Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/170aefc8-3064-330f-bbc7-02458f352674.roa
File: 170aefc8-3064-330f-bbc7-02458f352674.roa (raw, json)
Hash identifier: SvDqVzuu9X+gLnst5OmhWB2qSXojAZ8GfUlZgF9BOow=
Subject key identifier: EA:CB:3D:65:71:C2:EC:82:D1:81:4D:C0:D2:E4:52:48:18:1D:DE:8D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400D8FBDDBD9D842551D980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/170aefc8-3064-330f-bbc7-02458f352674.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2600:1004::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:d8:fb:dd:bd:9d:84:25:51:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=bf4041b5-af18-4c4f-9853-9e95e2065d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:5f:ef:bd:eb:a2:a3:fb:63:fe:d8:d5:5f:
27:ac:02:d3:22:39:a2:a2:b0:45:10:01:f7:3f:fb:
0c:62:01:69:bd:82:9e:a6:41:73:9d:d0:c1:15:67:
83:c6:24:d8:09:a9:ea:2f:2a:60:54:51:36:a6:db:
29:31:76:0b:e9:6a:be:08:1e:18:db:44:71:61:45:
0a:43:14:d0:90:b7:e1:72:96:e3:1e:f2:4e:94:66:
d9:03:49:5f:89:b9:c2:73:6d:62:88:d0:0d:be:bf:
c6:bf:0d:dd:3a:88:49:7b:ba:05:39:e1:01:12:6c:
e7:48:ce:07:f7:52:b2:6e:59:ea:3d:57:ba:03:29:
d6:10:0b:13:cf:b0:d8:31:ee:b8:df:60:9d:18:cb:
7b:1d:95:fc:07:45:ed:66:a9:7d:a9:88:aa:90:c7:
c4:ec:ee:c3:96:7e:10:99:37:e8:9f:b6:c9:5f:b5:
69:25:ed:6d:bf:79:3f:37:ad:e0:ec:c2:51:dd:56:
e2:b3:d6:71:62:b8:d4:50:4d:2e:78:0d:db:91:9c:
8b:e4:c1:bc:94:0e:5b:d8:07:62:de:59:67:a9:1d:
64:0f:1e:4d:46:a8:f9:b9:54:53:88:b9:8d:04:d9:
7d:2b:f0:02:e6:a2:03:d3:06:2e:a1:91:dd:ef:cb:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:3D:65:71:C2:EC:82:D1:81:4D:C0:D2:E4:52:48:18:1D:DE:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/170aefc8-3064-330f-bbc7-02458f352674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1004::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d0:13:cc:2a:69:3a:37:f3:4a:0e:7f:6c:44:8f:ef:f1:ad:
28:7d:35:9a:d0:a7:9b:f2:af:cc:a7:2f:49:09:df:f3:52:37:
41:12:48:54:8f:39:f2:f5:01:fa:83:3e:85:dd:89:d7:61:75:
b1:c6:eb:64:83:2b:8c:73:d6:b6:42:28:24:91:c2:a5:69:d6:
5c:e9:a6:24:5b:84:9b:ec:fd:05:c3:0d:5f:b8:1e:32:98:d5:
7a:73:fc:e0:15:2c:2c:78:61:f1:ea:42:46:e0:4c:b3:47:03:
47:90:5b:9c:38:c2:06:5c:c2:4e:d9:b3:4d:c6:84:24:af:fa:
c1:3a:72:98:40:5f:48:4a:78:b0:1c:ff:56:e6:cc:43:26:81:
63:83:62:9c:53:4c:41:43:46:3f:67:98:5b:c4:ac:ce:a7:d5:
a3:87:3a:a0:3e:7d:11:8d:71:54:66:ad:e3:40:8b:4e:2e:de:
cf:b2:5a:b1:dc:bf:83:8f:ed:46:02:6c:c8:08:78:9e:08:65:
ec:eb:9b:e6:b4:d1:8d:c8:e1:16:cb:20:bc:83:d3:d2:ab:4a:
c6:4a:94:63:83:bf:45:57:b1:86:67:6f:2b:6f:b4:63:09:8e:
e9:9e:54:e7:e4:db:77:18:d4:79:9d:ec:99:6f:4f:78:26:cc:
3d:75:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:49 2025 by rpki-client