Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/19a956e0-e316-3cee-b2ca-daabf9fd611e.roa
File:                     19a956e0-e316-3cee-b2ca-daabf9fd611e.roa (raw, json)
Hash identifier:          M71qndJxqj6nb1qEdixX5zP1/9WukOvDnm0nmfMkpVs=
Subject key identifier:   CB:80:64:D0:FD:A3:EB:24:59:79:94:38:1C:38:80:7F:55:3B:F9:0C
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624F556AC06200E37F02A0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/19a956e0-e316-3cee-b2ca-daabf9fd611e.roa
Signing time:             Thu 30 Jul 2026 18:45:38 +0000
ROA not before:           Thu 30 Jul 2026 18:45:38 +0000
ROA not after:            Wed 28 Oct 2026 18:45:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1a4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4f:55:6a:c0:62:00:e3:7f:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:38 2026 GMT
            Not After : Oct 28 18:45:38 2026 GMT
        Subject: CN=4eb8014d-3a04-48fe-a6fd-02ab0ad51fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:61:04:c6:97:5a:76:4a:9f:cb:0b:b6:b3:
                    b1:f7:fe:6f:2c:a7:a4:fa:ef:11:27:79:42:59:50:
                    aa:8c:a5:07:82:81:e8:9c:83:8f:6c:81:31:b8:97:
                    05:68:de:a4:20:cc:b9:53:95:ed:4e:6a:f5:bb:17:
                    e5:19:05:4b:31:a4:aa:64:db:ab:0c:22:d2:dd:35:
                    3e:60:a1:c8:d9:9e:39:fa:9b:d8:89:a1:42:59:44:
                    43:11:e2:c0:77:43:b3:c6:8d:ae:0f:d0:ea:28:a8:
                    d9:3c:a0:be:13:f7:57:4b:27:6d:61:d9:2a:4d:61:
                    b2:fe:32:e1:7a:b6:a4:25:4f:2e:ef:67:ee:26:ec:
                    2e:a1:44:48:63:29:28:3d:e7:d0:67:0b:ba:d4:52:
                    32:c2:61:8e:30:7a:d7:03:54:3a:fe:77:8c:c8:ca:
                    ba:cb:1c:25:f8:5c:20:c6:23:55:01:4e:54:49:df:
                    79:ad:86:14:c9:ab:45:8b:f7:90:7a:2d:c0:07:33:
                    74:90:c0:6e:2b:dd:20:33:3d:30:e2:e0:67:61:84:
                    a7:c6:58:b8:f9:60:d0:d6:e6:d1:12:6e:17:28:b3:
                    de:a2:31:3f:7e:b1:6e:a1:01:9e:54:1c:b5:20:d9:
                    5d:59:1f:52:cc:9a:bd:8f:e4:78:44:bb:8d:8a:fb:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:64:D0:FD:A3:EB:24:59:79:94:38:1C:38:80:7F:55:3B:F9:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/19a956e0-e316-3cee-b2ca-daabf9fd611e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1a4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:2f:1c:3a:76:38:18:c2:c3:09:49:64:02:62:84:7a:96:
         5e:3c:41:4c:28:da:78:d1:df:f5:bc:96:1f:a9:0c:dd:01:7d:
         fe:9d:f0:6e:5a:89:2b:e1:d4:f4:dc:f9:a5:3a:0d:f1:c4:f8:
         c3:03:0b:24:07:f2:bb:47:4d:60:a6:0e:74:38:aa:a4:42:e3:
         62:bc:12:d9:65:2d:36:6c:37:4c:37:81:83:b8:d6:55:d4:b4:
         ff:2f:73:25:81:51:00:70:ca:33:4d:1a:da:42:85:41:1b:09:
         5a:35:6d:67:de:bc:c8:ea:2e:5b:d1:55:38:b5:0a:d7:c1:25:
         d9:ad:d5:1c:d9:0f:44:60:24:19:9c:07:0d:d9:46:d4:4c:c3:
         19:87:8a:94:83:2c:7c:48:f4:46:d4:33:5a:68:ad:fb:01:97:
         1f:fb:0c:72:59:af:63:fb:26:17:4f:53:3e:4c:0b:3f:dd:76:
         1d:e6:68:f2:6f:7b:f6:1e:c2:5d:79:bd:b3:03:c2:e8:12:00:
         1a:08:5a:e5:22:ee:7d:d1:1c:d2:aa:7b:a8:7d:bd:a9:28:14:
         d3:f4:73:ad:f3:aa:d6:e0:df:9b:0c:ae:31:58:20:5f:01:57:
         d7:84:e7:32:02:ae:7f:36:e4:c6:b9:f8:2b:17:97:7e:11:f5:
         3f:6d:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:06 2026 by rpki-client