Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2e680377-3853-3e22-87cf-528080da1e01.roa
File:                     2e680377-3853-3e22-87cf-528080da1e01.roa (raw, json)
Hash identifier:          +uhB323F85ssJHtVsqIuYXyGQiVM2oGbZwZZO/bBX1w=
Subject key identifier:   AD:AF:E4:7A:6F:C4:3A:07:9A:28:52:52:CD:E4:CE:FC:62:EE:FF:EF
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626D4CB34063A81A26F1C0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2e680377-3853-3e22-87cf-528080da1e01.roa
Signing time:             Thu 30 Jul 2026 18:45:52 +0000
ROA not before:           Thu 30 Jul 2026 18:45:52 +0000
ROA not after:            Wed 28 Oct 2026 18:45:52 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:370::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:6d:4c:b3:40:63:a8:1a:26:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:52 2026 GMT
            Not After : Oct 28 18:45:52 2026 GMT
        Subject: CN=f905a500-aa8d-4a23-b852-c22488e6c0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:c0:f1:73:61:c9:44:af:7e:e5:d5:1e:ba:
                    2b:1a:1c:cf:47:fb:70:d2:09:c4:c0:99:7c:55:67:
                    f0:6f:91:92:92:86:8b:c2:11:55:93:47:ff:77:d6:
                    36:75:f2:d2:10:b5:ff:7b:db:52:6d:2d:7a:4d:35:
                    31:cf:ae:4b:4f:24:31:5b:8b:c8:f9:8b:f2:10:57:
                    3f:8d:f6:66:ad:62:4f:8d:f3:02:4d:65:88:23:d2:
                    6e:83:7a:bd:a7:0b:2b:40:10:82:45:e2:d5:35:1c:
                    8d:32:87:fa:e8:52:90:6f:16:95:36:07:03:e6:ff:
                    cf:f7:81:05:21:bb:ca:8b:10:11:9c:18:76:f0:44:
                    be:f9:38:5b:b8:31:f5:61:93:65:b7:54:55:4c:85:
                    ff:68:08:de:bd:2e:fd:7b:f7:e7:9b:5d:94:a5:49:
                    e2:05:6b:91:ad:39:eb:b1:7d:8a:11:fc:c8:ef:bd:
                    cb:47:c9:a6:72:7b:60:70:e8:c3:11:a8:ba:50:2b:
                    08:b2:02:af:3a:1e:fd:63:63:bb:90:eb:53:07:f3:
                    12:9c:4b:c5:19:08:2a:5b:e6:6a:f6:e6:a9:52:e3:
                    f7:6d:60:62:45:19:45:d1:90:f9:2d:80:9a:27:9b:
                    89:c9:ae:20:35:b2:5d:9d:dd:c3:61:e1:15:7f:b1:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AF:E4:7A:6F:C4:3A:07:9A:28:52:52:CD:E4:CE:FC:62:EE:FF:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2e680377-3853-3e22-87cf-528080da1e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:370::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:cb:75:e6:91:da:21:88:b7:c8:83:7b:c4:6e:8a:e9:34:
         ba:31:e1:7f:5f:37:aa:39:d5:fc:7d:7d:54:86:e9:89:9f:70:
         e6:f7:e4:19:15:c0:21:41:94:24:2b:39:00:fa:a6:30:79:07:
         98:49:1b:23:cb:e1:5e:68:13:f7:16:63:05:a0:90:93:76:88:
         1a:7a:d1:f0:62:72:86:bd:26:a2:80:29:c2:06:70:27:4b:dc:
         8b:62:6e:07:f9:cf:92:42:00:70:5d:8d:6d:52:36:5b:09:28:
         9b:21:4d:33:7b:05:57:a6:49:b3:54:98:f4:cd:83:f1:a1:98:
         77:32:53:22:04:29:e7:09:2f:cc:d7:2c:37:20:d8:23:d8:d2:
         b1:31:63:59:18:11:0e:1c:f3:42:ba:24:1f:f9:76:17:37:4d:
         5b:db:a9:bd:30:34:4f:b2:3c:b7:24:ae:29:32:9b:72:db:fe:
         3f:84:3e:48:e4:5f:f7:8a:df:2a:1c:cd:dc:52:93:9f:d5:4f:
         51:8e:b9:41:d8:9d:e7:a8:4c:38:fa:39:80:b5:94:03:2e:45:
         78:00:6a:55:8f:bb:23:42:dc:64:54:88:59:b2:79:85:67:69:
         37:78:92:68:74:0f:fd:f6:c1:98:87:c2:95:62:2a:e8:5d:b0:
         91:38:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:15:11 2026 by rpki-client