Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa
File:                     cc345068-0648-3390-b9f6-747880bda62a.roa (raw, json)
Hash identifier:          KT+5mHDH7vW5ipYqo4mY5ix8wSlnTMEvnJB53cdYryU=
Subject key identifier:   57:D2:C9:D3:32:D0:33:1C:8E:56:6A:72:41:BA:00:6B:11:70:E6:4B
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584F49742C409D35798B4A611800
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399275
IP address blocks:        2602:fcc0:4445::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2c:40:9d:35:79:8b:4a:61:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7b141fc0-1199-4a97-95e9-4fdc451c2e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:b1:58:4d:01:87:f3:ee:54:a4:4c:cf:d4:
                    0c:16:a0:97:e5:0c:0b:bf:82:a8:37:6d:71:af:d9:
                    29:62:1d:af:d3:a4:55:1c:18:e2:f6:f2:fe:ca:de:
                    62:2b:4b:47:a9:a7:cd:80:4c:7b:3b:71:2b:ed:e8:
                    04:00:c7:9b:7b:4b:f5:1b:99:4d:c6:0c:e8:e8:65:
                    d8:54:75:99:9d:5c:ae:ab:f3:10:02:4c:97:ba:7f:
                    0e:ba:a0:7e:47:d8:af:29:35:2d:6a:38:3f:63:98:
                    c5:c5:ee:bf:28:a5:1f:c6:13:d7:1d:64:41:87:34:
                    fd:72:0f:e1:f8:7a:64:ee:0c:bf:b5:c9:5d:df:4a:
                    53:90:7d:90:94:83:52:da:3b:37:de:46:50:a3:a8:
                    e8:e9:2e:0c:43:3e:c6:a0:02:d8:54:62:43:24:6f:
                    68:ee:c9:9f:62:ef:46:89:8f:d5:38:64:f7:86:c9:
                    d3:1f:f3:63:5b:d7:33:c6:4d:4d:d8:e8:60:c7:ee:
                    d3:0e:34:58:84:85:46:43:c9:2b:d0:30:21:f2:70:
                    10:85:1b:38:9f:82:e0:4b:38:41:0c:d3:22:0c:83:
                    d8:1c:d3:7d:2d:db:93:5d:d8:1f:87:34:05:5a:3e:
                    11:89:a7:03:02:30:38:2d:78:f8:44:a9:55:4b:ab:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D2:C9:D3:32:D0:33:1C:8E:56:6A:72:41:BA:00:6B:11:70:E6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:4445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:a0:31:da:6e:e1:6f:ae:c3:7a:98:ab:e5:67:cd:19:00:
         23:eb:88:ba:b5:52:95:12:ec:05:f1:d3:9a:a2:80:e7:0c:f4:
         6e:3e:d9:6c:c8:28:87:f6:5b:ec:24:03:c7:09:23:43:94:d3:
         ad:26:f3:ef:91:1c:06:c2:1d:cc:f3:26:ba:46:0c:d9:53:c6:
         64:b6:8a:04:d6:4e:e5:9a:33:b3:4a:3d:c9:e5:a4:95:b1:75:
         06:bc:d9:b3:8a:09:2e:4e:cc:b7:d3:51:a4:9c:28:da:cd:01:
         24:35:4a:c8:c2:c6:28:b3:7a:d1:52:d0:31:6f:76:5e:96:9a:
         30:9c:2f:3c:ac:c9:4b:c3:90:26:bf:7f:ff:d8:27:b0:83:e5:
         f0:56:37:58:66:a3:21:5a:d0:dc:d0:be:40:ed:89:40:15:8b:
         59:cd:61:98:ce:15:4b:bb:a0:9d:f4:83:41:4c:55:ea:3c:a9:
         63:a0:3d:7d:65:f0:3f:43:58:71:b3:14:f6:7d:7f:80:c5:86:
         c8:74:3c:41:6f:43:26:50:54:79:81:de:ed:5b:ab:2a:05:ee:
         0e:ab:fe:1f:2d:41:f3:91:0e:ef:ff:ae:d9:e7:1b:8f:85:a0:
         70:c0:32:89:65:d9:af:d2:57:41:70:9b:46:62:fe:dd:a8:0d:
         4e:63:91:2d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdCxAnTV5i0phGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2
ZTc1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
N2IxNDFmYzAtMTE5OS00YTk3LTk1ZTktNGZkYzQ1MWMyZTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJOxWE0Bh/PuVKRMz9QMFqCX5QwLv4KoN21x
r9kpYh2v06RVHBji9vL+yt5iK0tHqafNgEx7O3Er7egEAMebe0v1G5lNxgzo6GXY
VHWZnVyuq/MQAkyXun8OuqB+R9ivKTUtajg/Y5jFxe6/KKUfxhPXHWRBhzT9cg/h
+Hpk7gy/tcld30pTkH2QlINS2js33kZQo6jo6S4MQz7GoALYVGJDJG9o7smfYu9G
iY/VOGT3hsnTH/NjW9czxk1N2Ohgx+7TDjRYhIVGQ8kr0DAh8nAQhRs4n4LgSzhB
DNMiDIPYHNN9LduTXdgfhzQFWj4RiacDAjA4LXj4RKlVS6vWHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFfSydMy0DMcjlZqckG6AGsRcOZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl
NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvY2MzNDUwNjgtMDY0OC0z
MzkwLWI5ZjYtNzQ3ODgwYmRhNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky
OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4
NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj
OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wERF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHaLoDHabuFvrsN6mKvlZ80ZACPriLq1UpUS7AXx05qigOcM9G4+
2WzIKIf2W+wkA8cJI0OU060m8++RHAbCHczzJrpGDNlTxmS2igTWTuWaM7NKPcnl
pJWxdQa82bOKCS5OzLfTUaScKNrNASQ1SsjCxiizetFS0DFvdl6WmjCcLzysyUvD
kCa/f//YJ7CD5fBWN1hmoyFa0NzQvkDtiUAVi1nNYZjOFUu7oJ30g0FMVeo8qWOg
PX1l8D9DWHGzFPZ9f4DFhsh0PEFvQyZQVHmB3u1bqyoF7g6r/h8tQfORDu//rtnn
G4+FoHDAMoll2a/SV0Fwm0Zi/t2oDU5jkS0=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:18:36 2026 by rpki-client