Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa
File: f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa (raw, json)
Hash identifier: bvHmz+H9nrS6LkmBIsfF4BqxH3dbVy+3xmYcC2uv854=
Subject key identifier: 49:99:A5:92:CB:07:7C:24:CD:95:AD:F7:E5:93:73:FB:9D:B4:82:EB
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F43285848EECA22B3B0402553CD2F4E00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa
Signing time: Wed 19 Feb 2025 08:56:33 +0000
ROA not before: Wed 19 Feb 2025 08:56:33 +0000
ROA not after: Tue 20 May 2025 07:56:33 +0000
asID: 13901
IP address blocks: 2001:500:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Mar 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ee:ca:22:b3:b0:40:25:53:cd:2f:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Feb 19 08:56:33 2025 GMT
Not After : May 20 07:56:33 2025 GMT
Subject: CN=7601f916-cf70-4c12-b80a-12003007b446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:88:9c:c1:bd:6c:ee:45:22:9f:cb:56:ed:
7c:48:f1:ca:37:fd:0b:65:95:89:d9:e7:22:03:f1:
0c:7d:ba:87:13:ce:cc:96:97:7f:ac:6f:aa:f1:9e:
1b:b5:d0:c0:f5:94:69:88:70:ca:12:84:ee:19:ea:
aa:a4:28:08:3e:93:2f:d4:7b:51:a5:bb:77:9e:d2:
17:b1:76:3a:1a:6e:6d:f7:e4:e3:41:46:b0:66:c3:
fb:4a:8a:f2:4a:0a:af:76:97:34:ca:ea:2f:8f:46:
47:f2:01:8f:0a:65:36:24:ea:a9:f2:e9:be:08:5a:
7f:28:19:6d:5a:98:c3:89:93:92:c8:f9:ee:40:b7:
05:23:af:43:d1:98:3a:d9:8b:75:aa:f2:0c:7c:1b:
8a:2a:74:27:8a:c3:e6:84:67:6c:af:f3:a1:a9:8c:
32:9f:17:94:5e:fa:cd:35:0e:21:f8:d5:e5:3b:c4:
0b:ad:f9:68:ca:04:a2:5e:60:f5:10:d7:3a:e0:69:
74:18:a9:7f:01:ea:45:44:0b:84:02:a0:8b:62:1f:
7a:27:ab:2b:ce:61:64:75:85:60:6b:3d:f7:24:c1:
ff:9b:67:16:23:ad:e6:6d:8d:31:d2:2a:7f:44:7c:
4b:f7:aa:2e:5e:4d:be:56:1b:a9:ec:83:01:fa:59:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:A5:92:CB:07:7C:24:CD:95:AD:F7:E5:93:73:FB:9D:B4:82:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:ea:a5:4d:78:20:7b:bb:0a:90:27:13:73:e8:87:5b:6c:b5:
1e:09:e5:35:b5:bb:56:ab:42:c5:b7:6e:b8:ec:70:40:81:5f:
58:a6:26:a8:6f:8d:a5:77:82:fa:d5:3c:91:78:3c:74:fc:a3:
c0:33:da:ec:97:fa:31:f4:3f:17:73:03:5b:42:d5:6d:40:d4:
4e:d6:43:2e:ee:de:b9:bc:2c:bf:a2:f6:88:0a:d6:2d:f7:63:
27:04:0f:4d:9a:ee:a9:65:4e:9d:12:a7:95:1b:0e:a9:a8:7c:
5a:25:ca:2b:e5:b8:e2:6d:59:32:33:2b:7e:4c:02:05:21:e5:
9c:f4:d5:90:a0:d1:6b:8a:95:09:92:56:66:b5:a5:ec:83:76:
e2:82:58:1e:e8:aa:fd:1a:97:72:53:1f:14:83:83:31:2d:c5:
4d:24:61:f6:68:b0:58:38:ba:e5:32:95:fd:d1:07:ca:3a:62:
b6:09:ca:1a:a7:43:b8:0f:04:3c:92:e5:f5:e0:f9:e2:e8:5e:
86:12:f5:23:43:f0:4f:07:35:e2:be:91:d2:0d:85:fa:76:a8:
09:37:ce:0a:a0:54:1c:96:20:65:74:bf:64:1a:70:c2:17:cf:
1c:b1:67:b7:58:0a:c5:07:4c:4c:cc:55:bd:d8:88:68:0b:53:
d8:ae:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 21:59:13 2025 by rpki-client