Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0678a963-b458-33a1-a330-e012e17d07c8.roa
File: 0678a963-b458-33a1-a330-e012e17d07c8.roa (raw, json)
Hash identifier: oUc+66NN5nqwa1Bj9P2TJBJv2LRseUNAh4sqYqZCiD8=
Subject key identifier: 60:A3:37:88:F3:7E:AA:E4:62:D8:E1:11:8E:DB:2E:26:BA:BC:B1:8A
Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial: 010D0C9F4328584973DEE67F50021670A0907900
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0678a963-b458-33a1-a330-e012e17d07c8.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 2152
IP address blocks: 2607:cc80:7000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:e6:7f:50:02:16:70:a0:90:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=c476e2bf-f814-490e-abfc-3f87c5c43296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:fd:12:46:94:a3:bd:f4:54:6d:00:e0:b2:
ca:a0:f1:ba:02:b8:4a:ec:8f:d6:3f:4d:46:68:5d:
b4:c0:b6:81:0d:54:29:10:fa:aa:50:bd:23:ec:a6:
66:36:a6:a1:8e:1e:8f:d9:58:f1:21:00:d7:8f:f3:
51:86:c6:27:da:ae:cf:12:56:e2:59:9c:d6:f9:6c:
6d:13:63:43:23:47:f4:0e:53:7b:d1:f1:de:ca:40:
59:f1:3e:bb:6b:24:4a:1c:bb:34:b5:a2:8e:40:79:
46:f2:fd:c7:a9:3c:d0:d3:43:36:ed:d8:54:4a:4e:
bb:be:c5:83:34:ce:9f:ef:c9:b9:f2:de:ec:2e:61:
92:39:9b:48:1e:fb:8d:b9:6d:69:74:b7:c4:97:00:
75:87:09:9c:d7:8e:a4:fd:8d:2e:04:cb:1c:0f:20:
ca:4b:9b:b2:d7:d1:ae:cc:d3:ec:ff:7d:9f:55:f5:
4a:d8:8b:6b:1f:f4:e0:e9:0f:91:9b:14:08:e0:8f:
c6:48:7b:d3:c8:1c:f9:01:5c:6e:d5:69:f7:37:4a:
32:97:47:d1:65:64:38:48:f5:ae:9c:8e:2b:4e:42:
be:fd:30:0c:c8:06:79:a8:1f:fa:c4:0d:4f:c4:35:
b2:68:1d:9d:66:ba:4f:d0:4d:5a:77:8d:aa:47:11:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A3:37:88:F3:7E:AA:E4:62:D8:E1:11:8E:DB:2E:26:BA:BC:B1:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0678a963-b458-33a1-a330-e012e17d07c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
X509v3 Authority Key Identifier:
keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:cc80:7000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:cc:83:bb:dc:89:d6:ed:21:a6:40:66:62:00:ba:80:d5:f5:
fe:a7:6c:33:ef:f2:7d:eb:dc:3c:bc:a7:f5:4d:62:0c:c2:8b:
e1:f7:9a:88:89:45:ab:ff:fc:5a:5a:d4:25:13:de:67:cc:12:
a8:df:5d:b2:86:e2:a0:c6:0f:5a:97:f0:d8:9f:7e:cf:fb:a7:
86:e0:85:29:41:da:ff:e0:f6:f1:8e:78:5b:05:24:70:01:fe:
c3:9f:ba:32:3f:84:3b:3b:e6:d7:9f:30:ae:8b:72:71:d5:f8:
09:2c:d2:62:e3:a2:2b:d9:35:02:bf:ac:60:1e:f9:d8:22:68:
1c:78:90:47:c9:70:e3:1e:84:b4:fe:73:7f:88:da:c4:22:22:
4c:73:8b:66:b6:8b:99:4c:82:7f:e6:0f:ee:50:25:39:b4:84:
06:92:9a:64:f9:5a:1f:35:94:e4:49:53:5b:b2:97:bc:06:c1:
30:48:8d:c6:d4:78:9c:f4:b6:d1:04:1f:8d:81:ac:9a:9c:ed:
1e:bc:3c:70:61:57:ad:51:ed:ce:02:31:6c:cf:1f:41:9f:39:
ca:e6:75:22:87:be:b3:9a:2f:8d:e1:f8:76:ec:74:19:58:17:
36:e5:15:35:3b:e7:b0:a6:a0:4b:b7:a6:15:1c:81:ba:5b:c7:
61:38:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:58 2025 by rpki-client