Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa
File: bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa (raw, json)
Hash identifier: SCnooxP4SyXnd6fWYFsvNHoQH7N+MN7fxoYLmFOappY=
Subject key identifier: D2:FA:66:8F:87:64:C2:1C:96:AA:CC:C0:FC:F6:AD:01:61:81:10:A1
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1DC822A62005F1B8732B0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 16787
IP address blocks: 2600:6cf0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:dc:82:2a:62:00:5f:1b:87:32:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=97063baa-3c64-4384-87d8-f604bd6f7e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:3d:39:0b:01:84:83:79:0b:ea:a2:9f:d9:
99:18:e9:80:56:14:76:2f:33:a3:c4:b0:8e:23:7d:
73:28:39:26:7b:4d:b1:ab:ac:3f:33:37:de:36:ce:
d8:c5:4b:e4:12:4b:8d:b8:b7:26:4c:70:fe:d1:64:
b9:94:d1:0c:76:81:fa:53:5b:63:93:41:9d:87:72:
39:f3:b1:a8:f9:15:9c:ef:65:6c:6c:d5:5b:07:04:
ca:6c:9d:c5:89:92:f4:14:04:23:42:1f:bb:d2:34:
59:6b:a0:03:1c:6e:ce:c6:ae:0f:5f:7a:01:14:e3:
e2:06:c8:ea:20:0e:e2:b9:76:45:d3:55:84:4e:43:
b0:ee:a8:7a:bb:01:3a:25:dc:0a:dd:f2:f6:3b:12:
96:d6:82:1a:af:dd:45:df:50:36:88:91:9d:45:ff:
c9:6e:97:a7:5b:19:ca:e0:fa:98:db:2a:74:16:49:
4f:64:75:41:ab:75:05:9e:9a:54:96:71:ef:64:e8:
84:c2:cd:4c:69:8d:3b:9b:45:0c:b6:f3:3c:66:0b:
c6:7a:bf:13:79:61:23:96:8b:60:f3:68:19:f1:c6:
a0:c2:79:b5:90:be:67:f8:97:db:ab:74:7f:df:54:
28:1a:06:c5:a9:0c:89:87:ca:5b:2e:3a:49:f8:98:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FA:66:8F:87:64:C2:1C:96:AA:CC:C0:FC:F6:AD:01:61:81:10:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:6cf0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:1f:51:d0:6b:39:eb:3d:4f:38:fc:6c:e4:06:74:85:89:88:
8b:87:1a:41:03:6b:50:60:50:94:55:e1:a9:02:fc:18:82:ed:
1b:e3:10:c7:eb:5a:d0:ce:e1:81:7f:3b:bd:69:50:8d:95:f1:
d5:c9:40:61:79:9d:a2:61:dd:69:75:36:cc:42:68:e5:17:c5:
53:4c:46:cd:c3:c7:b2:95:02:4d:79:37:0b:72:ed:8e:14:44:
17:07:44:91:a6:0e:95:5b:77:04:e9:36:85:ca:3d:9e:c7:1d:
57:00:7c:30:e8:3e:29:51:a8:ff:05:9f:ad:bd:80:11:c8:20:
de:75:7c:b8:ba:10:61:c9:74:53:6c:df:7f:bd:fe:99:52:1d:
22:45:d7:8a:81:79:89:18:e2:6d:a5:10:ec:aa:d1:1d:6f:dd:
d5:ca:00:31:1a:ed:78:fb:da:05:43:f7:c0:f0:3d:02:24:cf:
2e:cb:32:b9:eb:6b:21:2a:47:af:b9:84:08:b7:a1:76:b4:b2:
00:ef:83:c4:6f:f0:ec:80:43:5a:35:07:76:96:50:1d:f1:f8:
56:76:7e:41:9a:60:d9:20:62:79:19:01:41:9a:5b:6d:0b:a3:
0b:01:af:e1:81:3f:74:f8:6a:0d:78:3f:8a:1c:17:16:15:45:
88:06:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:12:38 2025 by rpki-client