Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/0006fd61-8608-3314-ad19-d68e17e80314.roa
File:                     0006fd61-8608-3314-ad19-d68e17e80314.roa (raw, json)
Hash identifier:          kaHsPgVkHrw8+V+k2ZT/EjrE3Qz0YOric3OEJB2tYXs=
Subject key identifier:   B7:05:62:B6:5B:29:08:B1:F5:EB:40:84:1F:3B:E4:25:D8:BD:66:BC
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624C65031B584862B7BF80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/0006fd61-8608-3314-ad19-d68e17e80314.roa
Signing time:             Thu 30 Jul 2026 18:45:36 +0000
ROA not before:           Thu 30 Jul 2026 18:45:36 +0000
ROA not after:            Wed 28 Oct 2026 18:45:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:172::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4c:65:03:1b:58:48:62:b7:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:36 2026 GMT
            Not After : Oct 28 18:45:36 2026 GMT
        Subject: CN=022d2bf0-9696-4062-8e61-ae6cba2318a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:21:b3:39:62:65:e8:08:60:07:d0:c2:f0:
                    e0:0e:e4:af:ae:5b:7f:67:57:a1:a1:f1:70:3c:d7:
                    c7:24:f7:4c:73:27:ac:6d:a8:2f:a1:4c:13:e6:2c:
                    3d:f3:b1:46:de:63:a1:d8:15:e2:78:c1:6b:f0:d5:
                    f4:bb:b0:b0:dc:c6:49:a3:de:d4:b5:0c:e7:0e:ee:
                    d8:63:65:27:0d:c8:04:84:8d:df:7d:a8:fa:01:98:
                    2a:5c:07:f6:05:6f:f1:ed:cb:22:6c:44:eb:5d:55:
                    45:85:72:ac:af:80:4d:f5:6b:19:ce:e8:74:b7:d5:
                    db:9d:9d:bc:30:8f:3e:fb:0f:5a:92:94:4b:ba:ab:
                    f4:1b:e3:ca:24:16:23:bf:57:69:f1:26:16:32:e7:
                    97:7a:13:46:c4:f2:22:7e:fc:0e:0b:7a:0a:de:a5:
                    33:c2:3a:fd:53:5a:b3:3c:47:9a:ea:d3:e2:6e:39:
                    7b:20:46:7b:a8:6a:0b:9c:75:12:6a:6a:87:52:77:
                    a2:40:35:ca:4c:8b:f6:a4:4d:c6:25:6f:a6:f3:ac:
                    2c:4e:94:75:e8:bb:3e:57:5c:e7:35:1f:d9:57:d9:
                    24:38:ce:c2:09:93:10:47:99:84:0a:62:c8:a1:3f:
                    b6:ed:93:71:68:7b:53:9b:b6:4b:f5:46:3d:35:6c:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:62:B6:5B:29:08:B1:F5:EB:40:84:1F:3B:E4:25:D8:BD:66:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/0006fd61-8608-3314-ad19-d68e17e80314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:172::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:82:9d:07:e4:63:ee:1c:80:bc:6e:44:bf:06:fd:2d:89:00:
         a4:4a:63:e2:e4:3c:66:ad:43:e3:01:36:9f:be:f3:ac:e5:26:
         f9:91:bc:ec:1a:df:2e:65:9a:50:b5:20:87:5e:d0:40:9a:09:
         f3:6d:1b:d2:96:ba:73:ef:62:ea:65:ec:ce:bd:41:e8:31:a3:
         32:a6:79:2e:5e:8a:bc:d1:a2:af:9f:28:91:f1:c9:b4:98:88:
         0a:26:ae:75:34:7e:d7:58:e0:e1:aa:06:f5:9a:34:71:9e:ec:
         e0:f3:cc:82:92:52:04:b9:bc:44:e3:7f:08:a4:ee:f9:79:0e:
         79:f0:3f:dc:dd:b2:c9:0a:7b:7e:f9:84:84:f9:91:84:e7:46:
         88:b7:dc:82:36:52:ac:07:81:53:73:08:33:a0:96:81:63:3a:
         21:03:8e:1e:54:2e:7a:ac:1e:5f:00:c7:9b:78:dc:4b:15:90:
         cc:3d:8c:fc:4c:ee:9f:4d:5f:4f:ab:d8:c0:79:9e:42:84:f7:
         7e:a0:0a:e8:8c:d1:08:76:f8:f1:7c:9f:08:ef:dc:f2:30:5b:
         bd:ac:f9:20:12:4a:a9:fb:94:3c:a8:b2:cb:66:cf:07:a3:62:
         d2:3c:9c:41:51:de:8a:9a:2d:32:eb:35:29:ea:64:09:c6:3f:
         9e:57:0d:c5
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYkxlAxtYSGK3v4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDUzNloXDTI2MTAyODE4NDUzNlowLzEtMCsGA1UEAxMk
MDIyZDJiZjAtOTY5Ni00MDYyLThlNjEtYWU2Y2JhMjMxOGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQQhszliZegIYAfQwvDgDuSvrlt/Z1ehofFw
PNfHJPdMcyesbagvoUwT5iw987FG3mOh2BXieMFr8NX0u7Cw3MZJo97UtQznDu7Y
Y2UnDcgEhI3ffaj6AZgqXAf2BW/x7csibETrXVVFhXKsr4BN9WsZzuh0t9XbnZ28
MI8++w9akpRLuqv0G+PKJBYjv1dp8SYWMueXehNGxPIifvwOC3oK3qUzwjr9U1qz
PEea6tPibjl7IEZ7qGoLnHUSamqHUneiQDXKTIv2pE3GJW+m86wsTpR16Ls+V1zn
NR/ZV9kkOM7CCZMQR5mECmLIoT+27ZNxaHtTm7ZL9UY9NWzTDwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFLcFYrZbKQix9etAhB875CXYvWa8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvMDAwNmZkNjEtODYwOC0z
MzE0LWFkMTktZDY4ZTE3ZTgwMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AXIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAhYKdB+Rj7hyAvG5Evwb9LYkApEpj4uQ8Zq1D4wE2n77zrOUm
+ZG87BrfLmWaULUgh17QQJoJ820b0pa6c+9i6mXszr1B6DGjMqZ5Ll6KvNGir58o
kfHJtJiICiaudTR+11jg4aoG9Zo0cZ7s4PPMgpJSBLm8RON/CKTu+XkOefA/3N2y
yQp7fvmEhPmRhOdGiLfcgjZSrAeBU3MIM6CWgWM6IQOOHlQueqweXwDHm3jcSxWQ
zD2M/Ezun01fT6vYwHmeQoT3fqAK6IzRCHb48XyfCO/c8jBbvaz5IBJKqfuUPKiy
y2bPB6Ni0jycQVHeipotMus1KepkCcY/nlcNxQ==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:21 2026 by rpki-client