Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71fb389b-1a1d-3b34-b730-a28da3b0f8cd.roa
File: 71fb389b-1a1d-3b34-b730-a28da3b0f8cd.roa (raw, json)
Hash identifier: r9CkO7ZNjbmuwhioW26U+RDx0BPFULdvt1ks4yXwhQw=
Subject key identifier: 28:2E:D8:A8:C8:7C:B2:FF:6D:89:E6:B6:80:B5:0B:C3:F8:7D:74:B4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEA8F2F08CB863EBF54A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71fb389b-1a1d-3b34-b730-a28da3b0f8cd.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1012:b330::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:a8:f2:f0:8c:b8:63:eb:f5:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=03f7d58b-a668-4321-8ae0-f2643ac5801e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:1f:3e:22:76:ba:f5:70:a6:c8:a2:9d:af:
69:29:e0:06:01:4a:77:48:d3:0f:03:93:8e:90:7d:
fb:c9:5a:2d:2b:d5:f9:80:d6:9a:73:89:30:10:d2:
c1:fe:66:54:14:cd:5c:d3:67:26:e7:73:3f:05:01:
5d:fc:61:33:78:fc:51:2b:d5:ed:4c:90:26:9d:07:
6b:ae:f4:e0:9f:9a:55:a9:6b:ba:c0:7c:50:5a:97:
7f:84:ee:5c:44:ff:d5:4f:3a:0d:68:b7:fb:b6:52:
59:d0:7f:09:0a:90:d2:18:53:64:2c:f4:58:76:a8:
85:a1:15:70:11:d7:60:56:2e:46:91:7b:5b:1c:94:
8c:52:7d:7b:f1:f9:66:60:3a:d7:3a:a7:ab:11:ed:
53:3e:d5:b3:e6:00:f7:20:23:cf:02:6a:a1:30:b0:
5b:f8:b4:ec:61:c7:92:b7:6c:40:a1:52:95:12:0c:
14:f1:42:bd:bc:22:c7:ba:72:26:bc:33:07:20:96:
a8:13:00:1a:75:ed:f4:57:c5:c5:3b:87:b6:ab:76:
9c:6c:05:5b:90:c4:e6:c5:c1:bd:bf:5c:94:29:4e:
b9:d2:55:75:4b:64:5a:b7:51:63:8b:11:0c:4a:0f:
27:c0:33:10:a6:b1:06:14:7a:08:0e:67:15:7f:6a:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:D8:A8:C8:7C:B2:FF:6D:89:E6:B6:80:B5:0B:C3:F8:7D:74:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71fb389b-1a1d-3b34-b730-a28da3b0f8cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1012:b330::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e4:b5:10:a7:ab:9d:9f:e2:59:45:ab:62:7c:67:a7:5c:d9:
ec:cd:3c:11:4b:72:ff:e1:35:2b:61:ee:5e:73:73:04:8b:2a:
48:da:8f:6a:da:8e:e1:37:16:83:ba:7d:88:4e:23:40:00:3f:
da:cb:43:e4:8a:58:76:3a:40:15:05:12:18:83:f4:28:99:01:
d3:01:84:96:96:20:ce:40:19:1e:81:92:e2:ed:77:98:cc:4f:
58:bb:02:fe:ea:78:b2:17:d1:37:64:a3:c2:90:c8:46:fe:66:
55:54:62:25:73:0c:32:60:87:36:eb:cb:14:40:72:55:c8:4d:
6a:61:3b:6f:b0:f6:f1:41:79:7b:2f:35:fb:04:d3:07:59:ba:
29:4a:10:b7:95:d8:a0:5d:f3:5f:50:dc:b6:28:b3:6a:73:b7:
60:0f:c6:3d:38:53:c4:58:0c:e8:60:47:37:35:3a:c5:32:46:
76:fc:cc:b0:aa:35:c5:de:88:a9:6c:50:f6:09:4c:cd:91:ef:
e0:01:90:8a:8e:3e:43:39:29:cb:30:e7:9c:7f:db:34:b8:38:
12:98:d2:2e:11:4c:88:29:5e:64:f7:fa:98:de:a1:56:13:01:
2e:f4:14:58:1e:60:2e:8b:ee:79:2f:86:c5:77:39:81:12:5a:
5b:e9:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:07 2025 by rpki-client