Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4401227d-ee49-390f-bdbb-d8990106c846.roa
File:                     4401227d-ee49-390f-bdbb-d8990106c846.roa (raw, json)
Hash identifier:          2FJG0gEyCHRSOtd1hj1zV985Ev0SA4FQS7xa5TNmKSw=
Subject key identifier:   BC:49:29:34:C7:6A:55:DB:A0:F1:90:78:EC:F5:56:1E:81:E8:9C:FF
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584A2C2015B7D736101B5F21F180
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4401227d-ee49-390f-bdbb-d8990106c846.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     399725
IP address blocks:        2602:fcc0:1111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:15:b7:d7:36:10:1b:5f:21:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=353dc957-f5e9-43f1-8fcc-14c0eb251caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:cd:19:88:5c:0d:16:fe:d1:d3:c7:f1:46:
                    ac:0c:aa:22:bb:4b:31:ac:a5:fa:09:f5:52:3b:ea:
                    74:49:52:d1:2c:d1:10:ff:08:5c:4c:90:21:74:de:
                    62:8e:40:d8:51:98:d4:d3:98:cb:b0:8d:52:22:08:
                    94:f0:61:f0:63:04:e9:4d:ff:8b:e0:ae:58:40:e0:
                    f5:ee:74:1a:9f:7b:d7:0e:82:7e:ff:c0:dd:82:5c:
                    17:a1:76:fa:f2:a2:9d:13:0b:85:b1:ae:a9:29:ff:
                    da:6b:cf:ea:35:66:c4:df:55:eb:ce:39:b8:25:4a:
                    05:4b:3b:c6:ea:6b:27:6d:ba:20:e1:f2:ac:33:c7:
                    64:48:9d:21:bc:04:18:03:d5:2a:bb:0d:fc:16:2b:
                    40:15:32:8f:07:5e:93:6d:f4:e6:19:bf:8a:1a:ec:
                    67:c7:e3:da:f2:49:69:48:46:56:74:f8:95:8a:36:
                    63:eb:71:9e:46:c4:58:38:48:1a:69:13:7f:ff:f2:
                    ec:0b:d5:70:95:ef:11:b6:7c:9a:38:2c:43:ae:41:
                    39:33:6a:92:e5:f5:12:42:1c:08:89:27:e6:7a:4c:
                    41:63:23:4b:e6:19:20:41:a5:8a:7d:cb:d6:79:5f:
                    ae:34:b5:82:3e:09:bc:b6:09:6f:e4:b7:60:4c:8d:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:49:29:34:C7:6A:55:DB:A0:F1:90:78:EC:F5:56:1E:81:E8:9C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4401227d-ee49-390f-bdbb-d8990106c846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:1111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:c8:93:bd:95:60:35:b7:24:dd:4b:74:f0:6e:44:40:03:
         08:c5:42:1b:3b:06:5c:fc:05:5c:d7:7c:7f:72:bd:67:b1:ec:
         4c:39:fa:a7:7c:90:59:c2:1a:9c:ed:e9:ef:c4:8c:4f:42:23:
         da:b0:64:31:dc:2e:df:65:74:d5:dd:92:48:f7:14:50:42:c8:
         7b:04:71:c4:e1:89:58:ed:c8:a4:0a:63:13:70:02:6e:72:20:
         f8:cd:4d:77:8e:bc:d5:fc:cc:0c:eb:35:f7:82:fe:80:eb:ba:
         75:bc:ef:34:f1:3b:eb:d4:79:a7:6a:89:a1:e3:a5:91:ec:04:
         df:eb:66:e0:81:62:0b:a6:d1:5e:26:ed:fe:b0:8c:7d:94:db:
         61:26:5c:0a:4f:19:ff:c6:6d:81:16:46:7e:07:14:1c:26:5a:
         3d:e7:4b:cb:b8:23:cd:84:e7:e3:4f:d0:c6:b0:94:4a:5e:12:
         fd:80:3a:01:88:86:ee:5b:32:8b:3a:96:ce:a1:a0:02:6a:b5:
         60:c3:53:bb:51:63:f6:17:d7:3e:da:96:5f:e3:e8:5c:dd:77:
         16:8f:04:04:98:83:3e:30:1d:2a:43:b7:27:c9:31:87:8e:2a:
         ec:67:88:e2:b2:96:d0:f8:c5:f6:2d:06:ec:cf:dc:c6:09:ed:
         ee:b8:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:01:01 2025 by rpki-client