Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa
File:                     1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa (raw, json)
Hash identifier:          3+YjUZ0j/oZZIekKgdOqj6lDHJupCDBCh1QTvHktJXM=
Subject key identifier:   44:E1:E4:7F:DD:C8:EE:59:E1:BD:8E:C2:65:9C:C7:61:43:CF:E8:76
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584ABD4BA062069135847F5A3000
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     399275
IP address blocks:        2602:fcc0:8888::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a0:62:06:91:35:84:7f:5a:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=80414091-1fd1-4432-96ba-947403ffee17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:5c:4d:76:cf:b1:9c:36:89:0e:02:49:99:
                    78:91:92:93:7f:fa:06:61:da:a6:37:d6:b1:df:9b:
                    df:dc:e3:bf:f3:87:98:a8:5d:f5:85:18:3c:9a:db:
                    93:de:82:30:aa:7d:6c:ca:69:43:df:64:65:59:87:
                    d5:44:be:da:15:46:68:4f:ed:64:79:5a:c9:33:5e:
                    5b:e4:47:1d:44:4f:50:e1:b5:a8:88:21:93:d2:53:
                    0e:0f:32:89:d2:39:ef:23:44:75:7c:78:92:1a:cb:
                    f7:b5:5b:ab:fa:f1:42:19:aa:cb:e5:0d:93:e0:2b:
                    c5:ed:b1:e6:ad:eb:d9:64:6e:75:62:68:8c:6c:43:
                    61:99:e3:ca:8a:6b:7d:fc:3a:f6:ef:66:99:ce:31:
                    28:2c:f2:4f:4a:03:e6:17:1f:6a:61:6c:a9:ee:ca:
                    36:d2:f3:81:5c:81:2d:75:d3:d4:ca:bb:b0:ce:42:
                    9a:93:2e:58:d3:b5:63:f1:58:21:60:22:f8:51:e1:
                    8c:9e:d9:bc:63:e9:5b:98:f1:24:54:99:dd:83:ee:
                    45:53:94:06:37:79:09:c0:27:82:e7:a2:b5:8c:da:
                    be:34:33:ee:13:d0:07:01:08:ef:6a:97:55:d3:e3:
                    c9:98:1e:a6:2b:05:d2:6a:36:03:5d:3d:9f:ea:23:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E1:E4:7F:DD:C8:EE:59:E1:BD:8E:C2:65:9C:C7:61:43:CF:E8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:8888::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:d9:a2:87:7b:94:2f:12:67:3f:4c:fb:c9:07:32:f4:58:
         f9:89:15:38:76:f8:6c:12:60:51:68:2e:6a:f9:99:34:62:4f:
         5c:df:ee:20:11:9b:a6:2b:97:46:e5:4f:fb:4f:23:b8:38:67:
         8b:ea:b0:7b:de:c5:1f:32:0f:b0:8b:55:75:eb:92:2d:ec:ef:
         18:1a:43:1c:86:3d:c2:cf:6e:0d:23:86:93:93:15:36:a9:df:
         28:3c:df:b4:00:5e:bb:44:d2:d9:75:59:82:af:67:76:f2:4e:
         44:1f:90:ef:2f:22:b1:bd:c5:dc:57:34:3a:74:53:67:d0:de:
         ea:72:87:93:4a:0c:42:3d:38:fc:34:68:f9:2e:fb:06:45:64:
         e7:75:e0:ed:2f:ae:75:45:f1:13:0f:8c:62:81:51:25:53:8a:
         57:2c:e8:d2:1f:2a:95:ce:e9:43:2e:bd:53:0e:12:99:c6:1d:
         5e:e0:d7:7d:e7:8c:53:5e:81:ed:cd:84:09:a2:d1:e5:59:a3:
         61:56:de:81:de:a3:89:2e:01:c6:f4:b5:0a:15:6a:60:2b:05:
         8b:cb:f4:fe:d7:a6:5c:fe:34:7b:8b:28:5e:c9:a7:37:ec:db:
         de:78:a3:ea:46:9c:0c:5b:ee:59:ec:fa:be:b2:aa:fc:18:6b:
         aa:c1:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:01 2025 by rpki-client