Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/a3b4af63-3e34-3655-a5b7-34fadf6a4512.roa
File: a3b4af63-3e34-3655-a5b7-34fadf6a4512.roa (raw, json)
Hash identifier: eDegbG+54CO/QpX5DkbB1zBk4bAa1UOBkA8RpWWFvpg=
Subject key identifier: 6D:CD:BA:78:FD:C5:60:66:6D:DF:88:8E:1A:BB:51:14:BE:7D:D8:50
Certificate issuer: /CN=4980f97d-060c-4860-8029-ca0d97082203
Certificate serial: 010D0C9F4328584930DE74EFEFF0CE41ACB38B00
Authority key identifier: 1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/a3b4af63-3e34-3655-a5b7-34fadf6a4512.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 199203
IP address blocks: 2602:faad:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:74:ef:ef:f0:ce:41:ac:b3:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4980f97d-060c-4860-8029-ca0d97082203
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=64666d2b-0c29-49bd-a6fa-76d60bdef264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:5a:0a:f1:43:3f:21:bb:71:a0:a5:ef:59:
0d:4a:27:70:40:99:4d:ea:13:6c:0d:df:a7:bc:55:
7c:c9:ee:11:99:e9:ab:1a:03:8c:ca:73:e2:e9:87:
84:38:3d:0e:f9:6d:2f:1e:03:e7:2f:15:8e:1d:0e:
03:e4:c6:89:ca:01:41:35:36:b7:ec:3f:ad:37:08:
72:be:9d:f3:bb:96:9e:f6:bc:93:80:6c:2f:7c:54:
82:2e:c3:65:bf:a4:06:98:d1:1b:17:b6:91:e5:72:
a6:75:17:a1:a2:ae:42:2e:14:39:0f:39:08:51:5c:
39:ee:de:59:53:07:66:fc:0c:26:9e:c6:44:77:62:
c2:61:aa:03:bb:b7:b9:61:6c:01:5f:f1:d0:64:78:
9a:4c:43:7f:ea:71:5b:1d:5b:ce:ee:6c:5d:32:9c:
3a:2c:39:da:e4:49:4e:9c:61:e0:4b:46:2f:17:f6:
6d:ca:05:da:7c:24:b8:3b:ff:08:6a:51:5a:4a:44:
03:68:d0:70:fe:0f:14:99:96:18:8c:6e:b0:31:89:
e3:cb:12:95:ff:f3:21:21:0c:82:af:41:5a:d4:83:
a5:84:f4:fe:f7:33:ef:72:ab:ba:e0:db:24:5d:0d:
0d:d7:d1:6b:75:64:23:da:3c:e4:c8:a2:1f:17:ad:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:BA:78:FD:C5:60:66:6D:DF:88:8E:1A:BB:51:14:BE:7D:D8:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/a3b4af63-3e34-3655-a5b7-34fadf6a4512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl
X509v3 Authority Key Identifier:
keyid:1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:faad:7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:11:f5:e9:93:53:55:93:d1:6d:08:3c:e9:2c:03:86:2e:2b:
0e:d4:91:f1:cd:cd:46:90:d4:1c:c6:fd:6b:59:0e:5a:d2:01:
5b:8a:74:a7:0e:c4:d4:b5:86:5e:56:2c:08:6f:7e:e6:4b:0b:
a6:ac:47:ee:59:d3:01:46:83:e5:89:39:78:c5:56:1b:c8:e6:
37:25:33:ee:9a:4b:c8:63:ce:94:29:5b:41:86:22:e3:93:5d:
61:7d:11:6b:ec:19:ba:ca:80:6a:cb:f8:87:72:d5:07:40:81:
86:14:e8:12:f8:47:ea:46:0d:b2:27:7b:09:c6:f9:d2:6f:86:
9c:87:cb:88:48:2f:76:43:f1:8a:e3:7a:85:c0:c5:e0:eb:5b:
a9:18:b4:bf:3c:13:73:91:6e:5d:67:89:52:75:4d:e6:a9:be:
23:21:e6:fa:68:4c:1a:3b:8a:9d:8d:2a:c1:6d:09:a9:df:9d:
ad:38:cb:d7:d1:2d:2d:a1:7a:ac:8f:a3:f6:d1:88:86:62:39:
bd:2c:52:e3:5b:72:57:66:5a:e0:0d:19:ef:1f:91:69:94:f4:
7b:a1:2d:80:cf:c8:74:d5:3d:ef:62:fb:98:55:84:4d:a2:a2:
04:2b:e1:af:70:85:40:81:c1:68:55:13:80:f3:df:1f:da:8f:
83:ca:5b:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkw3nTv7/DOQayziwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk4MGY5N2QtMDYwYy00ODYwLTgwMjktY2EwZDk3MDgy
MjAzMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NjQ2NjZkMmItMGMyOS00OWJkLWE2ZmEtNzZkNjBiZGVmMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmFaCvFDPyG7caCl71kNSidwQJlN6hNsDd+n
vFV8ye4RmemrGgOMynPi6YeEOD0O+W0vHgPnLxWOHQ4D5MaJygFBNTa37D+tNwhy
vp3zu5ae9ryTgGwvfFSCLsNlv6QGmNEbF7aR5XKmdRehoq5CLhQ5DzkIUVw57t5Z
Uwdm/AwmnsZEd2LCYaoDu7e5YWwBX/HQZHiaTEN/6nFbHVvO7mxdMpw6LDna5ElO
nGHgS0YvF/ZtygXafCS4O/8IalFaSkQDaNBw/g8UmZYYjG6wMYnjyxKV//MhIQyC
r0Fa1IOlhPT+9zPvcqu64NskXQ0N19FrdWQj2jzkyKIfF61IbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG3Nunj9xWBmbd+Ijhq7URS+fdhQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OTgw
Zjk3ZC0wNjBjLTQ4NjAtODAyOS1jYTBkOTcwODIyMDMvYTNiNGFmNjMtM2UzNC0z
NjU1LWE1YjctMzRmYWRmNmE0NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDk4MGY5N2QtMDYwYy00ODYwLTgw
MjktY2EwZDk3MDgyMjAzLzQ5ODBmOTdkLTA2MGMtNDg2MC04MDI5LWNhMGQ5NzA4
MjIwMy5jcmwwHwYDVR0jBBgwFoAUHACEEqIuihgqEnq4vi6GvSrsv1swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80OTgwZjk3ZC0wNjBjLTQ4NjAtODAyOS1jYTBk
OTcwODIyMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6rQAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGIR9emTU1WT0W0IPOksA4YuKw7UkfHNzUaQ1BzG/WtZDlrSAVuK
dKcOxNS1hl5WLAhvfuZLC6asR+5Z0wFGg+WJOXjFVhvI5jclM+6aS8hjzpQpW0GG
IuOTXWF9EWvsGbrKgGrL+Idy1QdAgYYU6BL4R+pGDbInewnG+dJvhpyHy4hIL3ZD
8YrjeoXAxeDrW6kYtL88E3ORbl1niVJ1TeapviMh5vpoTBo7ip2NKsFtCanfna04
y9fRLS2heqyPo/bRiIZiOb0sUuNbcldmWuANGe8fkWmU9HuhLYDPyHTVPe9i+5hV
hE2iogQr4a9whUCBwWhVE4Dz3x/aj4PKW7E=
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:20:03 2025 by rpki-client