Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
File: 0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa (raw, json)
Hash identifier: tGUoqZiFeubYsV6AduAh0HbP4zrY/3K30Rz0FpUuqG0=
Subject key identifier: 02:28:5A:32:AF:1B:79:0D:A8:0D:03:49:78:61:2E:16:F0:DB:A2:7C
Certificate issuer: /CN=ab971181-47ed-4815-8f1e-60d429db1463
Certificate serial: 010D0C9F4328584930DE7A1B34EED7B590676D00
Authority key identifier: A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 7105
IP address blocks: 2620:2::/48 maxlen: 48
2620:15a::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:7a:1b:34:ee:d7:b5:90:67:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab971181-47ed-4815-8f1e-60d429db1463
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=7aa684ba-9ca6-4c22-ad62-571e8385bf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cb:af:6c:db:9e:49:5f:23:a4:28:fc:78:16:
1f:f3:ba:e8:b3:ab:60:7f:6e:fe:6c:15:11:46:44:
20:c9:9b:8e:43:73:51:92:6e:df:75:27:57:c1:d3:
a2:ca:85:70:76:ee:cd:a2:2d:df:c1:37:26:3c:2f:
16:94:ef:13:fc:92:a5:2f:f1:36:e7:d5:dc:ba:db:
34:7d:6a:d6:eb:41:0e:2d:12:ad:e3:0e:7f:15:9d:
b0:21:eb:8e:09:62:e9:c7:df:82:4b:b1:7e:b2:da:
be:30:11:0d:5d:3f:13:92:2c:f9:12:49:f3:d7:ed:
cb:0c:30:3c:eb:72:66:eb:88:d2:2b:93:0d:42:23:
0d:7c:4c:4d:68:11:ae:b5:4f:13:b6:ac:c7:5b:57:
bb:7d:bd:5f:84:41:c7:05:af:c3:40:ea:0f:8a:96:
bd:53:82:58:61:82:36:33:8d:98:29:a7:33:cc:a7:
1e:48:c8:60:8c:e3:75:a8:3f:2d:fb:2b:8e:0d:f8:
2d:ed:ff:28:30:8b:51:fb:01:ae:48:07:92:1f:56:
08:28:3c:a8:38:d5:1a:a3:d5:cb:a6:1a:e4:27:6f:
87:46:5f:8a:ee:75:a5:d3:c5:b4:6e:70:2d:b5:72:
66:fa:31:d2:26:10:0c:83:44:cf:1a:b8:96:82:f9:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:28:5A:32:AF:1B:79:0D:A8:0D:03:49:78:61:2E:16:F0:DB:A2:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl
X509v3 Authority Key Identifier:
keyid:A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:2::/48
2620:15a::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:09:c5:9e:ea:71:1d:f5:34:32:a4:4b:1c:03:f1:fc:ed:9f:
2a:0b:aa:93:3f:b7:3f:14:3b:b4:b0:9a:a8:b8:74:27:77:30:
f2:cc:c1:3a:e6:5b:00:cb:cb:c4:ad:c9:5d:43:be:47:ee:32:
a3:9e:ea:b7:c2:c4:e6:22:0d:ca:bb:f3:8f:df:55:e2:79:91:
9d:83:8e:ec:5a:4e:7c:cb:a5:43:37:8c:ec:27:90:82:fc:7c:
34:e4:b1:2a:95:7d:96:f3:aa:6c:6f:06:1e:a5:a2:1f:b1:b8:
d4:41:58:ab:16:88:25:00:3c:2b:fa:93:89:98:29:2b:72:6e:
f6:f6:8a:32:16:b9:c9:64:f1:56:f3:1b:18:0a:f0:2d:41:2c:
1e:db:51:e4:75:f6:3b:1c:15:95:e0:03:3a:0d:89:34:d5:1b:
74:98:50:b0:32:9b:67:39:f4:66:8f:f7:73:5f:ef:15:76:2a:
3a:2d:73:fc:95:71:7e:ca:9d:78:e0:a8:0b:52:68:5d:48:44:
1e:16:53:a3:1d:9c:99:45:f6:fe:73:38:8b:52:da:bd:eb:e0:
33:43:ba:91:d3:b9:b5:95:70:4d:e7:ab:67:1f:0c:4a:22:25:
94:8c:5f:6b:a9:61:df:ec:dc:ae:15:bb:00:49:50:f9:91:06:
2d:6b:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:34:39 2025 by rpki-client