Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa
File: 2255066e-9ff0-38c8-9ca9-da39b830dabd.roa (raw, json)
Hash identifier: X2Gy1TTvQ6RCUW8VCkkz3lhS1x6Y+0iPG9BVtoYh6tU=
Subject key identifier: 0F:60:3E:EC:1A:06:53:E8:39:BB:9A:8F:F7:6A:61:3A:5D:AD:B7:F3
Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial: 010D0C9F4328584925B3AA1129C3D56726782400
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 21766
IP address blocks: 2605:6600::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:aa:11:29:c3:d5:67:26:78:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=e8dd53dd-ec6f-462a-8643-677532321f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:a7:8e:d0:c2:8e:cc:9e:eb:9c:20:13:ae:
c7:8d:fa:ab:3c:f4:cf:f5:97:26:c9:8b:e5:f7:91:
55:55:d2:a9:e8:2e:c7:e2:a7:c1:1f:73:7c:34:2c:
59:19:22:9e:56:15:bf:68:03:3b:49:b8:0f:e3:26:
76:b4:72:9d:9c:df:bf:8b:42:cb:c4:df:3f:f0:7e:
25:52:76:a8:86:94:f8:e7:86:4a:35:f9:18:4e:5f:
2b:d0:09:94:d3:fa:f8:86:3c:95:af:27:10:02:61:
f8:a8:8d:95:54:cd:17:13:cb:f1:d2:f0:ee:1b:7e:
37:b5:aa:5c:c2:2f:8b:8e:87:14:35:e4:72:09:5e:
cf:a5:43:6d:26:f2:fa:36:cd:61:d5:2e:4a:da:cf:
54:13:21:17:f5:72:f1:81:d4:14:f6:d0:26:58:20:
9b:ea:69:8c:3f:ba:7b:02:2b:65:b3:27:2b:42:bb:
d4:67:72:a1:21:8c:b5:91:15:57:73:0d:61:ee:0e:
77:44:32:ed:22:d8:f4:46:b0:98:7d:2e:92:f5:fc:
f2:be:17:7a:11:4f:82:b0:71:98:84:f1:f1:0b:c3:
2b:81:cb:5c:b1:25:b5:b4:5f:cb:7f:04:89:cb:4b:
f2:b3:86:68:56:c9:cb:4f:91:c4:a9:19:c3:e1:34:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:3E:EC:1A:06:53:E8:39:BB:9A:8F:F7:6A:61:3A:5D:AD:B7:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
X509v3 Authority Key Identifier:
keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:6600::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d7:4e:6a:a2:c8:50:9d:ca:8d:8d:cf:a2:7b:3e:bd:91:ad:
24:ee:c5:19:ef:00:9f:86:0f:f9:7a:84:58:a1:f9:58:72:95:
ba:d8:44:1d:f6:d0:fb:39:3f:f9:a3:11:9d:41:c8:55:3b:f6:
f3:d1:24:4d:71:e0:7c:97:c1:6d:85:d4:e8:98:7c:50:83:24:
67:01:41:58:90:45:fd:8b:3d:cd:4b:d1:78:bf:0b:30:f2:e0:
73:a6:af:07:99:19:92:4b:73:ac:34:51:9d:62:b8:06:a8:be:
30:7f:5f:e2:28:f3:d3:2f:d2:02:a4:b0:ac:7c:59:dd:43:3b:
f4:5d:a3:83:70:a7:37:fc:51:0b:9a:fa:37:05:6b:28:1f:1f:
25:39:43:a5:c9:88:15:1a:a6:6e:bc:c8:70:82:e1:3c:46:e6:
f5:15:a9:a2:2b:e0:9a:2a:98:50:96:35:5b:5b:d2:72:4b:c1:
f1:93:74:9a:41:27:5a:cb:dd:a4:44:da:05:3d:e2:5d:90:f8:
eb:41:a1:0f:93:87:de:2c:43:ad:5c:b0:35:49:5a:fc:1a:03:
17:71:3a:02:72:16:a9:62:db:4c:03:ed:9d:c6:01:6d:62:fe:
12:3b:66:f2:11:d6:0c:df:26:11:a4:d0:ec:83:16:29:bf:e2:
fc:fc:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:18:06 2025 by rpki-client