Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa
File: cf0943de-32a2-326f-b6d1-1263e56b6598.roa (raw, json)
Hash identifier: dogMuhnfHZ4pTJ2NpJw7uiawIVzV/UtqKYD8nURdIb4=
Subject key identifier: 84:51:14:79:5F:CE:5B:56:DE:72:1F:A0:4E:1E:B7:F7:8B:16:37:DA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A15B5F6FC998A833DCDBE740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa
Signing time: Wed 22 Jan 2025 15:16:08 +0000
ROA not before: Wed 22 Jan 2025 15:16:08 +0000
ROA not after: Tue 22 Apr 2025 14:16:08 +0000
asID: 6167
IP address blocks: 2600:1003:a010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:5b:5f:6f:c9:98:a8:33:dc:db:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 22 15:16:08 2025 GMT
Not After : Apr 22 14:16:08 2025 GMT
Subject: CN=77341180-98e9-4658-9597-e0bac466d82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:66:28:9b:8c:37:35:58:18:f9:68:f3:b2:
a9:07:4f:ec:8a:ed:b1:59:63:70:97:0f:24:e8:7e:
17:b4:7f:90:c6:e2:51:39:c1:39:1c:9e:bf:7a:6d:
31:6c:d3:bf:92:29:4c:2c:08:b0:1d:8b:83:cc:85:
30:91:b9:7d:7e:8c:0d:90:b5:2f:80:e7:58:d8:f5:
33:83:25:07:8c:ad:2a:a2:fc:e0:66:98:fd:bb:b5:
06:5c:81:95:0b:4d:fc:f9:e7:5d:80:c8:d2:98:a1:
c3:b0:12:97:09:dd:fc:66:b3:05:07:51:7f:c6:51:
73:c6:3b:6c:2d:13:bc:90:fc:85:1b:37:4d:fe:9b:
1b:aa:ca:bf:eb:33:c8:5d:51:31:73:eb:d1:9a:8e:
45:81:1c:b4:7f:07:83:e6:46:ad:01:57:11:f3:b3:
a7:e2:50:9f:9a:d9:89:87:bd:bb:49:bc:54:3e:29:
8d:41:10:5d:1e:cd:3f:cb:e9:df:f2:0a:79:ee:28:
e9:08:3e:cd:db:bb:e8:20:e0:3a:65:11:b9:9c:4a:
f3:5b:b9:3e:34:a2:4e:4c:79:11:60:09:a5:37:b6:
9b:2a:af:8c:26:27:6d:ad:f5:e8:dc:e0:52:c8:41:
f4:e6:cd:f5:05:8a:59:00:8b:f3:eb:c9:eb:48:17:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:14:79:5F:CE:5B:56:DE:72:1F:A0:4E:1E:B7:F7:8B:16:37:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:a010::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:e5:78:02:45:15:a7:75:68:93:86:a4:46:6f:d4:7c:5c:71:
a1:ff:87:af:c3:3d:68:a5:e5:8f:03:67:16:ce:bc:b2:79:18:
1e:5f:c6:6b:56:77:ba:a5:04:49:53:c8:f5:71:e8:de:d4:18:
6e:c6:9b:1e:4a:30:7a:ac:cb:eb:78:0a:52:8a:c2:48:9f:bb:
b7:69:a6:c9:4a:94:82:c1:c1:bf:cc:27:0a:b4:7f:a9:64:fd:
0c:4a:06:18:1c:fe:f3:06:d8:fb:78:77:8b:4e:36:6b:b8:b4:
e2:ea:3f:fd:65:b3:8b:c2:af:f8:f9:37:36:e3:a3:a7:b3:53:
69:70:a1:a2:a7:ec:ff:1a:15:0b:f2:83:09:2e:2d:0c:b4:e3:
19:4c:32:59:19:f2:f6:9e:9b:73:fb:cb:fb:3b:68:a6:ce:58:
d1:ae:ad:18:01:9e:15:b4:4e:81:d7:e4:8c:5a:d7:d8:66:81:
0d:5c:9e:43:7e:83:31:94:18:c0:f0:dc:6b:c9:fb:a3:16:b7:
49:74:ae:08:1e:cc:22:5a:20:54:e2:13:05:3d:27:42:9a:f2:
dd:f6:50:6c:ea:4c:18:df:8a:26:13:96:ba:1c:fc:30:42:fc:
50:ae:48:75:ee:1c:b9:d2:46:b9:88:a5:77:72:f8:9a:6f:1a:
56:9f:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:37 2025 by rpki-client