Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57343a22-28ba-3240-8ecb-fec8dae90a89.roa
File: 57343a22-28ba-3240-8ecb-fec8dae90a89.roa (raw, json)
Hash identifier: MIJaKDKB8F4Y+kk4LFoYu9okgLh3ItEQEmHP1JJrQnM=
Subject key identifier: 09:98:FE:CE:D3:60:CE:8D:08:19:03:BD:DB:C0:F9:E8:6B:09:08:79
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584900D778865784A1C55B32BCA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57343a22-28ba-3240-8ecb-fec8dae90a89.roa
Signing time: Tue 25 Feb 2025 20:07:58 +0000
ROA not before: Tue 25 Feb 2025 20:07:58 +0000
ROA not after: Mon 26 May 2025 19:07:58 +0000
asID: 6167
IP address blocks: 2600:1008:b220::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:d7:78:86:57:84:a1:c5:5b:32:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 25 20:07:58 2025 GMT
Not After : May 26 19:07:58 2025 GMT
Subject: CN=7c3f8f36-47d0-4c42-a2d2-4fc3d6f89f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:43:98:54:c8:07:dd:ee:76:71:2e:7c:e0:
ad:60:14:b8:cf:3b:6f:ab:e2:02:4b:db:b9:a5:39:
fd:5d:2a:12:7f:91:95:f8:23:73:32:6e:bf:29:5b:
f3:b9:d7:b5:c4:00:d0:57:bf:72:fc:05:04:98:7f:
70:74:59:d0:f1:35:6a:5f:de:f0:47:18:8b:a3:b6:
57:4c:6c:f3:62:e3:96:b4:36:aa:07:c8:20:1b:21:
93:3e:08:8c:09:28:fb:bb:8d:36:ff:cf:68:8b:2c:
95:10:41:7c:1b:22:43:21:46:41:a4:a9:fb:f6:78:
5b:cb:3f:62:46:bf:9e:73:6c:2a:ec:8f:39:9a:2a:
d5:d3:d7:38:0f:88:d6:c7:4e:89:bd:54:f3:7b:3e:
c4:ab:0f:38:75:84:9a:b0:9a:4d:f1:8c:d6:c4:30:
03:ab:57:b0:af:d8:33:f2:56:23:7a:46:97:b8:84:
ab:9b:8a:4d:8f:bf:56:34:c0:56:69:17:b8:c1:1f:
d3:4a:0c:f7:d6:69:9f:31:b6:eb:74:d9:09:80:ca:
87:b6:51:8b:eb:1c:2f:18:bc:26:94:a9:62:8e:bb:
2e:b5:49:a9:cd:ee:e2:25:69:34:4e:6b:5f:69:37:
c3:00:7e:7d:0a:0e:bd:f7:88:aa:d9:3a:93:6a:f5:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:FE:CE:D3:60:CE:8D:08:19:03:BD:DB:C0:F9:E8:6B:09:08:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57343a22-28ba-3240-8ecb-fec8dae90a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:b220::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2c:cf:76:52:b1:b4:50:ad:de:f8:99:4d:85:d4:70:1e:0d:
ba:5e:d4:6a:33:6f:ab:1b:73:dc:17:79:b0:c4:d1:52:41:cc:
c0:71:6b:23:a4:56:bd:30:34:99:e1:5b:94:c3:97:27:e4:7e:
e8:cc:23:47:7a:1f:7e:86:98:3e:92:8d:3e:8d:d1:66:b5:c9:
3d:af:14:fb:22:df:03:54:0c:fd:51:9c:cc:4b:5e:17:d1:53:
42:09:f9:35:2c:4b:15:1b:08:d8:fb:ea:3f:97:03:52:3b:53:
96:2e:d8:3d:28:86:78:05:0f:d7:dc:5d:b6:9c:71:3e:41:5d:
90:77:fd:a2:66:7d:dd:a7:59:1d:19:53:f3:a6:87:80:e0:98:
2e:09:b0:0e:e1:b4:7e:e7:a0:b6:1c:a5:aa:e0:54:d5:fb:99:
fa:0a:27:04:2e:03:ff:bc:68:ae:1e:48:a8:38:0d:e3:92:2a:
88:0b:e5:2a:d8:99:d3:0f:5e:51:e8:88:99:8e:44:bf:de:05:
a0:b2:43:3e:f5:d0:ff:02:89:38:49:33:f0:d7:a1:c6:9b:30:
23:c6:aa:05:e2:a1:85:82:ba:21:7d:d2:68:af:b9:36:87:a9:
ab:9f:bf:79:ea:be:84:14:4f:c1:aa:4d:94:2a:f2:89:c7:eb:
c1:7f:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:18 2025 by rpki-client