9:35:0d:31:4c:da:ac:87:7a:7e:62:3c:1a:6c:69:07:42:
31:3e:5b:dd:ae:8e:a3:41:55:d5:2d:af:7c:9a:b8:d1:5a:b9:
f9:07:37:df:e7:b4:1f:26:52:ab:aa:e0:25:a4:eb:7c:4c:77:
3c:b2:84:a5:4f:92:fa:e3:69:3b:84:47:6c:66:60:20:74:a9:
ab:09:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:36 2025 by rpki-client