Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2c4e384b-7b51-3545-b785-8606190c5c51.roa
File:                     2c4e384b-7b51-3545-b785-8606190c5c51.roa (raw, json)
Hash identifier:          oTN+aEV60bM16q3fi2wxhRNWZHccO2MNdSwv9TE5WT8=
Subject key identifier:   2E:02:7E:1F:97:49:5E:67:B1:58:29:EE:C3:C3:B1:7E:8A:C5:B2:25
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6242DC6E52F033F5AAA91C
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2c4e384b-7b51-3545-b785-8606190c5c51.roa
Signing time:             Thu 30 Jul 2026 18:45:32 +0000
ROA not before:           Thu 30 Jul 2026 18:45:32 +0000
ROA not after:            Wed 28 Oct 2026 18:45:32 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:cb::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:42:dc:6e:52:f0:33:f5:aa:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:32 2026 GMT
            Not After : Oct 28 18:45:32 2026 GMT
        Subject: CN=a161aeda-b67e-4f77-999b-2bdb19118276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:a4:81:f8:80:6c:07:be:47:fd:57:83:00:
                    40:68:f0:c5:89:f8:63:67:73:30:6f:3c:2f:0c:71:
                    95:ad:99:ab:62:3a:bd:f2:18:9e:38:d2:03:10:b9:
                    cc:53:cb:15:f6:91:44:ed:51:26:1e:48:97:d9:86:
                    ed:04:01:b5:27:75:30:a9:db:a5:75:5c:ab:9f:77:
                    a1:36:6a:f3:52:84:de:24:b9:53:34:65:df:7a:1d:
                    54:5a:15:22:30:30:51:b9:83:ca:13:6a:d0:28:c5:
                    82:7a:7c:90:9d:83:cb:6c:90:c0:25:1c:c2:84:16:
                    2b:28:e8:cf:b0:47:c7:98:ff:77:20:38:61:1e:a4:
                    f6:70:73:60:52:36:6a:d9:4e:f9:14:95:ea:81:43:
                    70:4c:33:9c:82:a9:fd:df:6b:b8:16:08:cc:de:ea:
                    14:82:75:ad:fb:63:21:2c:e8:7a:02:f6:d7:63:ad:
                    65:bf:55:ba:b0:57:49:ee:f7:46:5e:c1:3c:7c:68:
                    f6:93:ff:f4:a8:6d:42:50:89:f9:39:89:6a:0e:73:
                    1d:12:ba:00:01:55:3c:68:ab:3e:42:2a:e2:cb:7b:
                    a5:41:3f:34:e8:18:3a:9f:c3:e0:12:96:6a:23:77:
                    02:ff:12:a7:32:f4:fe:c4:b5:91:0c:d9:cd:40:a4:
                    e2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:02:7E:1F:97:49:5E:67:B1:58:29:EE:C3:C3:B1:7E:8A:C5:B2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2c4e384b-7b51-3545-b785-8606190c5c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:cb::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:2d:be:dc:c7:9c:a1:1e:2e:5f:89:ee:f1:bd:da:be:84:
         d2:6f:00:9c:00:8a:06:9e:85:37:fb:80:46:63:71:5c:b6:18:
         64:57:76:ef:c1:3d:c5:aa:ed:a3:c6:4e:26:bd:b5:2d:9c:c7:
         97:ba:48:af:8b:0a:63:64:c3:93:03:2b:c4:ce:43:4d:91:92:
         ca:e4:14:8f:a3:1d:af:65:c8:1a:62:cf:46:35:6b:a5:6c:7e:
         0e:26:36:2f:c0:9d:2b:3a:7c:a6:84:ce:15:be:bc:07:99:f6:
         ac:06:c2:a2:bd:8a:8f:eb:4c:8c:2e:9b:76:ab:98:d6:40:1b:
         4f:6c:aa:6e:d3:43:17:fa:17:a6:33:db:74:7c:f0:98:68:6a:
         a7:c1:a5:c0:10:75:04:82:d7:67:41:e2:aa:f5:8a:34:eb:85:
         8b:af:f8:92:8e:c1:26:7b:6e:77:f9:1b:63:47:2a:d9:87:60:
         eb:72:81:01:aa:a0:df:d4:f5:d6:70:82:5f:a9:59:e3:04:87:
         33:a5:85:95:a6:c3:a0:1c:46:79:19:8c:26:96:31:da:82:0d:
         e8:33:4d:36:7c:e3:9d:44:19:26:ca:93:64:49:bb:9c:da:5f:
         2b:38:55:6d:90:4f:bd:2d:05:85:24:34:74:c5:70:78:c6:85:
         b8:78:5a:58
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYkLcblLwM/WqqRwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDUzMloXDTI2MTAyODE4NDUzMlowLzEtMCsGA1UEAxMk
YTE2MWFlZGEtYjY3ZS00Zjc3LTk5OWItMmJkYjE5MTE4Mjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybmkgfiAbAe+R/1XgwBAaPDFifhjZ3Mwbzwv
DHGVrZmrYjq98hieONIDELnMU8sV9pFE7VEmHkiX2YbtBAG1J3UwqduldVyrn3eh
NmrzUoTeJLlTNGXfeh1UWhUiMDBRuYPKE2rQKMWCenyQnYPLbJDAJRzChBYrKOjP
sEfHmP93IDhhHqT2cHNgUjZq2U75FJXqgUNwTDOcgqn932u4FgjM3uoUgnWt+2Mh
LOh6AvbXY61lv1W6sFdJ7vdGXsE8fGj2k//0qG1CUIn5OYlqDnMdEroAAVU8aKs+
Qiriy3ulQT806Bg6n8PgEpZqI3cC/xKnMvT+xLWRDNnNQKTirQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFC4Cfh+XSV5nsVgp7sPDsX6KxbIlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvMmM0ZTM4NGItN2I1MS0z
NTQ1LWI3ODUtODYwNjE5MGM1YzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AMswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAKlAtvtzHnKEeLl+J7vG92r6E0m8AnACKBp6FN/uARmNxXLYY
ZFd278E9xarto8ZOJr21LZzHl7pIr4sKY2TDkwMrxM5DTZGSyuQUj6Mdr2XIGmLP
RjVrpWx+DiY2L8CdKzp8poTOFb68B5n2rAbCor2Kj+tMjC6bdquY1kAbT2yqbtND
F/oXpjPbdHzwmGhqp8GlwBB1BILXZ0HiqvWKNOuFi6/4ko7BJntud/kbY0cq2Ydg
63KBAaqg39T11nCCX6lZ4wSHM6WFlabDoBxGeRmMJpYx2oIN6DNNNnzjnUQZJsqT
ZEm7nNpfKzhVbZBPvS0FhSQ0dMVweMaFuHhaWA==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:34 2026 by rpki-client