Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa
File:                     cc345068-0648-3390-b9f6-747880bda62a.roa (raw, json)
Hash identifier:          znY6EgqWkmM7rht/Ur5uOFFbHQD6OBN9P5qLSMPl8qc=
Subject key identifier:   C3:5F:B6:7C:D7:C9:BC:90:A9:BA:36:FB:92:A7:07:96:BF:C0:18:98
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584CEE8CC6EDF881BE35FD520B68
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     399275
IP address blocks:        2602:fcc0:4445::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:c6:ed:f8:81:be:35:fd:52:0b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=1159b319-68c8-41e5-934e-d068ea00c235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:61:87:ae:3d:c0:ab:63:8c:47:52:9b:89:
                    50:0a:e8:18:0e:f1:bf:e4:54:8c:33:81:40:f4:a4:
                    5c:9e:5e:0e:da:b9:10:ce:ff:0d:2f:e1:dd:94:88:
                    d0:4b:60:80:60:4f:a1:6d:52:51:94:3e:72:bb:02:
                    f0:93:30:0a:b8:ae:9b:f1:98:b6:d8:f5:de:62:f4:
                    82:64:7b:d4:5a:cc:d9:b2:6b:48:32:6a:3d:4f:52:
                    a5:ed:ab:30:09:53:35:47:39:28:c4:47:73:26:16:
                    86:f2:f4:21:e6:e5:17:c3:f8:5b:39:61:b9:35:07:
                    8c:01:42:b9:a4:98:9f:c8:ad:15:c7:28:83:8f:e5:
                    28:70:62:6d:40:32:a4:3f:7f:aa:ac:65:19:08:a1:
                    fe:63:87:45:63:fe:24:98:61:c7:59:b4:83:ef:f7:
                    5c:1e:4f:c0:af:70:ed:7d:6e:49:3f:0c:59:0c:06:
                    42:5b:f7:3a:ae:ed:07:e1:f5:b1:10:96:e4:7a:47:
                    8d:58:29:1e:a8:30:b3:85:ca:31:7d:a1:32:e7:5a:
                    8a:3c:94:c5:7e:df:6e:da:7b:bf:71:55:51:41:0e:
                    6a:24:a1:9a:b8:85:43:92:8b:85:0d:01:a4:69:e7:
                    c5:8c:0b:6d:65:92:ec:a5:8e:40:08:5b:86:f6:48:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:B6:7C:D7:C9:BC:90:A9:BA:36:FB:92:A7:07:96:BF:C0:18:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/cc345068-0648-3390-b9f6-747880bda62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:4445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:5b:6c:89:16:de:c3:32:ed:c9:ad:19:f3:74:3e:c0:63:
         22:74:73:28:a9:be:bd:c8:72:77:15:74:e2:eb:de:64:e5:30:
         ab:b5:e0:fc:c1:c9:da:fb:01:f0:ee:4e:9a:fb:7e:31:53:fb:
         6e:fe:9f:84:d9:4c:96:49:a8:f8:33:16:e9:fa:d1:6d:b8:40:
         72:9b:2a:38:e4:93:25:90:4e:87:a6:b2:8d:9d:5a:36:a8:6b:
         02:f8:69:c1:1e:ce:c4:8a:6d:1a:45:5b:4d:80:6e:df:18:4c:
         c2:4a:2b:fc:79:82:53:77:e4:f1:ee:3d:37:d6:24:f8:23:13:
         7c:5d:f3:70:36:c8:52:1c:90:0f:34:ff:d6:ee:97:7a:fa:00:
         b4:d6:c7:41:d0:32:42:0c:f9:3a:09:f4:b0:d2:a8:54:b4:68:
         a9:68:c6:bc:1a:07:fe:42:1e:cd:ad:04:33:06:41:f7:9c:f0:
         b2:49:da:47:f7:f9:b5:31:b2:9e:60:e0:85:d9:64:eb:55:b6:
         37:12:ac:3c:0b:30:8e:97:f1:41:ba:56:2f:3b:5c:f7:d0:d4:
         35:70:3f:b9:e0:8f:f8:6e:15:a6:6b:86:b3:c7:6a:dc:42:39:
         52:e6:a5:13:b6:74:52:1a:da:8a:5e:87:2c:f6:9e:58:84:06:
         c6:a5:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:29 2026 by rpki-client