Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3211533a-56c3-3a1a-b92d-4924f43b6fdb.roa
File:                     3211533a-56c3-3a1a-b92d-4924f43b6fdb.roa (raw, json)
Hash identifier:          7hRNetOmXr6AOwBqHBrUJ6qmlaY7kIYyTy2WMq29co0=
Subject key identifier:   72:D9:AE:F0:9F:0F:01:E1:22:AA:40:5E:1F:FB:F8:B9:39:0D:EC:CC
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625415EE6990E12DE2B280
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3211533a-56c3-3a1a-b92d-4924f43b6fdb.roa
Signing time:             Thu 30 Jul 2026 18:45:40 +0000
ROA not before:           Thu 30 Jul 2026 18:45:40 +0000
ROA not after:            Wed 28 Oct 2026 18:45:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1f3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:54:15:ee:69:90:e1:2d:e2:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:40 2026 GMT
            Not After : Oct 28 18:45:40 2026 GMT
        Subject: CN=26c83c31-14e7-40cf-8c57-5ff043f0d5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:ce:1f:d1:d0:f3:ad:ba:4f:7a:40:1a:f7:
                    7d:3d:40:ac:99:3c:c8:66:06:fc:f2:c7:a0:f0:19:
                    dd:2d:33:1b:40:e8:1a:d5:c5:cb:f0:99:20:f8:56:
                    55:61:d1:bc:59:e7:d4:71:38:38:84:80:ec:cc:25:
                    bd:12:9d:a2:ca:dd:6c:6c:92:a1:ea:cd:b3:d9:bf:
                    5e:22:2e:6c:6f:14:d4:b4:fd:a6:ea:9a:25:82:2a:
                    85:1b:c7:c0:b6:5d:41:e6:a0:c1:8c:d4:d2:b4:31:
                    49:ca:4f:c4:ad:6e:60:3c:35:cb:17:23:79:f5:d2:
                    d5:fa:0a:4b:bd:38:59:6c:05:9a:f0:3e:93:3e:85:
                    7b:30:12:30:87:b9:f9:ed:77:39:65:06:68:5c:fe:
                    ac:2a:aa:e1:5d:dc:bf:b0:59:c5:4c:1b:e9:4b:0a:
                    5b:ac:38:b6:49:c4:33:cb:ae:47:fc:43:c0:d4:7b:
                    f7:9a:7a:b2:0b:11:2c:f7:31:f8:19:7e:9d:8f:2e:
                    35:3b:2a:52:29:f0:5b:5b:bd:74:48:4b:6a:71:d9:
                    a8:08:83:ba:62:9a:3b:c0:31:3c:3e:a2:91:bb:dc:
                    5b:f0:75:f7:9c:0a:de:1b:e0:dc:31:e4:87:45:62:
                    f5:3e:8b:6b:33:6c:e5:5f:ac:b4:b3:cc:62:af:a8:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D9:AE:F0:9F:0F:01:E1:22:AA:40:5E:1F:FB:F8:B9:39:0D:EC:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3211533a-56c3-3a1a-b92d-4924f43b6fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1f3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e0:8e:1e:f2:a8:ec:32:00:fb:1c:07:0d:e1:44:01:7d:d7:
         2e:dd:21:57:91:30:f8:c7:98:f8:cc:0c:b9:3e:86:2b:c0:9e:
         47:b8:ef:66:f9:31:44:88:22:56:f6:db:64:a0:7c:b2:ba:54:
         31:6f:1a:46:15:45:79:fd:83:2f:cd:f0:0d:c3:f0:eb:53:ed:
         52:1e:28:05:e0:6b:b7:9b:6f:7a:dd:24:d0:09:23:52:f2:af:
         c9:65:d2:8f:43:b1:a4:36:45:77:69:44:49:ee:3b:6c:82:19:
         4e:3b:b4:44:f9:dc:41:dc:f3:73:47:2b:80:12:4b:4e:eb:30:
         78:d9:9c:39:70:9d:a0:1c:89:b3:e2:c7:8f:fc:62:40:e4:29:
         4e:cb:e0:36:56:2f:23:75:8b:e8:8f:c0:f6:64:fd:08:8d:75:
         11:4b:5d:65:5b:b6:ae:79:83:75:64:28:25:ca:1e:23:41:7c:
         0b:f3:30:0f:d3:52:4c:61:0e:a3:11:1e:06:7c:43:7b:d8:4a:
         8d:1b:8c:fe:c0:62:1c:b2:3d:43:bc:b1:05:41:b0:90:a8:24:
         8d:4e:fd:a2:69:15:bb:e0:42:8f:d9:ad:fe:11:be:67:c4:b4:
         dc:13:c8:5c:53:5f:3a:f5:ec:15:9f:69:82:bf:72:ec:75:3b:
         27:bb:31:95
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYlQV7mmQ4S3isoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0MFoXDTI2MTAyODE4NDU0MFowLzEtMCsGA1UEAxMk
MjZjODNjMzEtMTRlNy00MGNmLThjNTctNWZmMDQzZjBkNWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO3OH9HQ8626T3pAGvd9PUCsmTzIZgb88seg
8BndLTMbQOga1cXL8Jkg+FZVYdG8WefUcTg4hIDszCW9Ep2iyt1sbJKh6s2z2b9e
Ii5sbxTUtP2m6polgiqFG8fAtl1B5qDBjNTStDFJyk/ErW5gPDXLFyN59dLV+gpL
vThZbAWa8D6TPoV7MBIwh7n57Xc5ZQZoXP6sKqrhXdy/sFnFTBvpSwpbrDi2ScQz
y65H/EPA1Hv3mnqyCxEs9zH4GX6djy41OypSKfBbW710SEtqcdmoCIO6Ypo7wDE8
PqKRu9xb8HX3nAreG+DcMeSHRWL1PotrM2zlX6y0s8xir6gDBQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFHLZrvCfDwHhIqpAXh/7+Lk5DezMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvMzIxMTUzM2EtNTZjMy0z
YTFhLWI5MmQtNDkyNGY0M2I2ZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AfMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAPOCOHvKo7DIA+xwHDeFEAX3XLt0hV5Ew+MeY+MwMuT6GK8Ce
R7jvZvkxRIgiVvbbZKB8srpUMW8aRhVFef2DL83wDcPw61PtUh4oBeBrt5tvet0k
0AkjUvKvyWXSj0OxpDZFd2lESe47bIIZTju0RPncQdzzc0crgBJLTusweNmcOXCd
oByJs+LHj/xiQOQpTsvgNlYvI3WL6I/A9mT9CI11EUtdZVu2rnmDdWQoJcoeI0F8
C/MwD9NSTGEOoxEeBnxDe9hKjRuM/sBiHLI9Q7yxBUGwkKgkjU79omkVu+BCj9mt
/hG+Z8S03BPIXFNfOvXsFZ9pgr9y7HU7J7sxlQ==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:19 2026 by rpki-client