Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa
File: 6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa (raw, json)
Hash identifier: 4KqNSyqW4lHRDoNnS4cfXEp3BrengXipzpn38fwbe+k=
Subject key identifier: D7:66:AD:BD:A0:45:E5:B5:2D:04:4E:FD:C0:CB:B7:25:89:6E:F7:26
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC35D73E3180A22580A4E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 203
IP address blocks: 2607:f028:72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:35:d7:3e:31:80:a2:25:80:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=ec2f56b9-bf3b-4f5c-bea1-04322db966b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:9d:00:b7:60:cf:52:23:9f:c3:d4:e9:66:
0a:75:7c:c0:da:bc:e6:f6:5e:08:2a:e9:fa:9e:55:
58:25:03:73:f5:61:9b:15:d1:91:80:16:a3:f2:ce:
8a:0a:93:0c:01:91:be:0c:47:2e:15:6f:0d:e0:8a:
95:30:7b:f7:eb:26:aa:73:f8:86:73:38:b0:5c:3f:
69:f5:b6:c1:53:a2:f8:c5:56:73:83:19:3e:0a:03:
af:84:5f:b4:de:97:e4:d6:dc:97:8c:84:6e:2c:94:
29:17:d2:ac:85:d4:d1:0a:43:fd:be:b4:86:05:b2:
c8:e7:aa:7d:58:4f:87:b2:ba:61:2c:10:59:79:51:
a9:98:7f:38:75:2e:8a:a2:60:dd:50:a9:6c:be:b1:
6b:66:f5:cd:31:35:4d:86:da:be:dc:d8:36:da:47:
06:10:89:4f:53:82:13:94:fc:78:2c:bf:3a:95:a1:
2d:b9:22:7b:a4:ff:51:42:10:e5:74:a8:92:d0:0a:
58:83:ea:30:28:fa:1e:70:46:dd:ed:65:f0:aa:84:
e7:09:17:d3:26:80:4d:63:ac:0a:d0:e8:21:f5:fe:
74:85:fb:0b:d4:ee:31:cb:f2:8e:a8:6b:ef:da:8e:
da:dc:6a:fb:dc:95:de:e2:11:18:65:33:aa:6f:2e:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:AD:BD:A0:45:E5:B5:2D:04:4E:FD:C0:CB:B7:25:89:6E:F7:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:72::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:55:f3:f3:e6:8f:5f:ec:84:48:d6:e8:cd:85:ec:c6:f5:cc:
d7:bb:b3:03:37:7c:1c:c7:b2:77:ef:39:f0:af:6d:f1:dd:a7:
a1:ea:25:ce:b5:70:f1:b1:d5:58:9f:a8:3e:ff:68:58:02:c6:
a0:d7:08:29:8a:83:e4:88:b7:a2:82:1f:8a:8d:88:38:18:a7:
69:11:ac:f0:0c:41:6a:a9:41:bf:d2:b7:21:a7:bb:52:0c:7e:
6e:e6:74:e9:aa:d1:69:c3:64:84:93:79:b1:61:e0:51:81:82:
62:75:16:8d:69:36:0a:1c:be:40:20:c7:91:b3:50:40:c4:2a:
51:d8:7a:17:7a:94:d1:88:c4:a7:bf:80:df:de:38:cf:76:6c:
83:8b:5d:ab:1b:c6:77:59:44:01:57:47:a7:af:22:cb:f4:a4:
36:ba:e1:f4:8a:e7:c5:fc:a7:a2:79:78:5c:75:b6:c8:e4:f7:
9b:86:b1:d4:cf:e0:d7:58:d9:30:77:38:95:f4:d9:05:7a:af:
6a:cf:27:7f:10:d6:4b:87:04:0a:0a:23:bc:a3:87:17:cb:88:
45:d2:5d:e7:9e:49:30:29:69:d7:ae:f5:ed:f2:84:b6:49:f7:
14:05:67:73:76:8d:3e:8e:1e:8f:e8:f4:ac:36:c8:dc:8b:3d:
b0:e3:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:42 2025 by rpki-client