Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa
File: c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa (raw, json)
Hash identifier: UOtKSM8JT1j44EvDN/1wBr/4c689FRisLN+Kk5Ev1DY=
Subject key identifier: EF:84:79:F5:03:38:19:E4:62:ED:C5:5E:F5:FF:0C:44:C0:2C:DE:77
Certificate issuer: /CN=12139121-8c82-4685-a6f3-76023bbcab6d
Certificate serial: 010D0C9F432858490021632886461EB251FF8C00
Authority key identifier: B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 53356
IP address blocks: 2602:f8de::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:63:28:86:46:1e:b2:51:ff:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12139121-8c82-4685-a6f3-76023bbcab6d
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=9f53d9bb-bcff-484e-8756-703cd3eb71ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:86:45:a6:41:9d:96:de:c6:7a:a3:c6:f0:
47:bd:0e:8a:b0:f9:ce:77:c1:d1:f1:69:b2:e9:11:
5d:d9:6a:c7:40:52:de:f5:f4:f4:8f:f1:32:be:41:
65:16:e4:81:4f:38:73:73:53:45:80:ac:d7:46:57:
61:f5:0d:fc:b1:04:6e:f6:2d:61:cd:ce:63:ca:af:
9f:2f:a0:57:83:f1:0c:a5:3b:03:97:da:45:1a:ce:
35:ad:09:70:f4:a3:e8:05:8d:76:71:ea:be:ac:b2:
05:59:85:16:56:c8:c8:3e:94:78:eb:67:ef:6c:d7:
f7:5b:ff:63:fd:4b:e0:a9:b6:39:45:8e:37:5f:f7:
17:ec:6a:97:95:9a:ea:5e:e7:cb:21:e9:29:0f:db:
6c:e0:a0:c6:76:4e:76:8e:34:25:c6:ab:d5:ca:bb:
6b:6f:a8:2a:e5:6e:95:26:7d:8b:00:ae:18:6a:18:
5f:ac:14:1e:65:f9:41:41:6f:21:23:5d:87:dd:76:
94:b7:45:97:3c:c0:7f:50:6e:7a:54:b8:bd:79:49:
77:9a:89:c5:f7:4e:4f:ba:a7:9d:b1:b2:1b:29:a6:
40:47:bc:64:1c:e3:f5:61:06:38:5c:35:a8:b5:29:
1c:a5:f7:35:a1:f6:2d:b9:54:0c:5c:97:e4:2e:87:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:84:79:F5:03:38:19:E4:62:ED:C5:5E:F5:FF:0C:44:C0:2C:DE:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl
X509v3 Authority Key Identifier:
keyid:B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8de::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:7c:e3:e2:bd:38:a6:4c:33:04:13:39:f1:17:51:dd:4c:f2:
fd:82:f2:42:99:ec:53:ae:24:9f:04:2f:02:11:c4:4c:1b:d4:
20:fe:94:4d:87:c5:ba:23:f7:fd:fc:7d:b8:b9:3c:89:e8:7c:
65:a2:88:4d:4b:b6:da:d7:65:d2:bc:80:58:f8:0d:e5:3f:4c:
3f:79:55:98:68:3a:a8:67:74:a4:09:8e:99:67:99:88:8b:fb:
21:b6:9a:cc:04:5b:bc:28:67:6e:62:2b:f0:7c:c3:3b:8a:2e:
87:0a:ad:b2:53:61:e0:4b:75:f5:92:88:03:b8:75:68:f2:4b:
33:a2:02:40:e0:08:ed:bc:1c:0d:6a:ae:01:99:e2:c6:2d:7f:
9c:f5:3e:c3:a3:ea:44:61:a5:2c:ba:fd:4a:48:77:02:dd:13:
e3:0f:0a:31:f1:1f:97:3c:d3:e0:b1:30:25:0b:0d:2a:07:c5:
5e:c1:bd:ae:c0:7e:f3:4a:0a:e8:14:ec:56:d0:bb:71:f0:70:
25:fb:76:b3:1a:c0:dc:b0:cc:bf:0a:61:35:b3:cf:1b:2e:62:
a2:d7:48:95:d2:29:37:be:fb:00:39:39:9a:16:b3:3e:6a:38:
69:af:4a:30:bd:14:da:59:7a:95:16:69:6b:a5:91:e9:26:b0:
ba:a4:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:45:45 2025 by rpki-client