Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08a86c02-bba5-3bfc-920c-186dd293b9f3.roa
File: 08a86c02-bba5-3bfc-920c-186dd293b9f3.roa (raw, json)
Hash identifier: 6KezVzT7M/VeIPnjLj7IyRpN0LbMtjSZc4ZQBJhBJh4=
Subject key identifier: C8:54:00:BD:94:B7:CE:4F:F0:AE:D8:25:F4:8A:CA:64:1F:5D:FE:62
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A13620BA49CFFB5BD8FADCD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08a86c02-bba5-3bfc-920c-186dd293b9f3.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1411:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:20:ba:49:cf:fb:5b:d8:fa:dc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=c5359e2d-fbea-42dc-8ac1-c51bdf5836a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:1d:c0:d8:66:1b:f3:03:cb:65:51:09:71:
0f:bf:71:75:bb:53:e8:a6:34:ce:e1:5c:85:6d:c6:
d5:00:54:8e:d7:9c:e0:f4:f2:0d:cc:d6:92:55:b6:
5c:1a:f6:44:d3:cc:23:23:ac:13:07:5b:a8:68:76:
7c:2a:4f:b9:44:7e:75:d6:49:79:f8:79:98:e3:76:
d6:7e:5d:1e:f7:26:eb:4b:98:c9:5a:44:1b:c3:f8:
50:b8:d8:f4:50:2f:f0:d4:db:83:80:45:9f:5a:56:
98:cc:86:6d:06:a3:8b:c8:43:af:93:b4:57:62:0d:
7b:0c:e9:e0:a6:d8:bf:9e:67:72:7d:9b:b2:e6:25:
88:7a:3e:04:ab:9e:e7:00:73:fa:43:2d:d6:9d:d1:
a6:d5:06:71:c3:33:04:7c:ef:f1:86:22:d5:d5:77:
23:68:ae:2a:01:f4:5a:54:d8:69:bd:86:17:09:dc:
68:d2:eb:23:0d:eb:25:a8:eb:fd:bd:05:8f:58:ee:
c9:ea:62:f9:9d:35:0b:95:be:85:a4:9e:e9:5a:91:
58:f5:d0:d9:41:c5:df:36:98:4a:90:be:68:e5:0f:
39:c3:39:82:ea:b7:df:1e:e2:56:0a:a6:8f:be:11:
e3:32:4c:cf:6f:b8:7f:ec:06:b2:7b:8e:5d:05:37:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:00:BD:94:B7:CE:4F:F0:AE:D8:25:F4:8A:CA:64:1F:5D:FE:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08a86c02-bba5-3bfc-920c-186dd293b9f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1411:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a6:bf:af:55:9f:10:70:bf:76:2f:82:da:aa:b7:59:ab:66:
66:bd:fb:0b:6c:30:55:41:f1:ae:8b:ae:1f:4b:e1:45:6d:78:
63:e1:ec:ef:54:89:90:27:43:ba:88:b7:9a:e7:b3:4e:65:cc:
69:e1:20:22:df:4b:f7:93:40:da:34:ae:76:d2:50:f4:ba:d0:
03:55:40:a7:cb:1f:4f:bf:fe:de:40:95:7a:46:13:cf:52:54:
4f:5d:e1:3d:6d:13:40:2e:b5:24:ed:da:b6:39:b6:74:6f:3b:
37:a1:9e:06:3f:eb:e4:1e:8a:63:32:0f:25:4b:2f:42:50:df:
31:9d:70:03:90:ad:68:ac:15:c9:13:8a:26:bd:b8:f6:6e:3b:
47:83:2e:cd:de:ee:51:b2:13:ed:8f:b0:e9:22:d5:92:b6:d5:
11:c9:dd:9f:9c:2e:25:b6:0a:dc:45:a4:ff:93:e2:d9:31:2c:
53:2b:eb:ba:7c:13:69:66:11:32:58:88:0c:a9:c1:07:19:42:
9d:b4:c4:2f:4d:ba:1b:38:2e:b9:41:c7:bf:83:eb:da:bb:46:
ab:b2:b7:fd:e0:81:8e:46:fb:f8:fb:29:60:02:0c:7b:bc:6a:
e8:ef:fd:e7:e2:13:d9:0c:3c:12:91:59:6b:0e:90:c3:3b:62:
f3:91:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:47:59 2025 by rpki-client