Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/233d9a7a-322d-340d-9d71-2f3792901c86.roa
File:                     233d9a7a-322d-340d-9d71-2f3792901c86.roa (raw, json)
Hash identifier:          BLjehJ0nVIK+mTRYFaVsaRZL/HUiMHKrKGC2Kp55NnY=
Subject key identifier:   5B:3A:86:24:F8:B3:06:76:88:E5:38:A5:73:E7:8F:4A:2F:D7:A1:12
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62662EB111265C68A17880
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/233d9a7a-322d-340d-9d71-2f3792901c86.roa
Signing time:             Thu 30 Jul 2026 18:45:49 +0000
ROA not before:           Thu 30 Jul 2026 18:45:49 +0000
ROA not after:            Wed 28 Oct 2026 18:45:49 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:308::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:66:2e:b1:11:26:5c:68:a1:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:49 2026 GMT
            Not After : Oct 28 18:45:49 2026 GMT
        Subject: CN=18ca7619-f775-4dea-bb84-2c0d77ae905d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:e2:c4:e3:fb:9c:08:aa:f8:74:52:f2:c6:
                    07:e6:6e:a5:d0:c8:e7:8a:41:af:8e:2b:03:0e:48:
                    64:27:bd:50:28:1a:08:d1:4d:45:db:4d:dd:5f:70:
                    9d:f6:ad:f8:24:4d:45:78:15:b4:2f:73:45:fb:f5:
                    e5:b1:0b:1f:33:9b:9c:d2:f8:75:f2:71:2e:a6:88:
                    41:81:f1:ad:d2:39:41:07:31:2e:ba:c8:29:72:f9:
                    a3:71:75:68:34:43:89:fe:3c:34:10:f2:17:dc:92:
                    f9:25:81:bd:6a:53:dc:0d:ca:58:a9:e3:c3:aa:75:
                    f7:d5:b6:c2:97:90:8e:0e:db:56:95:66:94:cc:b3:
                    87:99:8f:37:06:07:ba:ac:6c:fe:6d:be:f0:6a:27:
                    3f:01:32:87:1f:13:31:b4:a5:44:0e:20:3a:36:12:
                    ac:57:94:90:b2:ca:e9:6b:ef:19:49:77:93:e8:0c:
                    ca:f4:11:34:38:a2:06:29:76:77:77:f2:3c:f2:ec:
                    89:e7:73:52:f2:52:eb:76:7e:5d:70:ae:99:3e:e0:
                    6e:c8:09:56:cf:89:4d:22:4b:7e:d9:11:93:ef:3b:
                    5a:aa:16:2c:a1:81:91:40:74:9e:47:b5:0e:37:ac:
                    fe:59:6d:45:1c:62:8f:5a:11:74:cb:bb:ca:85:e7:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3A:86:24:F8:B3:06:76:88:E5:38:A5:73:E7:8F:4A:2F:D7:A1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/233d9a7a-322d-340d-9d71-2f3792901c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:308::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:e2:31:5c:e8:c5:ba:6c:e7:32:7e:30:45:bb:42:97:bc:
         54:ac:82:ac:61:93:4e:f5:02:4c:13:1f:01:39:8c:e8:72:a2:
         c3:22:9f:1a:01:25:ff:99:d0:37:7c:e6:f4:1c:17:77:43:fb:
         7b:a8:24:a4:c5:d3:53:2d:ab:93:d2:1b:b7:89:0c:32:de:94:
         95:f8:9a:c0:b9:64:5d:dd:cd:87:66:d2:88:d6:b8:55:9c:a6:
         28:68:4d:f3:52:f7:0a:0f:0c:96:6a:1a:9e:f8:c2:0f:9c:33:
         73:3d:de:7e:da:a6:47:4b:43:d2:14:55:8a:b4:19:87:c6:3f:
         e2:36:c5:ca:f4:4b:68:5a:9e:e9:a7:f4:07:83:bf:53:65:04:
         3a:db:a7:30:c5:9b:7e:26:2b:dd:8e:a0:68:55:0a:46:7b:e0:
         72:09:57:de:bd:aa:c3:a0:66:98:26:ff:ac:2e:43:26:d3:cc:
         0f:f8:76:69:06:07:3c:e8:65:7f:48:ea:f2:e5:fa:8e:d5:59:
         17:e0:ed:ac:42:06:76:b0:5e:df:c2:a2:6b:7c:e9:1a:f5:60:
         cc:c6:05:74:3f:42:0e:0a:e9:a2:08:ec:01:9d:85:1d:f2:61:
         7d:47:fb:02:e5:55:7b:fd:ad:e2:9e:5c:9d:46:21:ec:1c:e9:
         e2:61:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:17:15 2026 by rpki-client