Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/371e38da-8562-344e-991f-2122b001baa2.roa
File:                     371e38da-8562-344e-991f-2122b001baa2.roa (raw, json)
Hash identifier:          4bhzMEmx+ATz8yRpPLj1T0oAAxxA3VnUSEjEkFvoaGg=
Subject key identifier:   0F:9D:83:76:31:3A:20:7A:62:D9:42:35:F7:4E:67:F4:3E:16:95:47
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62630442484D02E4F586C0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/371e38da-8562-344e-991f-2122b001baa2.roa
Signing time:             Thu 30 Jul 2026 18:45:47 +0000
ROA not before:           Thu 30 Jul 2026 18:45:47 +0000
ROA not after:            Wed 28 Oct 2026 18:45:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2da::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:63:04:42:48:4d:02:e4:f5:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:47 2026 GMT
            Not After : Oct 28 18:45:47 2026 GMT
        Subject: CN=1c12d537-a951-401b-aaaf-e1e1209a63cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:7f:9d:03:df:ce:30:b2:ac:16:37:af:8e:
                    c8:fc:75:8c:f7:36:d8:8a:d6:49:ac:af:b9:d9:7b:
                    be:22:ca:a7:3f:3d:ab:3b:b6:7e:77:7f:3b:b4:70:
                    33:b7:33:d5:5d:dc:24:42:07:73:2f:af:f0:0e:a9:
                    f4:ad:ec:72:55:ef:b7:91:7d:23:78:ce:d1:03:10:
                    3a:d6:37:2e:ad:2c:2f:24:1a:47:f8:d0:d8:16:62:
                    14:48:83:3a:05:76:67:9d:42:32:d6:6b:bd:c2:0c:
                    e4:b8:d9:85:4c:0e:3b:d8:65:6f:c1:48:f2:d3:2a:
                    5a:6a:0c:55:39:60:a2:eb:de:35:04:56:15:42:ea:
                    8d:2c:af:e1:80:29:73:12:09:5e:b4:c9:8a:05:e6:
                    35:88:e5:b0:59:5f:63:c4:28:9f:23:68:d4:7b:65:
                    5b:57:b8:19:4a:1a:8d:ea:d5:2a:f7:3f:8f:a2:8d:
                    cd:db:c9:fe:93:19:84:b3:c2:bc:e2:ba:b3:96:bd:
                    e7:8e:a7:15:e3:1e:54:e2:de:d4:27:05:eb:62:7b:
                    4c:86:95:bf:25:f5:1d:03:c0:f4:cb:24:e3:51:33:
                    f8:33:50:5f:dd:77:91:f6:5d:60:cf:f9:aa:98:4c:
                    c9:7a:4c:72:bf:93:2e:24:c0:75:de:99:dc:b8:a7:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9D:83:76:31:3A:20:7A:62:D9:42:35:F7:4E:67:F4:3E:16:95:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/371e38da-8562-344e-991f-2122b001baa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2da::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:26:94:58:74:bd:d0:86:99:ac:82:bb:22:31:5b:99:20:
         cf:fc:15:1f:39:0c:0a:b9:d0:49:ee:95:d6:3f:5e:71:fe:38:
         98:ac:d5:dc:36:e4:ff:4c:ca:cc:fc:2c:44:33:2b:d5:4d:7f:
         20:10:0e:ea:0f:76:fd:f4:cd:da:1a:9e:13:6c:35:2b:35:43:
         ba:cf:e5:aa:37:74:2e:fd:c4:97:de:36:31:54:49:5e:79:f7:
         fe:39:0b:1d:02:40:2f:49:6d:ac:5e:5e:0f:98:9c:67:3c:d2:
         66:31:67:58:d2:e0:f5:d3:bc:40:0e:5c:a3:89:1f:bf:88:a1:
         bb:f2:6e:f7:cc:8b:8c:b9:2f:2d:e9:f3:bb:cb:53:a4:82:fa:
         a0:d1:32:0c:95:a1:32:be:cb:aa:42:26:9f:2f:45:87:44:e3:
         48:b4:3a:ad:2d:44:c7:18:64:12:33:c2:6f:32:14:3f:02:a8:
         40:6a:ed:8a:6d:b8:66:2d:db:23:5c:90:49:cc:9d:62:3a:6f:
         54:9a:d4:d6:fb:7d:f7:94:9d:46:ef:f1:0f:0f:74:bb:d7:e9:
         7a:5e:f1:6d:7a:b9:58:86:b4:8a:72:6d:a0:c5:4c:a1:67:d4:
         10:f5:3f:09:d7:0f:c0:0c:19:b6:b4:62:2c:d4:c1:ad:84:a6:
         2d:cd:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:44 2026 by rpki-client