Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa
File: 272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa (raw, json)
Hash identifier: JLi+o55YVyQ8rqr2XKCyFaFimGzH0Mfj8q45rCSwWmU=
Subject key identifier: BE:E4:E9:FE:46:B0:95:8F:1E:2B:54:42:18:19:22:09:0E:A1:F8:8F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC2EBE28F76452375A1080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 203
IP address blocks: 2607:f028:62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:2e:be:28:f7:64:52:37:5a:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=f0d36961-d91f-451e-97b3-d88ea5ad3d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:74:74:43:37:37:8a:3b:2c:09:ad:f7:1b:
68:d4:b6:99:77:86:43:9a:73:8d:3c:8f:8f:ba:d0:
82:b3:c6:06:90:b8:7a:4a:95:4b:70:10:70:26:1c:
e1:82:7b:54:1b:1b:f6:41:6a:45:5f:b7:60:06:be:
9f:50:da:e6:36:36:d1:6c:af:c8:f3:f8:87:4b:87:
19:24:b2:7c:91:aa:3f:c0:7c:da:61:10:66:44:26:
0b:a4:66:80:20:7c:44:74:6f:52:82:98:6a:29:46:
65:3b:84:21:f2:0a:df:fa:18:4d:45:31:96:75:e0:
6a:44:8a:7b:d1:34:0a:3c:10:fb:cb:33:c0:5c:f5:
0f:e1:b9:ec:36:c0:73:23:c2:a5:23:03:7f:4c:8a:
e1:0d:a8:84:6c:c0:f4:a7:dc:77:9f:33:3e:6c:85:
f0:f4:da:85:64:cf:79:1c:b4:00:80:6f:4c:ef:75:
b1:29:f6:71:88:6e:6c:41:05:c8:26:fd:6a:b0:fa:
37:d5:d9:fe:0d:59:74:5d:db:36:15:e7:6a:21:4b:
be:c1:d9:60:a7:f6:15:1e:fe:9c:28:55:02:bf:84:
75:01:05:1c:c2:38:f6:36:29:f3:f2:cd:48:76:58:
95:12:67:26:79:82:6a:a5:ce:9e:55:12:21:e1:b1:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:E9:FE:46:B0:95:8F:1E:2B:54:42:18:19:22:09:0E:A1:F8:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:62::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:59:2d:5e:b1:64:8c:25:39:d9:88:34:fe:6d:43:83:d9:29:
26:d9:d0:cf:55:07:d0:a8:dc:f8:8d:30:ff:37:38:f6:00:b7:
cd:89:ac:71:8b:c4:3f:32:93:d9:d5:c3:4c:7c:12:0f:1b:77:
f7:1b:53:62:d5:58:27:8f:0f:dc:3b:d2:e6:9d:64:c1:16:49:
c1:de:c1:95:3c:18:97:64:8f:96:29:c4:69:ae:ca:b6:27:ba:
50:ef:4f:14:54:28:65:5b:ff:e4:22:69:62:71:50:9c:72:ee:
ef:f4:fd:95:a7:c8:2a:6b:cf:23:47:aa:90:52:ea:fa:4e:3d:
92:bb:0e:5a:31:fb:fb:04:c6:88:26:da:6a:ce:7d:65:2f:4d:
1e:51:e2:f4:60:73:57:27:ab:88:9b:d1:cc:18:c2:50:a1:1d:
91:49:84:ed:2d:d3:cf:e3:07:15:14:6e:12:4f:89:74:8c:dc:
2a:8e:e4:02:9e:3d:25:b1:ad:06:bc:ee:d5:2a:44:58:09:ae:
99:aa:ea:30:a5:4c:27:f2:b0:4e:86:2f:4b:9b:66:7f:0d:48:
1f:87:90:b9:0d:f0:93:79:10:dd:48:a9:34:9b:3c:96:de:1f:
b2:5d:d7:3c:5d:24:db:4d:4c:09:41:6d:18:d5:8a:e0:93:db:
e2:a6:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:11:05 2025 by rpki-client