Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa
File: 656ee11d-0c87-386d-a956-31548ccbdf3a.roa (raw, json)
Hash identifier: j1QrWQzDUxkUDLpyvv+ST9ixro3BWMKlSWHCedb/XVo=
Subject key identifier: AE:5F:30:98:A3:45:8F:D0:14:4E:62:6E:C0:65:3D:B7:40:85:F2:DB
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E00699279E1EC06D77F5E300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 2605:a401:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:99:27:9e:1e:c0:6d:77:f5:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=42222fb0-583d-4ad8-ab26-c22639c0d8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:c0:94:e4:4a:e2:0a:17:bd:d5:d0:6e:c5:
28:62:61:77:69:9d:93:1c:47:ad:09:57:10:f5:09:
d8:42:e3:98:a3:06:d2:fb:11:6e:9b:b0:08:0b:a1:
40:32:fb:47:07:0d:4f:41:ee:f4:47:2d:dc:9a:2b:
c1:43:c4:d2:db:69:d3:e1:57:65:c3:1c:44:15:f9:
a9:a2:08:af:5c:a5:15:58:eb:bf:6d:01:54:ee:4a:
97:65:a7:5c:97:65:0c:3f:da:dc:41:d0:8f:8d:dc:
0d:f7:b2:f0:e5:15:6c:e8:b5:24:f1:8c:79:69:97:
eb:2f:21:27:c5:aa:f3:7a:2e:9d:01:9b:94:78:3c:
eb:10:ee:aa:43:91:10:a9:41:55:ee:a0:7b:51:a7:
b5:2e:dd:61:67:d6:3f:43:6c:2a:bd:4a:23:d9:5a:
43:67:a5:a3:0b:c2:d2:b7:64:95:25:5f:8b:55:2c:
2b:98:5d:b4:47:c4:be:e3:89:ac:2f:0a:d8:25:40:
8e:9b:3c:90:34:9a:88:30:97:80:b7:06:8f:04:91:
60:d0:56:1a:f1:26:bf:4a:46:4d:a6:b4:d5:7e:8c:
8c:74:48:92:bf:d3:79:19:db:70:ca:1a:12:aa:58:
63:29:fa:a1:c1:3a:f9:ed:51:8e:27:6a:9d:e3:c1:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:30:98:A3:45:8F:D0:14:4E:62:6E:C0:65:3D:B7:40:85:F2:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:be:e9:3e:17:15:5f:c5:b9:7e:9e:9c:73:e4:8c:ae:21:65:
f5:f8:80:6c:70:12:ab:57:b0:c9:ab:f2:d5:de:6a:17:c3:82:
a2:23:0a:6d:68:42:21:7b:ab:af:82:13:35:85:cb:59:4e:c2:
a9:ff:8e:e7:98:eb:e5:19:53:7b:42:43:77:80:ea:f1:f6:e9:
2f:eb:37:e2:39:48:c9:cb:fd:87:61:31:7d:ea:b6:f0:96:c2:
cd:50:cc:f8:90:d3:a4:fc:e1:20:f5:99:ee:83:77:41:da:bc:
6d:cf:18:ea:78:5c:8c:a0:e5:8b:95:00:ae:a7:4b:5c:b8:36:
b2:5f:d7:a1:20:97:08:f9:e6:b5:29:fe:b8:3e:2b:35:cd:e0:
e1:b9:9b:cc:93:b7:24:e7:00:bb:06:ec:20:54:e8:98:74:3c:
af:dd:fa:dd:d9:c2:1a:9a:b0:79:60:53:d4:a2:3d:b4:0a:63:
87:fe:6b:3b:ba:27:70:ef:f7:1f:8f:eb:a8:ef:35:1c:0f:15:
55:a7:5f:6a:df:da:aa:3a:29:40:ef:96:e8:a6:b7:cf:5e:b9:
24:66:07:13:37:c2:97:55:c7:1f:ad:94:00:b3:98:71:e0:12:
80:34:bd:3b:4e:44:4a:bd:e3:5f:7b:93:fa:af:58:78:77:3f:
4e:f9:9c:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBpknnh7AbXf14wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
NDIyMjJmYjAtNTgzZC00YWQ4LWFiMjYtYzIyNjM5YzBkOGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJbAlORK4goXvdXQbsUoYmF3aZ2THEetCVcQ
9QnYQuOYowbS+xFum7AIC6FAMvtHBw1PQe70Ry3cmivBQ8TS22nT4VdlwxxEFfmp
ogivXKUVWOu/bQFU7kqXZadcl2UMP9rcQdCPjdwN97Lw5RVs6LUk8Yx5aZfrLyEn
xarzei6dAZuUeDzrEO6qQ5EQqUFV7qB7Uae1Lt1hZ9Y/Q2wqvUoj2VpDZ6WjC8LS
t2SVJV+LVSwrmF20R8S+44msLwrYJUCOmzyQNJqIMJeAtwaPBJFg0FYa8Sa/SkZN
prTVfoyMdEiSv9N5GdtwyhoSqlhjKfqhwTr57VGOJ2qd48Es/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK5fMJijRY/QFE5ibsBlPbdAhfLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjU2ZWUxMWQtMGM4Ny0z
ODZkLWE5NTYtMzE1NDhjY2JkZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAQAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJW+6T4XFV/FuX6enHPkjK4hZfX4gGxwEqtXsMmr8tXeahfDgqIj
Cm1oQiF7q6+CEzWFy1lOwqn/jueY6+UZU3tCQ3eA6vH26S/rN+I5SMnL/YdhMX3q
tvCWws1QzPiQ06T84SD1me6Dd0HavG3PGOp4XIyg5YuVAK6nS1y4NrJf16Eglwj5
5rUp/rg+KzXN4OG5m8yTtyTnALsG7CBU6Jh0PK/d+t3ZwhqasHlgU9SiPbQKY4f+
azu6J3Dv9x+P66jvNRwPFVWnX2rf2qo6KUDvluimt89euSRmBxM3wpdVxx+tlACz
mHHgEoA0vTtOREq94197k/qvWHh3P075nGM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:26 2025 by rpki-client