Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa
File: 74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa (raw, json)
Hash identifier: vk90C12X8a2V/bkCJJ7O9UQ9dEUuKA20h3oeGbm0wEs=
Subject key identifier: 14:C8:38:83:86:38:8A:E0:4D:AC:E6:6C:F0:66:3A:8E:5B:82:A0:4A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400D772D38882738E14CD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100f:b0d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:d7:72:d3:88:82:73:8e:14:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=8e0992e7-2622-4085-a8a1-772fd3a97f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:7b:63:41:6c:19:53:0d:5a:00:82:be:bd:
20:18:27:e3:db:cf:2e:d2:60:cd:66:23:e7:25:15:
52:bd:00:1d:77:0c:c8:cd:68:b2:fc:78:18:eb:3f:
75:84:df:b6:d3:a6:77:89:96:93:cc:0d:0a:11:b6:
d7:1d:32:f6:26:27:95:5e:08:c3:5d:c8:4a:19:91:
bf:fd:7c:c1:b5:5b:9f:9b:fd:0d:0d:25:51:24:04:
a9:5a:05:56:31:1d:98:75:45:20:be:e9:28:6f:4a:
a8:42:4f:6c:c9:4b:cd:e1:b8:a6:07:4f:c1:a1:ea:
ec:7f:73:46:ed:3f:c5:5c:7f:0b:c6:ad:fc:38:3e:
ea:75:14:c8:a3:37:c0:7c:2f:72:ad:24:61:2c:d9:
bc:e1:99:b1:3d:a1:43:9d:73:c7:13:9c:28:b4:48:
f4:8e:9b:73:ef:d6:f8:6e:0c:92:c6:58:4b:f2:3c:
3a:b4:57:de:61:f5:bf:f6:fd:b0:e1:39:e5:4a:00:
b1:38:06:92:24:ae:53:dd:41:28:f9:59:72:6c:6b:
a3:60:4b:43:ef:6a:0f:8d:c6:2a:c6:7a:a3:4e:36:
7f:78:f4:a5:8e:f8:c1:cd:6f:fd:b9:f8:a7:30:0e:
4d:8c:b9:5d:68:87:f9:c7:8a:a6:ca:84:fc:7e:91:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:38:83:86:38:8A:E0:4D:AC:E6:6C:F0:66:3A:8E:5B:82:A0:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100f:b0d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:4c:79:63:42:b3:2c:de:4d:db:e4:1a:78:62:f6:fd:8b:ad:
6c:5a:bc:81:95:b5:86:14:a4:cf:4b:ae:09:76:40:7b:92:99:
fe:d5:26:bc:6a:80:e0:5c:8e:4f:9d:3a:06:dd:6d:98:02:f0:
84:77:74:40:80:fe:88:99:72:72:0a:b7:12:19:07:81:82:b1:
8d:c9:c3:cc:32:09:2b:d7:de:52:11:02:91:eb:5a:c9:75:f9:
28:38:4f:06:30:5c:5d:d5:ad:f1:dc:38:0b:d0:79:75:c7:7a:
54:b7:e2:13:7e:a2:4d:dc:32:e9:0a:d7:78:d0:0c:5a:ec:49:
ec:97:29:44:63:f0:40:ec:da:d1:67:99:ce:88:e7:26:01:f1:
2c:f2:f3:7a:61:cd:7c:64:ad:18:64:57:3d:ea:de:f7:ba:99:
f8:c3:00:83:60:fb:6f:58:54:64:8b:a3:e9:fa:4d:51:e9:c2:
9b:b5:04:77:48:51:5c:39:46:64:cb:64:10:61:d9:47:88:f9:
76:a4:58:c3:83:3b:ab:b6:f4:68:f6:7f:7f:bc:ac:4d:a4:79:
66:cd:1d:d2:1c:dc:e2:04:e9:95:04:a5:59:e7:01:ee:88:da:
41:14:d7:5b:79:29:87:f4:25:50:60:62:5a:de:31:45:49:57:
b8:12:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:22 2025 by rpki-client