Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/03ade706-fa93-3886-8d09-d6095477636a.roa
File:                     03ade706-fa93-3886-8d09-d6095477636a.roa (raw, json)
Hash identifier:          lvHTj0RfI7gfnH+JOgIT7SQbt1JncysB1nm8fN5wSmg=
Subject key identifier:   58:31:56:07:B8:03:E0:9B:05:75:9C:49:D6:48:A3:BC:81:65:D0:19
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624DB73FCBA9032C48EF00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/03ade706-fa93-3886-8d09-d6095477636a.roa
Signing time:             Thu 30 Jul 2026 18:45:37 +0000
ROA not before:           Thu 30 Jul 2026 18:45:37 +0000
ROA not after:            Wed 28 Oct 2026 18:45:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:188::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4d:b7:3f:cb:a9:03:2c:48:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:37 2026 GMT
            Not After : Oct 28 18:45:37 2026 GMT
        Subject: CN=b242fae1-a5de-4308-9af8-2919c17cef6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:18:2f:22:a3:f0:f5:8c:1b:af:b7:63:b3:
                    12:6a:e3:86:48:08:62:4c:1a:4e:39:6e:9c:86:d0:
                    46:ae:fd:b7:01:c9:d5:c3:b5:f7:97:34:30:08:94:
                    e8:2c:4a:28:e7:e4:f1:4c:01:2c:24:0f:16:45:2c:
                    28:8d:ae:b1:81:67:1a:7e:6e:c7:43:c8:e3:3e:f6:
                    6e:cf:8b:97:a3:e5:69:c6:ac:1b:01:29:a7:53:2f:
                    62:80:96:0b:af:4f:49:6f:0a:18:a1:c5:53:7b:29:
                    1c:3a:71:51:1e:03:48:b0:9e:53:d5:dc:cb:c6:80:
                    1e:6d:61:1f:4e:d3:29:91:55:70:82:96:12:c1:a1:
                    d9:77:06:1e:ed:54:a3:74:81:56:01:a3:be:de:6b:
                    48:85:7b:3c:d3:3a:38:1b:da:86:cd:62:c7:8d:b1:
                    ed:1d:fb:23:22:62:d1:f5:ed:21:6d:ef:12:8d:f1:
                    76:87:ca:11:f6:c2:80:0e:31:60:e7:02:79:57:95:
                    56:63:d4:0d:48:ab:ee:53:d0:ce:75:56:95:fd:d4:
                    bb:cd:74:3c:70:1a:45:a5:af:c9:1b:36:e3:a7:d9:
                    60:98:fa:bc:6b:6d:62:45:c2:9b:a1:ed:61:a5:9e:
                    71:f8:dc:e8:e4:bd:c9:34:09:17:e6:53:63:47:b8:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:56:07:B8:03:E0:9B:05:75:9C:49:D6:48:A3:BC:81:65:D0:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/03ade706-fa93-3886-8d09-d6095477636a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:188::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:db:6a:c2:b2:64:85:e0:3f:b2:80:bc:7c:08:c2:21:e2:2a:
         8e:e7:4b:d3:8d:eb:33:40:09:d7:fe:e0:8b:5b:18:57:a9:51:
         36:8e:4c:c5:78:ca:57:19:34:93:4f:b9:14:ec:0f:60:c7:34:
         99:3e:4a:ef:48:06:27:40:e7:6d:a0:dd:19:3c:86:7a:c8:0c:
         c4:c9:ef:a0:98:2c:bd:60:b2:ab:19:78:40:26:80:54:cd:4d:
         c8:8d:32:ce:90:73:75:2c:ae:10:a2:de:7b:2b:1f:a0:01:79:
         84:9e:8a:63:3c:2c:4f:f4:d0:db:f9:07:1b:3e:1d:9b:c8:af:
         99:f3:64:d9:cc:2e:dc:35:7a:8e:0e:5b:38:d8:6a:a0:1a:f6:
         5a:bc:5b:64:44:aa:fd:af:4e:0b:51:b6:34:8a:23:32:3e:85:
         fd:81:e4:62:95:27:b1:08:77:97:a8:83:6b:f6:df:f3:d4:ee:
         9e:57:f6:92:e8:99:28:99:e6:3b:ea:ad:2e:23:59:6d:2a:d8:
         99:7a:b5:1d:ab:ba:56:2c:71:4d:e6:31:0d:eb:c5:d9:04:ec:
         17:29:8b:ad:b1:2b:4f:5b:70:e8:f2:78:96:33:0a:21:fd:07:
         84:d1:d1:ab:61:4b:bf:6d:08:c9:9a:c5:4a:ce:e1:a7:2a:58:
         f6:c5:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:45 2026 by rpki-client