Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa
File: c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa (raw, json)
Hash identifier: 3iDoXkvs7yQr8EoYDwG9+/RAyJeWPwoLA3P3wz+yh/M=
Subject key identifier: 82:30:EC:56:88:D6:03:78:02:1D:C5:8F:7B:B9:8A:90:CA:A3:A4:32
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858492184387619A8B783CCC5D838
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:803d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:38:76:19:a8:b7:83:cc:c5:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=beae857e-87a7-4b02-b776-17c21bca0a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:a0:bc:79:7c:8c:22:eb:97:8e:36:9e:ef:
8a:40:43:cb:c0:43:b5:4d:18:cd:d2:dd:1d:dd:49:
0f:64:2d:ea:53:92:6a:d1:d5:0c:fc:82:ab:8f:28:
83:fd:c9:93:89:15:04:e1:45:b8:d2:2c:c3:48:26:
94:ea:68:46:7b:05:5f:47:8d:cf:0f:18:ff:29:22:
81:f7:39:b3:51:a8:5d:5a:ce:81:59:48:73:61:51:
d8:e4:4b:31:0c:5a:17:ec:6c:cc:4c:33:47:75:96:
86:5a:41:da:fa:3a:a9:8d:07:0d:0a:c1:98:e7:29:
18:16:96:fe:e9:90:24:e8:90:30:5a:cc:96:92:4f:
17:d6:03:37:7e:af:c1:7d:ee:d1:f2:52:3b:2b:60:
7f:9b:36:b8:5d:43:c5:c6:f5:97:31:ea:5b:8c:90:
2b:0a:fc:c2:c2:f9:24:41:33:98:f0:a4:f0:a9:d5:
a7:e3:58:4d:04:76:52:cb:54:98:c9:ea:44:47:bb:
2c:92:e4:2b:05:b1:0d:3f:a8:b5:56:ce:e4:e3:88:
1c:20:89:9a:83:c9:20:01:f1:ac:d9:76:49:ca:43:
89:5f:2f:16:9d:ef:a7:d1:b1:77:b8:ca:d8:b3:36:
7e:c9:64:6e:a9:65:8d:25:f2:67:0d:b9:be:ca:6c:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:EC:56:88:D6:03:78:02:1D:C5:8F:7B:B9:8A:90:CA:A3:A4:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:803d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:8b:18:29:95:d5:6c:9b:7f:ac:02:2d:a4:83:4c:04:f0:03:
a0:a2:4e:cf:49:c1:61:4b:b2:da:6b:fa:c8:6b:2a:50:07:0c:
e4:55:cf:5d:ca:e5:c2:59:9e:5b:02:46:3d:46:76:c1:d3:82:
eb:3c:a7:a5:84:98:63:50:2f:3a:0d:52:76:f9:89:42:78:ed:
ea:7f:6f:aa:91:d5:fc:65:b5:f9:06:9d:42:30:ce:2b:39:e0:
c4:ba:f8:42:c9:72:27:ce:b1:6a:ac:d4:cf:e1:82:f2:d1:e7:
8e:a5:67:11:45:e3:46:6d:24:6f:f4:8a:14:bd:91:f8:01:fd:
51:56:20:2e:92:3e:de:75:77:54:2e:2d:e0:e2:f8:32:e6:f4:
ef:5f:e7:92:8d:45:ed:6e:72:8b:d4:7c:af:cd:bd:52:87:6d:
27:fe:db:1a:da:2b:a2:b6:d5:e6:7e:89:c9:7c:b0:a2:87:d0:
13:df:42:91:8a:eb:39:ce:ad:a2:eb:d9:05:88:3d:b9:0e:01:
35:c3:c7:cb:b6:1f:fd:9a:0d:b7:87:d7:d1:18:e0:f5:97:75:
e7:31:59:67:1c:c0:8a:f0:28:ec:b8:24:7a:b7:93:d4:9f:6c:
5f:c8:3f:65:cd:f1:ce:73:e1:8e:ff:bb:5b:9b:13:1a:9c:d7:
f6:41:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:47 2025 by rpki-client