Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43499346-3820-3d72-9874-62db762ec0ca.roa
File: 43499346-3820-3d72-9874-62db762ec0ca.roa (raw, json)
Hash identifier: cpP6+9MJYeRDj9teYWpQUG0qNfB+kl8Vhp2tk0badew=
Subject key identifier: 46:94:A8:9A:EA:88:4D:FA:E5:94:2D:FF:40:1A:B0:E0:D9:03:2D:78
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848A2A9EF5364CE63917798D500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43499346-3820-3d72-9874-62db762ec0ca.roa
Signing time: Thu 23 Jan 2025 02:30:14 +0000
ROA not before: Thu 23 Jan 2025 02:30:14 +0000
ROA not after: Wed 23 Apr 2025 01:30:14 +0000
asID: 18248
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Mar 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:a9:ef:53:64:ce:63:91:77:98:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 23 02:30:14 2025 GMT
Not After : Apr 23 01:30:14 2025 GMT
Subject: CN=25c1b4bb-ce89-4a5e-9a10-571600036a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:04:fd:00:a2:40:c1:a4:7c:e2:54:54:83:
4e:b7:85:b2:bb:c3:6b:f1:a4:33:83:e4:e8:34:cc:
b0:8a:13:3c:da:62:92:0c:ae:67:27:70:16:98:be:
99:be:7e:b8:89:1d:f5:12:0a:63:38:76:40:fc:98:
86:2c:68:f2:8b:12:aa:c4:18:2a:fe:ff:e0:fd:b9:
fe:d0:d5:7a:71:58:c3:80:1a:20:63:37:dd:56:59:
7f:c0:e3:51:cb:fb:55:52:87:b0:6f:f5:a3:49:88:
a7:dc:16:45:09:32:36:7d:d2:9c:90:b0:18:08:e9:
3d:1a:47:06:3d:69:d2:80:90:31:11:8b:b7:ab:e5:
87:40:52:45:1c:14:df:ed:94:50:56:5c:1c:79:2c:
16:96:76:cc:66:9b:ae:28:cb:bb:e2:e6:8f:26:f4:
dc:7f:a8:09:50:8a:41:5d:34:e2:b8:aa:b3:47:cb:
1a:78:95:63:c6:fb:12:4d:c9:95:8f:f2:9b:7b:84:
1f:52:ae:99:05:36:ac:23:e5:9a:3c:99:d9:92:46:
64:36:74:eb:c7:9f:c9:2e:57:21:37:56:9f:f8:4e:
b7:a6:f9:1e:5c:35:c0:49:82:c0:39:63:6c:f5:6c:
e9:4b:c1:ab:24:5e:ad:79:8e:63:a5:ac:db:ab:c9:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:A8:9A:EA:88:4D:FA:E5:94:2D:FF:40:1A:B0:E0:D9:03:2D:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43499346-3820-3d72-9874-62db762ec0ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a9:a4:5c:e2:33:3b:5d:36:59:40:6c:34:f0:a2:14:4b:12:
ee:08:cf:97:3b:cc:43:7d:51:ac:5d:0f:51:2e:79:19:50:75:
e3:eb:63:b8:45:40:52:2f:bb:ce:5b:10:d7:6b:36:45:40:67:
a5:2b:33:95:f2:6b:b6:e1:9d:8f:f1:3f:a7:1e:29:3d:ba:31:
62:6b:ca:10:e8:fd:5b:85:da:aa:4d:01:e7:5c:60:97:05:59:
40:d7:ff:c7:95:d6:ea:39:c0:8d:a0:e7:b4:5c:64:9e:13:6c:
8b:38:8e:80:e6:15:75:31:c4:91:31:53:98:45:7e:a5:61:90:
9d:11:60:d7:89:6b:57:bc:1d:c6:29:dd:c0:4b:77:2f:95:89:
a4:34:e1:f4:cb:78:6b:61:e0:28:c3:b9:27:15:61:4f:0f:16:
47:4e:96:df:81:4b:29:e5:af:0e:7b:68:f6:35:e7:f0:6f:c2:
3b:86:7b:bc:38:b6:21:c2:93:8a:c1:d3:66:1c:e6:07:61:b2:
c4:ab:5f:55:26:de:02:42:32:20:5d:0c:92:3f:5b:30:00:40:
b2:80:01:88:4d:89:2d:a8:b4:67:de:de:76:7c:5b:bf:ab:33:
50:0e:ca:06:44:aa:27:7c:98:de:56:da:7b:be:cf:a2:26:fd:
9a:fc:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:48:01 2025 by rpki-client