Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad58e46-281b-37f5-8b0a-10d4a7d23edb.roa
File: aad58e46-281b-37f5-8b0a-10d4a7d23edb.roa (raw, json)
Hash identifier: 3FccYZAC2ViinBWvTTjuS8QTIRPTI9sa+d1mBlqncS8=
Subject key identifier: 9E:7C:7F:DA:A5:D1:75:35:05:16:3F:87:F6:F4:2C:84:68:D6:91:0D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E9BE13A1D5E0D3AC4080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad58e46-281b-37f5-8b0a-10d4a7d23edb.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100c:b240::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e9:be:13:a1:d5:e0:d3:ac:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=dfa3713e-c369-4a14-925a-be1d6ee3c836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:49:1f:db:4c:99:a2:d7:d9:cc:9d:0d:5b:
b3:62:5d:76:db:02:94:84:36:83:7f:eb:be:24:15:
66:1b:45:b9:96:48:0b:fc:21:cd:f4:8c:8b:7a:6a:
2e:48:11:41:98:a9:2e:ef:63:a5:e5:66:73:1a:65:
5f:b7:54:7b:75:63:9d:e0:16:a8:ee:c1:be:78:50:
51:5b:40:37:4a:ec:8d:89:ec:c9:04:3f:10:39:9b:
6d:08:84:b7:d4:68:d9:22:74:7f:e7:05:18:3d:08:
87:4d:39:8a:99:97:12:c9:0f:6b:55:3e:c7:4b:25:
dd:82:27:5f:9d:31:ba:83:cb:42:25:76:95:c9:d5:
ee:f1:db:56:94:54:f1:54:1d:a4:e2:4f:2f:ab:e3:
d5:b5:22:6f:1c:65:5b:b1:ea:5c:23:bb:b1:60:b2:
81:de:8b:46:e8:e9:39:69:62:47:8a:a1:e4:90:a6:
4f:ad:29:e8:f0:e5:36:5d:d2:cf:68:d0:3b:a6:53:
b2:61:8e:c9:d6:a5:fb:de:d7:8c:8a:8b:86:d8:31:
89:2b:36:50:3e:70:df:bd:e9:0d:d7:7d:b4:38:a4:
16:2d:f1:79:bd:1a:02:21:7f:1d:5d:9c:4e:21:b8:
78:d8:2a:ce:5b:d0:4a:07:6b:79:58:f0:8b:4f:52:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:7F:DA:A5:D1:75:35:05:16:3F:87:F6:F4:2C:84:68:D6:91:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad58e46-281b-37f5-8b0a-10d4a7d23edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100c:b240::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:62:b2:12:39:e8:a8:2d:84:76:fd:3c:e7:b3:7a:ff:f4:fa:
11:e0:d8:7d:ed:06:43:ae:d2:12:0e:b5:19:18:30:a9:cc:6b:
b1:78:b5:7a:ff:91:45:b5:03:f8:fd:51:81:b8:a8:7a:44:46:
12:1f:fb:c0:7b:1a:8b:71:f6:92:be:85:fa:4d:ce:96:9e:b1:
aa:b2:98:0d:f7:73:d3:7f:84:38:a4:4d:a6:b7:62:b1:41:54:
23:e0:87:96:b7:c6:76:f7:64:1a:cb:0c:ab:e5:4b:23:fc:21:
4f:b0:55:64:ae:d0:11:a5:a7:57:c4:2f:0c:03:ee:40:6e:58:
ee:53:e8:cf:28:15:7a:58:cc:c1:5b:57:0b:ee:46:a2:d6:ca:
8a:36:44:57:6f:54:bb:08:7a:eb:7c:1b:70:94:a3:f6:08:2b:
14:88:44:ec:f3:c3:df:b7:54:c4:77:fa:80:e9:52:14:b4:01:
32:62:39:cf:44:bc:85:c3:58:cf:34:e8:4e:02:1b:cf:91:f4:
ad:92:2a:37:6b:cf:22:dc:5e:a0:4f:90:70:0d:b9:6a:b0:2c:
25:07:24:9d:54:bf:fc:1b:31:70:53:0e:f9:27:bf:d3:85:6c:
4f:09:e4:5c:e2:5b:16:ca:4a:2d:4a:f1:75:17:4a:14:9e:91:
84:87:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:30:29 2025 by rpki-client