Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71734e45-1357-34ca-9120-739d113033d8.roa
File: 71734e45-1357-34ca-9120-739d113033d8.roa (raw, json)
Hash identifier: NtyV27XgQUFCa9dUWKxAeJ4Bn82bzbcNdFEX/JxJwHg=
Subject key identifier: 6F:9D:FB:DF:75:4A:F7:FC:8E:EA:4F:55:3E:E8:D0:5B:5E:05:71:8B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492F87C4CC7F405047B24643F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71734e45-1357-34ca-9120-739d113033d8.roa
Signing time: Fri 14 Mar 2025 13:30:22 +0000
ROA not before: Fri 14 Mar 2025 13:30:22 +0000
ROA not after: Thu 12 Jun 2025 13:30:22 +0000
asID: 35688
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2f:87:c4:cc:7f:40:50:47:b2:46:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 14 13:30:22 2025 GMT
Not After : Jun 12 13:30:22 2025 GMT
Subject: CN=6ab7bd16-6aad-4430-b7b4-3e4717ead05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:1b:cb:53:fd:a8:44:a5:44:7d:b2:51:bb:
d5:a8:b7:6e:4a:97:de:c6:15:54:9c:62:ae:8f:15:
86:58:6f:7b:e4:e6:96:2b:1c:be:49:4a:c3:4c:bd:
b5:77:ce:59:32:9d:8e:20:e6:35:31:db:e2:38:c8:
6d:3a:1e:b8:87:54:55:f8:8a:cb:b3:43:7f:3f:05:
cc:f6:7c:c0:0c:61:70:79:41:f9:6b:39:3d:84:ae:
38:63:a6:79:b4:d7:c1:f3:9c:ef:d4:9e:78:4c:ef:
69:af:a0:b7:a8:e6:0b:fd:4e:ac:4a:20:7e:87:c9:
9d:aa:fb:d2:fa:95:38:70:15:ee:2d:69:ae:33:d3:
6f:3b:f7:a8:9e:52:14:0a:44:2a:c2:20:b3:3a:6c:
3b:22:a7:37:2e:d0:c0:7c:2c:8a:5a:64:f6:0b:2b:
54:e7:5e:0e:f7:7d:d6:61:19:92:e1:9e:df:f8:9a:
4a:76:2a:d5:5a:68:79:c0:30:2f:7b:00:3c:52:2d:
92:5e:6d:a1:3f:45:01:67:a6:a4:8c:d4:97:c5:00:
96:b1:a8:ab:83:50:92:d2:10:00:53:fb:75:cb:ec:
ff:8b:ed:1b:5e:61:ed:ec:37:91:7a:ef:ed:36:28:
e0:b7:a6:b2:af:42:2b:e2:91:a9:4a:bc:ca:d3:44:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9D:FB:DF:75:4A:F7:FC:8E:EA:4F:55:3E:E8:D0:5B:5E:05:71:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71734e45-1357-34ca-9120-739d113033d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:c4:4a:5d:80:45:91:1f:e3:a1:a9:22:7e:5a:31:a2:1d:9c:
d9:6b:0e:4a:4e:bc:50:e4:63:73:c0:a9:1f:7d:f8:8f:9c:61:
e3:ea:f5:8e:71:75:81:01:c2:55:bf:e5:d1:53:4f:97:05:3e:
48:c1:68:13:e8:13:fc:aa:86:14:e4:cf:4c:0e:ed:7b:18:57:
ed:2e:0f:3c:a3:86:8d:35:52:2a:4f:62:4d:29:38:96:0f:04:
6f:a2:56:23:6d:dc:72:95:2e:8f:30:88:78:bd:30:d9:b3:af:
c0:9f:49:3e:d6:63:27:fe:cd:bc:ee:b5:57:bf:42:d2:29:c6:
df:14:af:9c:27:ed:73:d5:1a:45:75:a6:4d:a3:29:d9:97:11:
e4:58:73:d5:55:5f:b8:b2:29:db:0a:6c:4e:85:4f:64:64:67:
ae:60:89:da:9f:9b:41:7f:f1:3b:e6:90:0b:32:7e:ea:67:0c:
09:68:89:92:87:54:bf:30:c5:1a:2a:c3:19:8c:1f:d6:b0:28:
41:1a:67:fd:77:3a:7a:7a:95:05:7f:46:be:24:1e:48:c0:29:
82:32:ea:ce:0a:86:cb:1b:28:8d:24:90:4a:d0:7f:88:a9:96:
a3:6e:d6:ce:dd:31:8a:41:10:ad:4b:cf:94:e9:de:14:31:6f:
6d:9f:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:45 2025 by rpki-client