Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3276c3c6-ca75-3f66-ad24-1638fa43ecba.roa
File:                     3276c3c6-ca75-3f66-ad24-1638fa43ecba.roa (raw, json)
Hash identifier:          HQ3dOaYzjIP0YjZbb0Fhv3Ryioa13Aup6VHjuVyZOhA=
Subject key identifier:   0F:D0:B9:5C:0A:8D:DA:2B:57:C4:A7:22:F2:BF:96:85:02:D9:0C:63
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6267F9DF1E1D5F30808C00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3276c3c6-ca75-3f66-ad24-1638fa43ecba.roa
Signing time:             Thu 30 Jul 2026 18:45:49 +0000
ROA not before:           Thu 30 Jul 2026 18:45:49 +0000
ROA not after:            Wed 28 Oct 2026 18:45:49 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:322::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:67:f9:df:1e:1d:5f:30:80:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:49 2026 GMT
            Not After : Oct 28 18:45:49 2026 GMT
        Subject: CN=403be63f-6230-4b7b-8211-46f832fbed37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:b9:e5:d9:86:7b:8c:dc:39:77:05:43:3e:
                    63:be:03:20:67:92:12:86:6d:1c:12:cc:e6:67:ce:
                    43:e6:20:e9:46:a9:a0:fa:2e:a3:d9:2e:ed:d8:97:
                    92:4a:a7:2b:c4:fc:b3:38:e4:b5:66:f0:a6:52:4b:
                    30:a3:bd:5b:4e:b7:c0:d9:a4:6f:f5:c4:08:cd:24:
                    ad:ed:3b:e3:35:59:ed:c6:87:1f:9a:dd:da:f9:e3:
                    c7:9e:b5:ba:c2:87:7a:74:e9:0e:eb:80:33:8c:c3:
                    2f:0c:a0:1f:db:08:cf:13:2a:a4:a4:c9:89:f0:37:
                    6c:01:08:a1:69:1b:90:7c:dc:e3:f5:f5:97:8b:b6:
                    1d:41:b2:3c:66:42:c4:3c:be:9f:21:67:d2:ce:ae:
                    37:83:48:32:35:d8:ca:2c:ac:b4:f4:23:ba:63:33:
                    b4:67:b1:d5:aa:95:8f:d2:37:1c:dc:5b:15:c7:f3:
                    72:5f:03:57:3e:c6:24:fc:4f:92:42:87:36:bf:39:
                    2c:18:57:47:bb:d6:17:d6:d9:af:eb:34:cb:31:bd:
                    e1:22:82:78:79:c2:dd:1e:49:33:d8:c5:2e:06:f1:
                    fa:ea:77:8a:73:00:c2:84:f1:cd:9b:e4:8e:30:58:
                    9e:3b:db:88:4a:79:eb:b0:79:00:45:bd:38:02:64:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:B9:5C:0A:8D:DA:2B:57:C4:A7:22:F2:BF:96:85:02:D9:0C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3276c3c6-ca75-3f66-ad24-1638fa43ecba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:322::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f9:dd:f9:2c:f3:21:d4:ea:b6:e2:e8:b9:32:84:fe:46:df:
         6c:ee:4e:b1:62:69:1f:e6:e2:3c:db:b5:bb:67:c7:60:e9:bb:
         71:f9:b5:18:10:14:5d:7a:b1:1a:df:15:d7:d2:07:cc:4e:f4:
         7e:d3:20:a4:87:c9:1c:98:fc:80:6b:e6:88:4b:29:d6:42:cd:
         5c:f0:ff:28:77:93:57:df:49:c6:92:55:01:c1:32:97:2a:6a:
         02:d2:f3:32:92:7a:8a:7d:e4:37:32:7a:0d:ea:9d:80:82:81:
         77:9c:7b:2d:cb:26:57:96:47:9d:f1:bc:20:80:5d:f7:5a:45:
         ce:6c:28:5a:bf:c5:8c:e6:75:a5:a9:70:bb:bd:44:12:d1:f8:
         f2:a9:6a:f0:43:44:28:26:9f:fe:99:d7:38:ab:4a:d1:6e:b4:
         a5:bb:dd:05:88:a4:d2:88:15:44:d3:81:a2:4e:d5:99:92:72:
         cf:82:a1:09:e5:af:d3:e8:de:5f:cc:e4:82:ba:ed:f8:0b:af:
         02:0d:64:5f:91:2a:c3:36:a0:97:15:ac:23:15:a3:0c:4c:3c:
         34:82:61:f7:6e:3c:08:c8:c1:e8:fc:8e:8b:fb:6b:ed:ac:83:
         08:5f:cd:42:dc:9c:8b:39:42:46:d8:8d:0a:9f:03:50:57:7c:
         4d:7f:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:21 2026 by rpki-client