Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa
File:                     cc345068-0648-3390-b9f6-747880bda62a.roa (raw, json)
Hash identifier:          nVUrZFW+JVVjUJWE1d67JQ3I5gLg0yyhcDIT041YRKM=
Subject key identifier:   FA:2B:4B:B7:54:03:88:45:B4:49:93:75:D0:3A:DC:3F:75:61:BD:34
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584A4DA03BF49B8FE83C45607A20
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     399275
IP address blocks:        2602:fcc0:4445::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:3b:f4:9b:8f:e8:3c:45:60:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=05929b6a-b4fc-4d84-8cfb-cfd5e8487aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a9:71:2b:d0:19:87:fe:47:3c:a7:6d:05:93:
                    7e:f3:6e:e9:3f:48:a3:27:18:a3:c5:36:d1:48:4a:
                    8f:5e:1d:f7:ab:5b:51:af:39:9c:e8:2d:f1:df:b9:
                    55:6a:db:27:6b:97:6f:a2:34:30:0e:24:77:1d:e6:
                    a5:1f:f3:7b:3a:67:93:bc:ca:bc:4b:b3:91:18:d4:
                    9c:fd:a6:00:6f:7e:a2:6a:73:55:3c:14:33:f7:07:
                    52:a8:84:7b:0c:a9:95:b2:2f:00:60:21:ec:c0:a9:
                    7c:eb:d3:46:48:f9:ef:ed:6d:4d:f4:7e:f2:91:c5:
                    b2:a3:20:f7:e3:04:14:29:01:f4:25:60:96:2c:6f:
                    e1:06:a2:2e:d9:51:06:9e:0f:86:36:78:f9:a1:05:
                    ea:d2:cc:b0:c4:8d:76:4a:e9:e8:9e:d3:37:dd:26:
                    5d:a3:ed:12:1b:98:f4:07:a2:4f:11:29:7b:57:44:
                    fa:19:46:be:8c:7b:05:26:61:2e:47:c2:db:9b:4a:
                    bb:ac:bd:66:8a:e5:8e:82:27:7b:fe:64:7f:5f:e8:
                    38:bd:6b:07:26:c4:9d:78:f6:f9:16:d0:b9:40:77:
                    f2:60:4e:72:50:9d:8c:7d:6c:28:72:a3:81:2f:07:
                    9d:42:ab:17:15:3d:f1:4b:0c:3d:74:94:c7:7a:da:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:4B:B7:54:03:88:45:B4:49:93:75:D0:3A:DC:3F:75:61:BD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:4445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:79:be:07:f3:97:d7:7e:fc:ad:f2:8b:8c:e6:4a:3c:81:c1:
         64:36:92:41:b7:ae:cd:e7:22:33:85:9f:af:c2:54:fb:09:1a:
         7c:23:6f:cb:3f:75:ac:4d:d3:37:f1:82:e2:70:89:ca:90:7c:
         63:8c:f5:17:fb:e2:ae:34:29:f2:b5:ca:f0:56:2e:58:af:43:
         48:2f:ef:71:4f:89:e1:a6:5b:f4:53:10:fa:43:99:36:e9:f8:
         84:f7:6a:22:44:29:1b:44:5d:e7:8c:38:4d:a5:9b:7e:de:93:
         f3:7c:46:18:8f:09:a6:91:81:92:08:d1:14:45:97:b9:4f:36:
         d1:86:f6:59:28:74:5b:7e:17:b0:9a:a9:43:76:b2:85:7c:98:
         34:64:65:b9:b7:5c:5a:14:15:e0:c1:9c:32:bf:74:c3:30:01:
         99:24:13:47:91:64:53:06:b7:b0:e5:7d:a4:ec:47:02:34:fa:
         4b:cf:ac:aa:28:46:88:92:da:b6:5b:75:04:c0:9c:02:83:3f:
         7d:c9:e3:18:a1:5c:6b:6c:62:61:0d:c6:e1:79:db:4b:3f:23:
         91:28:46:ef:ef:bf:c7:59:a4:b8:58:87:b5:e1:69:a5:f8:99:
         64:8c:75:2f:b3:ff:e2:6d:41:3a:6d:78:ac:81:93:56:b1:65:
         2f:63:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:03:55 2025 by rpki-client