Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa
File: 39179c1f-cc21-3985-9eb4-794fcf01a39d.roa (raw, json)
Hash identifier: +qR+GS1x8wVmAQiJF5wmMDj2+F4tpH5RDMrV22MJVSQ=
Subject key identifier: 25:2D:E5:63:27:1D:A4:9F:1C:2E:CD:50:F5:B9:DC:A4:10:14:29:3C
Certificate issuer: /CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
Certificate serial: 010D0C9F4328584917DC0281B8D799DB5A4ACB00
Authority key identifier: 0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 40939
IP address blocks: 2602:f9f8::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:02:81:b8:d7:99:db:5a:4a:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=888ce253-50ef-45b5-80eb-23cd05eeff16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:ba:4a:ea:ac:b8:77:06:58:dc:34:bf:20:
f4:05:d7:9b:e3:46:ee:b9:d7:5e:f3:71:3a:47:1c:
a8:1a:7b:9a:3b:03:d8:8e:82:a8:18:7f:6c:03:f5:
73:90:4c:c6:67:de:b1:a6:78:28:00:48:29:0b:6d:
3f:c6:56:ce:f4:00:65:36:ba:b0:3d:ca:bd:1a:78:
e7:db:39:1a:1d:34:45:75:19:cc:3f:a7:71:03:81:
c9:d9:bb:92:0e:9f:fe:97:81:f5:d5:47:7c:a1:eb:
44:62:87:5f:96:47:d4:7a:64:d8:2a:de:fb:54:4b:
0a:de:48:42:d8:6a:9f:64:29:93:eb:1b:49:2f:f7:
cf:35:49:ea:65:e6:78:f7:ca:c5:4a:6c:04:0b:52:
5f:bd:d9:2c:10:01:f8:24:71:b3:4b:b4:fd:7c:c9:
09:76:28:73:2e:b1:6e:67:73:7d:1e:83:06:9e:80:
17:6c:98:41:8b:06:93:c1:f6:fc:97:b4:5e:1e:37:
8f:ce:4a:8b:b0:bb:b1:44:a4:2a:da:bc:c8:80:70:
cf:24:53:f5:66:fa:e0:14:a9:bf:8d:b5:d3:9d:6a:
26:36:db:bf:4f:7a:ca:1c:b0:6a:55:58:ce:78:5e:
e3:8e:e8:b9:e4:0e:45:8c:8e:f1:eb:47:d1:7f:07:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:E5:63:27:1D:A4:9F:1C:2E:CD:50:F5:B9:DC:A4:10:14:29:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl
X509v3 Authority Key Identifier:
keyid:0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:50:93:f7:af:ea:8a:d1:a1:cd:97:8c:4f:f4:f1:64:18:34:
d5:f9:14:51:44:11:a2:fa:d4:33:95:db:1a:78:5e:8a:a7:c5:
23:97:1a:26:12:1b:47:ef:c7:5c:d3:b7:12:dd:3d:a2:20:89:
e2:45:d9:29:f0:df:7e:cb:c0:6f:23:aa:2f:55:92:db:b4:ce:
38:73:5a:e4:c8:e7:5c:89:be:f1:86:2d:99:cd:60:ff:d1:a7:
69:37:ac:64:f7:8a:71:c2:0e:2c:aa:ea:c0:42:6b:e9:fd:c1:
85:fe:32:be:c8:c6:b5:e2:ea:d0:94:97:12:23:5f:6e:2c:1a:
d5:1a:ae:89:66:91:e4:81:cc:4d:b9:31:6e:b0:c9:68:05:48:
36:9f:53:a5:c0:5b:ad:c6:9d:44:39:a9:03:54:b5:93:b3:69:
f2:9c:ae:f6:13:f3:6c:ec:27:91:75:cf:d2:7b:31:39:f8:55:
67:3f:2a:9b:58:8c:9c:55:78:d7:ef:5b:b1:2c:bd:99:8f:13:
ec:c1:37:a7:b4:35:00:b3:44:f9:a2:ad:d3:66:be:1c:3a:5c:
d5:36:32:3f:14:69:d5:9b:96:44:0f:aa:ce:3e:39:ed:75:89:
e4:56:6e:72:48:7a:b1:e5:88:3b:8e:f7:07:70:9c:14:b0:6e:
c7:56:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:23 2025 by rpki-client