Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa
File: cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa (raw, json)
Hash identifier: PrGnIOcVgRhMaI8I9vE99FjKZQvmLFYZakTkXtgJnfU=
Subject key identifier: C5:01:59:44:33:3B:17:D6:DB:CA:0F:DB:32:CE:3C:3B:7B:60:19:F2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584930ED046960F20D2959AC7700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa
Signing time: Sat 15 Mar 2025 01:30:11 +0000
ROA not before: Sat 15 Mar 2025 01:30:11 +0000
ROA not after: Fri 13 Jun 2025 01:30:11 +0000
asID: 215492
IP address blocks: 2001:470:426::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:ed:04:69:60:f2:0d:29:59:ac:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 15 01:30:11 2025 GMT
Not After : Jun 13 01:30:11 2025 GMT
Subject: CN=b150b7d0-598f-4e48-8773-30a9790c508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cd:a5:0d:36:10:90:96:13:8f:21:78:71:e3:
eb:46:3b:cd:a6:00:0e:14:fe:1f:c1:0b:80:dd:1d:
11:ad:8c:54:e2:05:e5:b7:a6:f0:a6:c1:ac:06:8d:
3f:d3:1f:28:91:bb:90:ad:c7:7d:3f:3f:37:0d:08:
89:21:72:96:6f:85:f6:6d:82:61:a9:6c:9e:72:ed:
e9:13:1c:ae:79:3e:67:74:79:19:d0:44:2c:d0:57:
c8:1c:31:27:23:4e:09:dd:2b:dc:01:23:dc:76:d7:
09:4c:10:f4:a4:a8:ec:b9:27:fa:4c:64:d6:84:c8:
98:3d:1b:f4:93:c4:ec:19:21:d8:ba:d5:dc:02:68:
6a:83:2b:c1:8e:81:26:77:4a:b0:da:c5:06:d4:87:
f3:06:5d:df:cb:4a:34:d3:f0:67:ca:c8:c0:ee:3d:
74:15:c2:38:25:84:86:31:cc:6b:ab:1c:2f:32:cb:
c2:19:90:9e:c4:5d:84:52:55:fd:3c:24:d6:cc:e7:
86:86:98:a2:f9:b4:e4:bc:50:ac:f6:70:5a:a4:26:
c1:75:56:d8:22:5c:07:05:25:3c:60:09:5e:dd:4a:
73:b5:6e:8b:04:b5:52:21:91:ab:4f:0b:e4:c1:61:
5a:df:77:02:5f:95:55:ec:8a:57:be:48:3c:60:0e:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:59:44:33:3B:17:D6:DB:CA:0F:DB:32:CE:3C:3B:7B:60:19:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:426::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:06:69:a6:87:93:c8:65:bd:74:1c:cd:cd:5d:40:d8:03:e8:
f4:7b:47:2a:2b:38:05:73:bb:19:b2:ea:62:cc:12:97:55:00:
96:f2:76:47:f9:31:05:83:3a:be:9d:61:81:cf:ef:4c:db:a6:
c7:b8:93:a5:39:c2:29:92:53:91:fe:02:7e:74:82:cb:b2:c8:
d5:a1:4c:b9:6d:cb:6e:33:f8:ca:c1:c8:af:e2:fc:26:bb:f8:
3d:03:60:6d:cb:f6:8a:14:a9:5a:4e:f1:d3:ad:be:55:dc:e8:
93:e7:ef:e6:76:ff:a0:42:ea:74:11:e4:14:e3:36:f0:ad:d0:
6d:c8:f5:c8:26:25:88:2b:f5:ac:93:92:3b:9e:a0:b1:b5:36:
72:04:e7:e9:38:0e:2e:d6:af:d2:70:11:9c:c4:0a:42:71:39:
24:f4:d5:d3:30:67:e4:42:2b:4b:b0:4f:08:52:45:6e:65:cc:
cf:b5:6a:ef:49:73:20:9a:6e:7e:1f:26:79:34:ac:27:a0:ef:
91:7d:c1:d4:13:e6:0e:c9:d3:48:ec:85:bb:f2:1d:73:d1:43:
d6:07:91:ad:31:65:1e:f3:9e:5d:c9:5d:94:52:57:2e:d2:d5:
ce:7b:cc:78:65:2a:93:38:b4:02:ed:53:24:29:ca:2a:df:81:
81:b0:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:19 2025 by rpki-client