Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/11a92aa5-41a6-330b-bf4e-a5dfac2227be.roa
File:                     11a92aa5-41a6-330b-bf4e-a5dfac2227be.roa (raw, json)
Hash identifier:          On8KHr8AD2okryzlKjbK+wotaPrwCmp6+JIisZ3afnY=
Subject key identifier:   8C:1D:10:C3:A6:91:40:3F:6B:59:CB:8D:12:03:91:23:8E:E6:ED:B0
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623C1F7CD7C66E76F8A840
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/11a92aa5-41a6-330b-bf4e-a5dfac2227be.roa
Signing time:             Thu 30 Jul 2026 18:45:29 +0000
ROA not before:           Thu 30 Jul 2026 18:45:29 +0000
ROA not after:            Wed 28 Oct 2026 18:45:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:4e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3c:1f:7c:d7:c6:6e:76:f8:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:29 2026 GMT
            Not After : Oct 28 18:45:29 2026 GMT
        Subject: CN=89bf7c0f-3be6-4282-a36c-8512a91679c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:fe:be:f1:cb:0c:5e:c9:72:63:89:3f:d5:
                    fc:14:f4:51:e5:2f:bc:b0:cc:6c:80:4d:8d:19:0c:
                    c7:8a:31:58:4d:dc:4b:0c:fa:1d:6c:01:42:39:6d:
                    ff:85:03:8b:73:c1:8f:c7:b1:d9:bb:26:19:f0:13:
                    c5:a7:67:32:46:4c:d7:c2:bc:7d:43:55:78:fd:99:
                    98:df:02:5f:36:8c:67:24:a7:ba:65:31:ea:83:7e:
                    84:9c:35:28:ea:0b:e9:1a:6e:74:cc:cd:32:b3:b9:
                    d8:62:3f:a7:86:f2:b8:01:a3:2b:4c:d3:00:3e:91:
                    9f:c6:c1:d8:f2:25:96:77:e5:50:65:b0:b9:ce:14:
                    b7:89:9c:46:43:30:d3:2e:b1:fe:7b:73:89:af:92:
                    1e:98:5c:e1:90:3f:c6:cf:e8:6f:2f:89:d2:4f:8f:
                    b2:06:06:f4:15:d2:c2:65:84:19:7a:5c:3c:b0:f2:
                    d1:76:c8:49:92:2a:0f:28:b4:a1:b3:f1:59:b8:1b:
                    46:0a:59:0b:1c:25:4a:3c:c6:b8:07:01:54:b6:a4:
                    f3:8e:a9:fe:9a:46:9c:2d:a3:55:02:4f:c5:6f:eb:
                    e7:1c:a6:5b:61:37:79:b3:22:95:91:c4:e1:88:44:
                    ae:8f:b4:3d:7b:52:cb:45:56:29:38:cf:63:ca:53:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1D:10:C3:A6:91:40:3F:6B:59:CB:8D:12:03:91:23:8E:E6:ED:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/11a92aa5-41a6-330b-bf4e-a5dfac2227be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:4e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:fd:66:d9:ef:e2:9c:1e:46:53:5c:87:e6:7a:de:13:a2:
         9e:61:42:88:0f:93:16:4c:85:f1:e5:b2:58:5d:7c:b5:ef:7c:
         ee:87:ea:a8:16:fe:c0:61:b7:b4:e7:12:5b:f3:e8:c2:2a:80:
         66:e2:49:f6:b3:d2:cc:0e:43:c8:f9:6c:30:d1:fc:d5:60:a3:
         47:db:3e:1f:ba:0a:b7:56:27:46:21:2f:8b:c2:01:6e:77:89:
         15:a5:50:f0:ac:94:13:e5:b5:d8:60:1e:c2:46:c5:dc:8c:53:
         12:7b:04:1e:ad:45:e7:9d:37:e3:5c:9f:ab:c5:2b:01:56:ad:
         f9:81:25:c6:20:5d:33:b9:42:7b:92:63:79:4e:61:52:11:68:
         b7:18:35:a9:03:a7:09:4c:ae:b5:41:00:a6:a5:4d:0c:df:aa:
         e7:30:70:dc:7f:37:30:fd:d5:6b:d4:ef:9d:54:0e:2c:d5:ff:
         3a:31:ff:23:2a:a6:5c:02:b1:58:ac:ce:6e:1c:b5:ed:9c:90:
         0c:f7:8e:0e:73:36:98:c7:54:d0:b5:31:a5:b7:70:a1:7c:ab:
         42:f2:21:5f:5b:1e:92:42:d9:64:0f:1b:d5:50:01:8c:f9:03:
         47:d2:66:1c:d7:a5:cb:cb:49:02:e7:84:f6:0e:7e:97:06:b0:
         88:96:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:16 2026 by rpki-client