Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2ff81dc2-9207-3f8f-a5c7-5b6062dc5c8a.roa
File:                     2ff81dc2-9207-3f8f-a5c7-5b6062dc5c8a.roa (raw, json)
Hash identifier:          DdzPwlaCiNuvK2D+vDqRTvxM2KUSNzhRb6O+d0nNeKU=
Subject key identifier:   83:52:58:0E:E3:73:EE:29:43:27:25:57:12:86:F8:09:A0:66:43:43
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625787EB2EFD20CE0E0B00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2ff81dc2-9207-3f8f-a5c7-5b6062dc5c8a.roa
Signing time:             Thu 30 Jul 2026 18:45:42 +0000
ROA not before:           Thu 30 Jul 2026 18:45:42 +0000
ROA not after:            Wed 28 Oct 2026 18:45:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:22b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:57:87:eb:2e:fd:20:ce:0e:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:42 2026 GMT
            Not After : Oct 28 18:45:42 2026 GMT
        Subject: CN=1f944796-dce8-4e92-944f-4a5fa13d105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:c0:77:10:4e:50:dd:4c:e3:6a:14:a7:8e:
                    87:f6:0f:d6:60:76:d9:3c:24:17:f0:98:d6:6e:b0:
                    de:ab:4d:73:a1:94:10:b2:52:ed:06:a4:32:9e:2d:
                    ff:a5:27:88:ba:4e:1b:22:77:5c:ce:84:08:af:05:
                    79:19:0b:c8:f2:21:26:6b:a3:d2:52:e3:bf:0f:27:
                    a5:ff:3c:3f:9c:26:ff:5f:4d:2c:5c:94:a3:ad:43:
                    e0:e9:3b:03:7c:af:76:00:b4:b5:58:0b:2d:db:42:
                    d1:f9:3a:28:2a:43:05:63:1a:67:c3:71:07:e4:ef:
                    55:1f:34:20:3f:95:28:2b:4f:77:8a:2c:3b:57:04:
                    1d:a8:fa:f3:0a:f5:f6:5f:ad:9a:57:5c:64:e7:02:
                    d0:4e:14:74:b6:1f:43:54:5d:c1:4f:5f:32:90:cc:
                    c4:3e:42:4f:fd:86:7d:b8:a1:d8:17:a6:61:79:53:
                    71:46:80:01:1a:f8:a6:09:27:68:3a:7d:4e:40:fa:
                    e1:fe:00:3c:b2:4f:56:88:e9:19:c7:76:b3:01:92:
                    1b:42:ef:c8:88:27:ec:61:34:5c:b3:66:3e:bd:13:
                    07:be:a1:21:50:1d:e2:cf:e7:fa:b8:ac:95:e7:42:
                    6e:07:09:94:58:94:5f:50:d2:76:eb:dc:69:a4:86:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:58:0E:E3:73:EE:29:43:27:25:57:12:86:F8:09:A0:66:43:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/2ff81dc2-9207-3f8f-a5c7-5b6062dc5c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:22b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:13:0c:30:08:b5:c1:0f:28:4f:6f:ef:ad:d7:13:61:52:08:
         57:e6:69:09:37:87:ea:c4:31:38:c4:54:d5:00:ec:41:81:1e:
         b1:e2:2c:e7:32:25:c0:29:89:54:6a:63:0f:9e:fe:98:cc:7d:
         cf:8a:53:51:a0:3d:fd:ac:da:04:a0:51:f6:04:3d:82:a5:70:
         19:1e:d2:b0:66:fb:1a:90:e4:aa:e4:92:22:f5:ab:32:4e:66:
         80:3d:35:c4:9f:1b:99:88:17:c8:43:dd:00:d2:0c:66:4e:91:
         ff:0f:7f:b3:c9:7c:22:0a:94:50:56:9a:ec:e1:3f:c3:0d:d0:
         44:06:71:73:98:14:42:f5:c8:e3:94:96:53:f3:ae:e7:e8:10:
         5a:39:c2:c9:1b:95:1d:72:7a:54:54:cd:d8:91:9f:f6:25:87:
         f6:32:a9:2e:0f:e0:21:d4:f4:a7:37:5a:c9:48:87:8c:5c:d8:
         22:4a:00:0f:a0:d4:ec:ba:9a:a9:d1:78:3d:f0:35:1c:d6:65:
         d7:88:87:b2:12:5c:a8:28:21:1f:76:40:ae:9e:00:a1:7c:6c:
         b1:fd:6b:56:c7:d7:cc:6c:c7:c3:fd:24:ca:35:96:94:01:55:
         b5:aa:94:7b:6d:15:e7:eb:4a:9c:2c:04:ff:b7:aa:b4:cf:6f:
         68:4b:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:09 2026 by rpki-client