Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158593d3-f511-31a7-84d8-12e8caf061ed.roa
File: 158593d3-f511-31a7-84d8-12e8caf061ed.roa (raw, json)
Hash identifier: gnqaU3H/ExYYGLNIGpCARf56jtdNVqCdDVXdrjPSyms=
Subject key identifier: C2:C3:1C:97:F3:55:7F:F8:E3:9E:5F:3F:67:7E:71:EC:62:B6:5D:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A9966668D835190DFAA2CE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158593d3-f511-31a7-84d8-12e8caf061ed.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 2600:1404:7400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:66:68:d8:35:19:0d:fa:a2:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=d8751fc4-651f-48c3-94af-ea2434d2319d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:0d:c1:36:76:81:ca:ec:11:b8:fa:ca:34:
ba:c1:c5:e1:78:1d:b3:64:97:21:e6:b4:9a:63:20:
ca:78:9b:3a:e6:11:31:66:be:44:f8:21:1d:1e:4a:
8b:b9:a4:13:18:31:6c:89:74:47:bc:58:a6:b9:99:
54:5e:33:dc:ca:96:74:bb:a4:dc:c5:d4:b2:36:ba:
32:d9:98:e9:60:43:9a:43:83:dd:70:d4:ec:cf:a1:
e3:e5:9a:99:73:77:bb:29:cf:50:ce:24:5c:83:7a:
15:7b:94:eb:b6:e4:d4:c1:ea:9c:75:3d:e7:58:50:
51:b7:e7:3d:ab:43:f0:17:39:53:5b:e8:3b:c9:84:
d7:3d:b4:38:7b:f1:39:b3:92:54:d3:f9:04:f2:4c:
50:2d:40:ba:2f:fd:db:49:fa:68:61:16:2d:bc:01:
9b:cf:ea:5c:92:a7:dd:3b:02:06:84:fe:e4:98:ed:
a0:c0:04:dd:50:bf:2f:8d:28:e0:3a:22:4f:bd:2d:
18:c0:14:1d:aa:bd:07:8b:6c:80:5d:5f:1e:ed:75:
ab:28:be:99:5f:c3:0c:43:0d:5a:57:79:7a:1a:9b:
aa:f8:39:17:e2:61:3f:51:20:0a:fb:32:43:e6:34:
36:16:d3:4c:d1:6d:89:11:4a:32:d6:ec:c9:a5:4f:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C3:1C:97:F3:55:7F:F8:E3:9E:5F:3F:67:7E:71:EC:62:B6:5D:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158593d3-f511-31a7-84d8-12e8caf061ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1404:7400::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:dd:19:09:a7:04:8e:1a:8e:20:a5:d9:f8:62:de:79:f7:ec:
e1:db:44:77:43:a5:16:27:bb:35:4b:35:62:1c:2d:d2:78:b9:
3e:33:2a:6b:12:23:9f:50:c0:85:ed:81:db:58:6c:c7:e7:67:
7f:81:de:65:c1:3e:f5:6b:0e:ab:44:84:de:74:6f:e3:93:51:
20:18:01:cc:7a:eb:16:7a:4f:82:10:63:66:3a:50:22:10:50:
06:a8:c4:b6:13:94:c7:fd:40:6b:bb:b5:c4:62:f0:ac:a4:f6:
46:25:87:f1:db:7c:47:21:9e:12:84:77:eb:03:76:26:05:0a:
35:eb:6e:92:0f:71:64:c7:d1:de:fc:12:1f:f7:c5:a9:d2:52:
e7:c8:a9:bf:f2:58:7c:80:cc:39:19:c6:bc:99:67:c8:0b:c7:
f8:50:a1:ce:50:dc:10:34:b2:bc:e6:9e:8b:ae:a1:d1:b6:50:
01:86:2f:7a:5f:42:a6:b6:8f:e0:45:87:7e:1c:0b:1d:94:69:
5f:9e:6d:c8:c9:74:cb:2c:9c:06:6a:f4:0d:0b:b8:f8:79:ad:
96:a3:13:c3:74:3d:96:09:78:01:e4:2d:a0:9d:ef:2b:3e:b1:
0b:28:f8:cd:ca:8a:0c:0a:3e:9c:60:a1:85:b8:d1:96:a0:07:
35:84:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:13:21 2025 by rpki-client