Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa
File: 06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa (raw, json)
Hash identifier: UGCdQMq+6IW0rmsvNWsvJIaxV5LXt2/E3b/qBK0QKJ8=
Subject key identifier: BA:46:13:3F:E3:A1:3F:BF:E3:DA:75:44:1B:39:11:19:CA:39:DD:DF
Certificate issuer: /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial: 010D0C9F43285848C58234731E0DEECA1CBA0B00
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 394725
IP address blocks: 2620:e4:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:34:73:1e:0d:ee:ca:1c:ba:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=157ca13b-860f-4abe-989e-9a3b241a2481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:3e:86:f8:8f:7f:4e:f4:a0:cb:c4:cd:40:
a7:7b:0a:d8:be:e3:3c:86:79:57:9c:f1:d6:2e:ac:
7b:3b:00:d5:17:3a:09:9b:2f:c1:cc:15:95:5b:6d:
6e:48:42:f8:f0:d9:43:80:b3:cf:a9:ef:1a:01:ca:
70:cd:5f:12:cb:57:14:95:da:d8:ce:90:9a:6f:9f:
a2:c7:92:04:51:7c:13:19:f8:d1:ae:4a:7e:d5:5e:
48:f8:03:42:bf:61:93:55:6e:47:c0:dc:8c:bf:c7:
8e:be:60:c4:34:cf:05:d1:33:bb:1d:64:b0:f2:ab:
b8:08:dc:a5:7f:2f:d1:7f:cb:36:57:57:03:c1:25:
f8:24:ab:a4:6b:79:41:9a:96:32:51:09:22:9b:fb:
1b:a8:5a:85:34:0c:69:06:47:6e:a1:fe:53:9b:94:
08:6c:9f:75:8f:7d:9a:56:53:1a:0a:cc:98:93:48:
c4:4c:0c:5c:f9:3a:ad:33:44:36:1f:d1:bc:fa:b3:
fa:69:39:1b:5a:29:0e:8f:c5:e7:d2:9f:ab:0a:e5:
6e:26:78:de:ac:29:53:b8:74:12:81:5a:8c:96:01:
48:56:b7:79:90:2a:34:db:7e:2e:60:02:71:a9:ac:
b7:eb:d5:9c:d9:d7:56:34:93:91:9f:8b:4c:8c:ef:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:13:3F:E3:A1:3F:BF:E3:DA:75:44:1B:39:11:19:CA:39:DD:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl
X509v3 Authority Key Identifier:
keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:e4:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:c5:05:c1:2c:f3:63:eb:c8:4c:2c:59:b7:ae:f8:8a:ae:5d:
60:9d:f6:83:62:25:f9:35:98:b1:0d:d4:ab:c6:f6:6e:28:93:
dc:fb:8b:89:f8:18:7f:c2:5d:ce:39:fc:d0:fa:6f:e1:ed:e1:
db:0c:3c:17:a3:ee:5e:b8:bf:51:11:66:41:03:d4:ad:55:1a:
62:9b:49:e8:74:1c:8b:4d:37:27:7e:bd:d9:af:14:b5:fd:a9:
2c:a1:50:a6:f6:e9:cd:d6:d4:5f:4d:4c:70:aa:58:72:34:03:
73:b7:3e:aa:b1:d4:93:ea:53:78:c7:ea:a9:a0:d6:3c:cf:f7:
e2:f6:a9:7b:e9:ec:3a:4b:9c:e1:f7:f1:7f:bf:ad:7d:e8:99:
d4:84:25:f3:d2:d3:60:04:d1:d6:90:87:47:45:b9:4c:cb:eb:
31:f9:84:b8:98:f4:c8:ac:a1:87:a0:93:70:6e:8b:6a:45:86:
d6:e7:1a:b2:92:8f:ad:79:74:22:a5:da:ba:61:81:8b:44:2a:
9b:f3:e2:96:86:44:b5:c4:b3:1b:34:87:f7:3a:35:f6:fe:33:
12:2d:c2:12:88:fc:d1:ee:93:04:31:dc:e3:9b:c6:15:f7:3d:
f1:8e:18:11:21:88:fb:84:a5:e9:10:15:ca:69:25:cf:d1:3c:
ad:a5:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:24:31 2025 by rpki-client