Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa
File: c4bce448-2305-31dc-804b-5ab4eabb083e.roa (raw, json)
Hash identifier: j+74chUHFv7L1QFgryG3MrUQ1w9fKLJhGC/LclMxVG8=
Subject key identifier: 5E:F8:89:B6:1B:E2:FC:3A:5A:F6:F2:17:B2:06:4A:F4:55:BB:49:05
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E3807CEAAD51F1AE8280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1009:b0d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e3:80:7c:ea:ad:51:f1:ae:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=506de588-b4e8-4f69-a891-73758bc984cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:ec:bb:62:2e:6f:1e:2c:2d:9f:7b:d1:26:
84:20:13:2f:eb:db:4c:33:29:a9:2a:ef:ef:da:a0:
3d:7d:cb:50:fc:76:36:bf:e5:ee:b2:6a:29:f8:36:
36:ad:15:77:0f:68:a9:8f:03:d3:0e:50:6b:87:f9:
7b:7a:02:5a:c7:53:35:0c:e7:49:06:9d:91:ab:51:
0a:2b:db:53:af:42:21:25:1d:44:18:1e:6e:65:51:
07:32:a7:53:cd:42:ce:62:53:48:9b:54:bd:c9:65:
1c:2b:c2:f3:a8:36:fd:24:6d:c3:eb:2a:7a:f2:5f:
7d:69:27:68:ad:33:53:c7:56:45:7a:a5:1e:cc:f7:
8e:99:03:09:b8:52:e8:c1:d5:5c:73:e0:43:57:a5:
aa:d6:55:69:a9:64:11:d1:b3:76:84:4c:db:9a:f6:
73:59:33:64:b2:47:6a:cc:fb:74:74:19:09:f6:e2:
dd:62:37:c4:2a:05:b0:e8:b9:e9:d4:82:58:ba:b7:
a0:1f:41:ef:83:33:8c:6c:f7:ce:9c:1c:4e:4f:63:
7b:b4:46:07:7f:de:58:47:0a:be:02:74:c4:12:e8:
0f:77:ba:a8:1a:4e:0c:ea:70:15:eb:9b:76:7f:6c:
da:9f:fa:64:ff:a3:7d:88:5b:87:0a:c6:26:b6:a3:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:89:B6:1B:E2:FC:3A:5A:F6:F2:17:B2:06:4A:F4:55:BB:49:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1009:b0d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a5:5c:6e:df:ed:91:a1:b4:e1:30:71:0f:27:b7:bf:14:29:
c7:5e:a9:8d:f3:fa:82:49:db:7d:21:42:53:cb:90:7b:40:25:
71:4b:fb:93:ef:65:b7:e0:60:e8:41:b4:c7:5d:98:16:63:e4:
77:d5:bd:05:50:6a:17:bd:88:39:11:61:dc:5a:c2:16:7c:dd:
8a:83:3e:b6:3a:c4:ac:5d:c2:2d:0b:93:27:38:b2:39:e7:b7:
b5:cf:5d:a8:38:73:f7:10:fb:d3:24:f6:10:51:c3:1f:0a:dd:
60:12:e3:c7:9e:22:b7:57:b1:b0:d5:4c:ec:e8:4d:3c:13:48:
e7:00:30:ff:89:aa:6b:fd:83:53:c0:78:76:47:5d:e7:11:ad:
42:93:4d:1a:33:9b:00:29:4c:ee:83:93:b2:93:7e:26:67:d7:
ca:3f:31:9b:1f:b2:7a:a1:ce:c7:e5:e4:5b:e7:08:5c:d1:b2:
cc:a4:99:15:10:d5:9e:ba:53:2c:27:97:48:91:88:f7:81:98:
84:39:74:16:d1:26:c4:46:df:0c:a0:8e:2d:92:fd:87:ec:57:
f3:51:48:50:38:e7:81:26:e3:84:e7:38:a0:57:49:b9:1e:8e:
a7:48:67:ce:c5:c8:2e:05:9e:3d:76:49:76:1d:ee:da:d2:54:
24:c2:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:47 2025 by rpki-client