Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7eac3bc3-d2bc-3dfe-aca7-e584e2615db9.roa
File: 7eac3bc3-d2bc-3dfe-aca7-e584e2615db9.roa (raw, json)
Hash identifier: KmPtQS0bZz55aFkd6DDTIk+HuQuSAtO2mf3/xgvOCFQ=
Subject key identifier: 19:97:E9:C2:89:5F:34:6D:A7:C8:37:CC:CF:D3:C6:C7:D2:09:97:A8
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C424B27B3ACFA24B878D70
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7eac3bc3-d2bc-3dfe-aca7-e584e2615db9.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 2620:11a:c00c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Apr 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:24:b2:7b:3a:cf:a2:4b:87:8d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=21601c9f-374c-4552-bdbc-970e429238c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:cd:d1:14:13:6f:24:ee:c5:aa:9b:46:0b:
3c:f6:4a:20:7b:da:08:c7:3d:de:f1:a3:2a:96:0e:
f4:b2:04:ab:32:59:35:2f:53:90:e3:69:a1:42:6a:
05:f4:15:95:44:53:1e:d3:08:f0:55:37:f0:c6:1c:
0d:bf:da:27:b5:74:60:b7:3a:fd:d7:1d:f5:d4:78:
ca:03:46:c0:7b:86:f0:d8:1b:6b:08:45:0d:8b:f5:
04:e5:f7:00:72:6f:79:ef:fc:37:0e:34:ba:ef:6b:
f3:4c:9f:4a:ea:bb:b3:f7:10:86:c6:40:fe:c5:4b:
5f:ca:98:6f:59:de:dc:2f:b2:e2:aa:7e:6e:79:ea:
03:27:b8:7e:53:3a:c5:2f:e4:f1:c1:70:8d:cb:f1:
a5:6f:a6:49:cf:17:21:76:ef:cd:31:65:66:a1:6a:
86:b9:0a:b0:7e:d1:9b:c4:9f:6f:a5:94:83:2a:35:
9f:64:3e:a0:e3:9f:7d:c6:a1:59:cc:c9:70:c7:4b:
6b:1d:af:67:de:c8:2c:2a:6b:7e:d8:23:b9:6c:92:
24:56:81:9b:d3:d9:b9:f3:bb:95:2c:69:d2:0f:23:
88:d6:87:22:5f:a0:9a:4a:59:11:d8:65:e3:91:a8:
08:1d:72:a5:ee:b4:92:cd:2a:85:53:48:00:ea:98:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:E9:C2:89:5F:34:6D:A7:C8:37:CC:CF:D3:C6:C7:D2:09:97:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7eac3bc3-d2bc-3dfe-aca7-e584e2615db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11a:c00c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:d5:ed:e3:dc:53:50:ec:c0:78:cc:5d:8f:aa:aa:c7:33:9d:
61:14:d6:b6:2b:70:82:8f:04:7b:6e:ee:50:ca:07:20:e8:23:
86:56:96:2d:84:8a:5d:4b:d9:fa:eb:8a:48:6a:5c:a5:a0:92:
53:07:78:e3:c3:b7:90:c6:52:d2:61:83:35:29:31:96:b7:dc:
99:d5:fe:08:b0:00:e2:7e:cf:bf:27:40:b3:4e:1a:77:59:64:
1c:de:a4:ef:6e:66:c1:b7:fb:ee:f4:7f:32:75:fb:df:e7:9d:
d1:a9:59:6b:a5:22:1c:90:10:b3:da:56:7a:cb:2e:72:a0:4a:
61:a4:56:13:04:c3:1e:ac:35:49:e8:cb:06:ae:a5:3f:2f:8f:
75:4e:61:8d:e1:c4:4a:f9:4b:23:5b:91:13:c9:c3:88:ce:27:
8e:59:2f:b3:f0:b8:33:d5:00:c3:64:87:9c:87:2b:d1:08:7b:
18:70:33:33:1d:4f:06:40:5a:da:61:97:b2:e3:d2:03:0f:7f:
c6:7a:42:b1:90:d8:e5:94:ca:94:cb:a6:3d:43:39:f3:5d:eb:
93:e8:58:bf:10:6c:1c:0f:d7:cd:01:9a:9b:59:1e:1d:c3:80:
23:2b:93:7f:5f:00:ec:25:69:b3:2e:37:ff:b2:e5:1d:15:e0:
92:44:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 19:39:16 2025 by rpki-client