Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa
File: cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa (raw, json)
Hash identifier: zTZ3BV6xw0yzlYUE9QmbXHd/iNP/jcsgod9CZNziO0Y=
Subject key identifier: 19:90:6A:71:36:C2:1C:70:C2:89:EA:A4:D8:C9:FB:D4:C5:9B:4A:81
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1201BFF7EE489392E9E40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 3456
IP address blocks: 2001:1998:3100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:20:1b:ff:7e:e4:89:39:2e:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c830b461-b938-475c-b80d-0dabcdfbfab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:ce:b9:a6:20:74:ae:50:07:fa:60:c0:6d:
ca:bd:d1:1d:f1:ae:87:b2:75:92:2a:ec:3f:00:55:
b0:fb:d5:af:a6:b2:28:09:b9:e7:f6:44:71:b3:2b:
37:ed:c8:df:f6:10:90:68:3b:00:ed:6b:52:49:65:
b9:d2:f4:7b:cd:af:78:68:62:16:4e:91:6f:b2:03:
90:cc:f6:36:ae:55:06:24:d5:9b:5d:20:72:dc:de:
3a:17:1d:fa:ef:e5:f6:70:c0:de:c9:25:bf:25:b1:
e0:c8:13:b2:16:17:16:92:8a:c1:fe:c5:1c:c9:f8:
5d:0b:60:64:38:a5:d6:3f:1f:ca:11:99:41:69:3d:
39:ac:06:d4:17:af:d0:43:f7:36:02:8b:d0:97:03:
d9:4c:2a:8c:ef:95:ba:97:40:0f:4f:ea:74:74:d1:
53:fd:40:52:99:a5:b7:6f:3a:09:7b:0e:ca:f3:69:
66:7c:88:3d:52:0c:da:23:5e:4d:a5:7d:36:cb:ed:
7e:83:c9:8d:ff:e3:d6:4c:22:97:f3:51:b9:80:6e:
57:7e:dd:4d:bf:64:d1:36:8a:1b:4b:f4:e8:d2:87:
f7:57:0b:20:a6:a0:77:9d:de:61:ed:66:2e:1a:23:
ba:29:3d:ab:99:3d:d4:4d:b8:fa:8d:16:8e:33:aa:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:6A:71:36:C2:1C:70:C2:89:EA:A4:D8:C9:FB:D4:C5:9B:4A:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:1998:3100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:59:dd:21:0f:80:8f:8f:44:78:3c:15:95:e6:05:67:eb:6b:
c5:36:7b:5d:1f:48:d1:67:e6:37:8a:f0:6a:fc:b5:28:c1:78:
d7:63:47:8a:02:5d:b9:85:f3:9e:e8:b4:bb:24:27:83:c2:c4:
4b:d5:f2:c6:7f:09:34:07:d5:06:6a:c1:f7:4a:96:c2:22:27:
17:27:96:d1:18:85:70:58:2f:87:26:2b:c1:4c:16:ac:47:11:
4a:4b:a2:cb:be:52:a4:a8:ce:c3:59:c9:11:ca:46:a7:57:3d:
b9:31:45:d7:6a:51:d1:b9:91:58:8c:31:53:63:ab:17:3c:dd:
31:d4:99:fb:19:01:ff:a3:38:dd:4a:c6:c7:e4:fd:c0:6f:cc:
f0:7c:55:e1:fb:94:c7:e9:97:b6:93:84:c7:6c:83:22:2e:b9:
a3:5d:c8:45:74:bf:a8:cc:df:7d:14:a6:a7:e5:bd:e0:ba:c3:
07:80:5c:f4:92:28:8b:94:1d:86:04:b4:7c:c3:a1:87:a9:5d:
2a:61:31:33:68:7b:11:ff:b2:95:71:6d:d8:e0:64:bd:32:40:
fa:2f:be:32:31:a6:24:d9:51:0b:35:6c:82:2a:d1:03:39:78:
61:48:38:45:b5:39:9d:7e:e0:68:32:ef:38:67:ac:0d:c8:45:
fd:b3:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:31:04 2025 by rpki-client