Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
File: 52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa (raw, json)
Hash identifier: tPmx1b3j8Ky1si0PoBXvFsIueOjOUhUml4iqtHzU4cU=
Subject key identifier: 72:76:FA:42:36:E7:A6:15:E5:8F:A9:C9:59:71:52:F2:6D:1D:72:A3
Certificate issuer: /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial: 010D0C9F432858494303EF694FD732982E981680
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 26801
IP address blocks: 2602:fddd::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:ef:69:4f:d7:32:98:2e:98:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=cbaf2b34-a97b-44ba-8bf5-01bb0e5464fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:b7:08:34:e9:5d:f7:b5:f7:47:5a:c1:fc:
00:55:82:96:d6:f9:da:63:b6:a7:cc:be:82:7e:77:
10:43:9a:7c:47:2a:c1:09:b1:15:27:7f:94:03:19:
d6:8b:55:ea:02:fd:29:e6:af:52:72:4f:18:12:66:
df:aa:0a:ce:e7:74:43:85:6f:55:a6:db:66:23:04:
f3:8c:2f:b4:bb:66:a6:f3:4a:6d:cd:1b:cb:1d:81:
06:ec:c4:48:cf:74:1c:ed:34:f2:cb:e8:59:ee:e7:
aa:a4:86:b8:30:7b:28:23:ba:63:41:a7:1b:92:2b:
1d:ef:fa:df:eb:77:60:b9:50:e3:41:6d:17:ee:35:
6f:05:a5:6b:56:a0:96:40:85:21:48:9a:27:f1:76:
34:7f:aa:44:b7:b7:6b:ad:c7:f9:fb:4f:b4:43:79:
73:9f:96:ab:2c:35:b3:91:06:6f:8d:02:c1:97:7b:
94:7e:80:5d:28:8f:b9:ca:3b:05:9f:97:39:e9:a1:
00:03:de:8d:22:01:f2:fd:e6:d9:3e:ae:5b:a0:bf:
f5:72:63:be:36:b8:e4:b4:2d:4c:a9:cc:91:c2:c7:
e2:6c:df:93:1f:d7:e2:00:6a:79:01:b0:a1:59:56:
e7:fa:96:78:8c:f0:60:75:f5:d1:ad:f7:e3:81:6d:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:FA:42:36:E7:A6:15:E5:8F:A9:C9:59:71:52:F2:6D:1D:72:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
X509v3 Authority Key Identifier:
keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fddd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:fd:7d:11:17:68:ad:66:91:9d:4f:68:df:1f:55:30:35:96:
ec:47:cc:01:df:99:1d:bf:74:45:f3:de:6d:40:c5:01:01:a1:
49:26:b7:5a:73:24:15:25:3f:f8:1f:55:f1:3d:4b:ef:f2:c3:
9b:0f:ae:7e:cf:ba:44:b8:98:2b:32:67:c9:92:ab:4f:3e:85:
37:2c:b7:54:01:c0:ba:d8:37:86:3a:b5:39:43:e8:31:ef:a8:
02:9e:ca:e5:ce:42:cd:f7:5a:96:50:03:56:51:c3:a8:59:19:
51:c6:5d:bb:ae:6c:a8:4d:e0:a2:1a:de:aa:a2:6d:60:8e:c7:
f0:40:b6:88:0c:ae:ea:ff:6e:f0:54:05:8c:1c:1a:84:d1:f4:
80:95:b0:dc:5a:aa:40:30:6f:b4:43:82:79:36:e1:aa:13:0d:
58:02:6e:a5:4c:11:95:e3:39:2a:82:0c:86:e3:0d:9d:f1:d0:
4f:dd:da:62:ae:b6:91:65:7f:ce:2c:3c:51:96:40:e2:6f:d3:
35:8b:72:d9:93:c0:83:59:fd:42:e9:41:39:93:5f:76:e4:ae:
78:f5:b3:59:d6:de:d9:6e:5c:55:8d:29:df:dc:b2:bd:fb:50:
41:f1:f2:93:a7:4e:20:22:48:cd:5a:d0:cd:c0:b5:c3:68:7b:
bc:73:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:21 2025 by rpki-client