Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/795d6b11-4722-3af0-a249-fff1b5132ce5.roa
File: 795d6b11-4722-3af0-a249-fff1b5132ce5.roa (raw, json)
Hash identifier: JVUsm64OpvtR8fGiA1YqWFAS/0FT12Hgi+tPKyTESQk=
Subject key identifier: 0F:0E:7A:4D:CB:5F:B7:E5:37:85:AC:A7:0C:EA:01:AC:E6:2C:11:09
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A9963925F65ABE7F20A3BD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/795d6b11-4722-3af0-a249-fff1b5132ce5.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 2600:1406:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:39:25:f6:5a:be:7f:20:a3:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=bf02ecb2-d7f1-4c13-8297-0c083d56d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:3e:cb:6d:4f:af:45:ca:d7:82:ac:61:1a:
d2:db:9b:3c:42:32:ab:b7:f9:c8:34:6b:8b:cf:05:
4f:99:c3:a7:60:1b:74:95:0c:66:7b:7d:ad:d6:3a:
ee:cc:88:e4:0e:ab:0f:fd:91:20:5e:ec:a8:0e:18:
92:eb:1d:b9:6c:74:13:65:4e:9d:d5:fc:bf:34:89:
a1:db:e3:47:70:7e:21:23:d8:0c:2e:65:b7:94:85:
a2:3e:08:cb:ee:e6:72:a2:e4:04:29:84:cc:e7:25:
e0:2a:c5:74:72:0f:a1:1d:69:2d:c5:20:70:44:f3:
56:a8:91:39:6e:a2:d3:69:3a:79:e1:df:07:d6:e1:
2c:71:be:a0:5c:6f:b1:05:c9:28:0c:c7:99:b0:60:
59:14:9b:00:55:f3:e9:b6:3d:51:81:82:18:64:f1:
0b:a7:b7:a1:45:3a:91:15:43:b3:bc:ce:33:9c:58:
15:33:0d:2d:ff:e9:67:2f:8f:df:a9:2d:c3:73:9f:
d6:dd:04:a2:8d:20:88:fe:0f:c8:8a:2f:35:d3:04:
b2:63:78:3d:e3:3e:5e:57:be:59:03:9f:1d:3c:4e:
64:b1:2f:ae:01:71:b1:37:ef:10:26:8f:2c:ce:bb:
5a:42:c5:d9:73:98:4e:ee:48:d7:b5:55:72:a5:9b:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0E:7A:4D:CB:5F:B7:E5:37:85:AC:A7:0C:EA:01:AC:E6:2C:11:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/795d6b11-4722-3af0-a249-fff1b5132ce5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1406:9000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:fc:58:bb:04:10:75:7c:d0:65:40:88:ee:de:c3:a9:b7:4c:
21:d2:79:81:e4:fa:d4:5e:29:d1:59:88:37:17:e2:11:e5:0e:
44:36:54:e4:15:c3:07:f8:d5:d8:b7:5a:bd:71:2c:0e:13:71:
19:fe:e7:a0:6d:85:b8:59:a6:57:be:a8:fc:0f:a2:fa:dd:04:
03:82:1a:7c:97:b9:ef:7b:b0:92:54:f2:5d:81:9f:30:c6:af:
a9:6e:a1:d5:12:38:7d:fb:25:20:c2:ed:ea:44:07:1b:2d:05:
76:83:3c:3c:cb:fd:98:78:31:35:6b:92:1d:b9:e2:e5:63:1c:
c5:af:45:ce:d4:6d:3d:83:83:41:be:a0:5e:d4:f9:45:be:3f:
8a:aa:a7:76:b8:4e:04:60:67:08:05:25:52:59:1c:08:59:4a:
37:ff:cd:8e:5e:98:59:04:41:2f:6c:9c:94:5f:4b:b8:f3:ab:
6e:93:94:78:84:06:6f:99:09:f3:ec:bb:00:43:9e:d8:7f:6a:
d6:c3:3b:a5:1c:06:61:95:ac:f4:b4:f5:aa:a9:3b:dd:45:00:
24:5a:aa:f3:c9:e0:a4:69:5d:a9:50:ca:ac:1d:22:b1:3e:d9:
8d:93:5e:fd:c7:fe:cc:45:d4:c4:a1:30:bf:91:40:39:09:5d:
e2:e5:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:37:51 2025 by rpki-client