Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa
File: 4e47fdbd-610b-37cc-80b9-6379095faee1.roa (raw, json)
Hash identifier: 8muTXV60LkBnw3Yk3Bur3LIsu2Ecn+46dokafEV1WAE=
Subject key identifier: 0F:40:F7:EA:1B:70:E1:6E:A6:3B:1B:F7:1E:EC:92:E3:CF:F4:8D:98
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858492184380BDED4C8862D27E940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:38:0b:de:d4:c8:86:2d:27:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=4a2f87d0-3b5b-4da6-88d7-68bd76b86f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:27:30:d2:90:0a:f9:c0:23:f8:fc:86:d6:
78:a4:6a:07:35:bf:fd:b3:16:e0:69:3f:e7:91:41:
2d:43:60:c4:ee:dc:c7:9e:8a:01:3d:62:14:f1:cb:
f8:77:55:5e:1e:47:13:53:d2:7d:ae:4b:0e:ad:20:
85:06:cd:e8:29:d9:1b:0d:23:4b:6f:b2:f6:f3:a2:
73:df:99:c8:14:c1:65:53:34:f2:8a:1b:8a:95:81:
88:c6:a2:5b:27:4c:fe:71:9c:59:09:84:ba:85:08:
78:03:e0:d4:05:10:d8:f6:2d:31:62:9e:d4:08:0c:
3c:11:ff:01:a1:4c:04:61:62:47:bb:39:b8:02:39:
6e:71:4e:67:63:9c:4d:b1:96:ad:c7:9c:cd:54:90:
fd:a3:e4:89:4e:37:4b:76:2b:42:76:76:19:75:67:
6c:91:2a:77:30:f7:bd:00:4b:7a:07:c4:a4:94:db:
1e:db:d3:71:a4:c5:e3:fd:02:8e:64:c0:1a:f8:a9:
f0:6a:5a:cc:f4:45:91:26:1c:6c:75:c6:68:2c:15:
eb:e7:96:a8:52:f0:65:2c:9d:79:02:7b:92:cc:56:
84:27:46:ae:07:f0:48:e0:29:1c:e0:20:93:95:af:
fd:8c:b6:75:92:f2:fa:c4:64:5e:e6:0d:8e:bb:09:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:F7:EA:1B:70:E1:6E:A6:3B:1B:F7:1E:EC:92:E3:CF:F4:8D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:6f:da:aa:78:ed:6f:b6:1e:42:e3:54:39:a1:14:8b:c1:12:
09:df:2e:cc:fe:72:cc:06:de:0f:2a:10:c7:c2:d8:52:20:e0:
da:34:fc:dc:32:36:5f:cb:74:9c:9a:d7:87:a1:ef:a4:80:a5:
b4:53:ab:0a:2d:27:8b:2d:58:10:19:60:b4:cb:a1:fb:2e:15:
8b:67:04:c8:3e:3d:f4:a8:c1:15:45:be:7b:8f:7f:92:ce:11:
99:58:4d:25:b7:da:15:77:8e:e5:05:73:29:96:02:7b:c0:01:
0b:0e:0d:4a:67:1c:23:90:6c:2d:a8:07:2a:95:7f:c8:3b:e2:
f8:bd:db:f9:5f:45:76:8a:5e:1a:64:13:c2:a9:e3:32:e2:c3:
c8:75:6a:c1:7a:19:b0:64:04:f1:62:d7:87:e6:c7:27:4a:5a:
fd:ca:b1:3b:fc:87:a2:e2:14:da:34:dd:4e:53:50:db:e9:a4:
25:20:37:fa:49:a3:15:39:c2:1c:ea:18:7c:ef:d1:e3:72:02:
44:c3:ec:66:0e:23:ae:ac:f4:df:d7:96:b6:8d:54:a2:94:b0:
c9:dd:09:14:b3:d3:98:6b:0a:66:7a:42:a8:67:26:3c:75:07:
d6:c9:5a:86:ef:42:69:e7:b3:92:0c:31:77:e6:98:d2:a8:01:
ca:25:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:54 2025 by rpki-client