Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa
File: 8674162a-9330-33c7-b0e9-15290762bc3b.roa (raw, json)
Hash identifier: cbWmXm9gkgVePbEW+3cmAIqGZB1MZQruc8LdAm9kgJs=
Subject key identifier: 57:4D:B7:C8:11:0B:F8:EA:25:3E:D2:52:3F:AE:8D:CF:F6:B1:0A:BC
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F432858494469406AFBC963C15E4BD180
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 2153
IP address blocks: 2607:f380:4:4004::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:40:6a:fb:c9:63:c1:5e:4b:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=d3a9c01d-65bb-45c0-af32-df900c33dc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:c0:f3:ea:1e:39:c4:50:94:35:b1:5a:cd:
c9:c7:0c:76:a4:57:77:1f:6b:57:90:a7:46:4a:48:
ac:0e:bb:95:13:39:25:c0:17:d2:ba:b1:fd:ab:53:
d5:b5:37:05:54:95:e4:60:0d:b5:9e:2a:5a:ce:db:
51:e8:7f:db:1b:4a:f3:02:d1:db:3f:1f:29:64:7b:
cf:14:24:4c:f3:c0:23:fe:4f:f7:66:72:c3:f2:b3:
4f:4c:f5:d0:20:79:0d:d8:e5:e6:7a:22:e0:03:93:
ba:5a:40:07:63:82:04:55:39:5b:19:93:c0:a4:45:
7f:51:3c:15:b6:71:37:2f:ad:65:af:42:79:39:2b:
19:58:c6:fa:71:55:d5:97:4d:05:3c:10:b8:80:ce:
3b:e4:cd:27:77:c6:31:38:4a:bb:27:68:7e:ca:92:
99:b1:1f:25:db:a0:aa:a0:95:76:5c:7c:49:08:3f:
80:71:e8:da:cb:70:7d:0a:34:bd:d2:c9:9e:fe:ca:
61:c1:0e:e4:3a:91:82:0a:c9:e5:36:52:73:0e:1f:
ed:80:de:a0:49:13:e9:5b:82:03:cb:08:d3:da:b0:
96:91:a9:de:f2:13:b6:d7:2b:db:c1:d5:b3:35:0c:
14:23:ea:cb:f2:47:ce:16:78:d7:a9:03:d0:b0:e6:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:B7:C8:11:0B:F8:EA:25:3E:D2:52:3F:AE:8D:CF:F6:B1:0A:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f380:4:4004::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0f:d2:5d:ea:3f:15:35:41:87:88:f1:7b:6c:6b:89:de:09:
28:76:3d:23:f9:e4:cc:57:2d:06:b0:c2:9a:a1:4f:ed:f3:95:
f6:d2:bd:27:be:2f:d3:30:48:0a:f1:cf:ca:c0:79:56:d4:57:
0e:aa:a4:5f:cb:54:a6:b1:c2:61:09:5b:35:1a:c7:5b:03:f4:
bf:bc:aa:bb:57:7d:91:ed:87:23:7f:f1:1f:cc:43:b3:34:86:
e9:78:8f:24:ef:4f:71:4d:f0:c2:4f:8e:7a:26:1b:c1:c7:e1:
52:17:9e:8b:bc:bb:bc:e8:35:6e:6e:6c:a6:4d:b2:7f:a3:01:
e7:51:02:78:85:14:ec:4e:d8:67:b6:df:9f:b5:57:ae:62:42:
46:90:d2:1c:f4:33:41:78:29:32:6e:79:83:9a:ab:6c:22:5b:
e2:99:db:8c:b1:56:34:7b:b9:58:05:90:4b:0a:37:5f:c3:10:
2c:85:c4:f5:f8:f1:76:be:52:6a:7d:44:07:82:e6:d0:62:8c:
0b:3c:45:71:9b:eb:5d:db:87:aa:7d:c4:fb:6f:3a:83:a1:d2:
d0:55:1d:62:62:d5:b1:58:7b:6e:8a:27:c4:58:f7:12:0a:85:
53:7e:99:29:bd:3d:b8:10:2b:17:37:fc:18:a5:c1:21:73:37:
ec:5e:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:40 2025 by rpki-client