Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa
File: be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa (raw, json)
Hash identifier: GkZvOG5O9PKws3GrLyShtn3iyRQawt9Gz+DWNj74zZY=
Subject key identifier: 47:CD:23:92:E5:C1:FA:A5:23:27:D9:D7:B9:30:E1:1A:34:80:F1:3A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A15B60B481F5B202BE844200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa
Signing time: Wed 22 Jan 2025 15:16:09 +0000
ROA not before: Wed 22 Jan 2025 15:16:09 +0000
ROA not after: Tue 22 Apr 2025 14:16:09 +0000
asID: 6167
IP address blocks: 2600:1006:a133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:5b:60:b4:81:f5:b2:02:be:84:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 22 15:16:09 2025 GMT
Not After : Apr 22 14:16:09 2025 GMT
Subject: CN=d31f7b28-fb47-409c-99df-add6f6bb5ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:96:61:3e:8b:aa:64:00:82:8b:08:86:0b:
8c:43:4e:b9:2a:a8:50:db:52:54:86:05:0a:6c:20:
a3:49:70:78:0b:ef:5f:99:59:d8:c6:43:d6:0a:e3:
bf:2c:50:a4:ad:99:ac:03:3a:5b:72:46:c9:a0:8e:
ba:38:9b:d4:3c:a2:7e:99:c6:a1:b2:07:ef:ca:76:
19:d4:33:dc:2d:70:d3:e5:ba:2f:f2:f0:51:d4:d8:
87:9e:44:07:b0:92:f7:97:c0:8a:98:24:91:2b:53:
14:a0:51:85:54:4a:42:43:a3:77:36:b4:9a:cb:86:
68:55:a7:df:76:37:29:ae:30:5c:f6:9d:fd:30:88:
ef:d5:79:b7:a7:8f:9d:85:7d:56:74:19:3d:c2:49:
ad:fb:da:1d:b2:e4:87:67:3d:0d:c5:a2:5d:da:42:
2a:00:8e:d5:1d:08:74:18:de:f3:0c:26:bf:c5:a8:
99:91:f1:fc:16:f8:ee:15:d0:ad:07:2f:c7:79:02:
cb:cd:4c:d1:4f:1f:55:99:08:f5:ce:0c:6c:74:c7:
bb:b3:28:f5:82:b1:2a:da:fc:6e:1b:d6:17:1d:d3:
9a:99:08:dd:ab:b4:cc:46:7f:b7:2d:2d:fc:d7:b2:
45:b1:e1:6c:56:2f:06:0f:be:e8:31:4e:3c:61:a8:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:23:92:E5:C1:FA:A5:23:27:D9:D7:B9:30:E1:1A:34:80:F1:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1006:a133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:62:38:6e:66:de:69:19:f5:cc:86:36:f0:c4:ae:f9:54:1f:
97:f3:70:a5:74:f2:a1:1f:d6:22:a6:db:c6:dd:0b:4a:5f:93:
2d:9f:0a:f4:1e:63:e1:55:70:0d:e8:22:16:23:79:00:9d:39:
ef:1a:ef:86:bf:63:8d:a6:67:15:37:fe:9d:67:7a:9c:9a:c0:
78:72:69:a1:c3:64:16:5b:7f:bb:66:60:2f:fb:16:ce:a5:89:
d3:61:34:d7:f3:86:05:f7:ae:ce:7b:86:13:d8:03:13:65:6d:
45:63:ad:b8:d8:25:64:53:7f:ce:4d:54:e5:28:e6:71:08:3d:
41:f1:28:4e:9c:cc:68:d1:c9:36:69:59:51:ce:2e:05:16:63:
a1:15:8c:62:15:e4:12:2b:3e:f7:b3:f5:bd:e3:16:0e:52:9f:
52:2f:0b:3b:47:e6:bb:c9:da:25:96:56:1e:4c:7c:3a:29:4c:
16:83:b8:18:da:b3:80:05:40:4c:15:8a:71:f5:e4:d9:9c:be:
71:a3:5a:f0:2e:5c:16:bf:47:b7:04:51:b7:f3:0c:b0:c8:ac:
cb:59:bf:19:06:1b:af:26:29:7d:6a:26:fb:64:fe:55:bf:68:
2d:0d:f0:c1:e2:bd:9f:3e:37:39:97:00:57:4c:d4:26:75:6d:
8b:eb:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:33 2025 by rpki-client