Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/39f4a7ec-7774-3ef7-8c9e-6d07a2f435ad.roa
File:                     39f4a7ec-7774-3ef7-8c9e-6d07a2f435ad.roa (raw, json)
Hash identifier:          yipP6tR/837CtDmQk8MptsL7fmiMrw9K34ECpk4cvyY=
Subject key identifier:   7F:BD:E8:7F:31:82:19:44:DE:01:38:78:C4:EB:7E:C9:13:CE:A8:FD
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626B50C2294420F89BFF00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/39f4a7ec-7774-3ef7-8c9e-6d07a2f435ad.roa
Signing time:             Thu 30 Jul 2026 18:45:51 +0000
ROA not before:           Thu 30 Jul 2026 18:45:51 +0000
ROA not after:            Wed 28 Oct 2026 18:45:51 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:353::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:6b:50:c2:29:44:20:f8:9b:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:51 2026 GMT
            Not After : Oct 28 18:45:51 2026 GMT
        Subject: CN=99d81d38-7408-4a56-91a9-803a4d22097e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:45:3e:53:7f:a2:3b:c1:f7:43:17:28:7b:
                    e7:a2:a1:67:6e:7e:42:52:fd:41:50:e7:3d:86:9b:
                    3d:28:77:4e:69:da:49:98:3b:e2:3d:13:54:bb:1d:
                    f3:22:06:63:67:24:3d:15:0e:da:fb:87:1c:57:5e:
                    de:96:9a:eb:ad:08:aa:9b:69:df:96:af:15:dc:49:
                    8e:58:a8:91:2e:3a:2d:b6:c2:84:fb:45:ef:e5:8e:
                    83:1e:84:6d:aa:0b:1e:6d:20:7a:45:ac:55:0e:ab:
                    53:1d:a6:4c:8e:1d:df:13:61:ed:65:88:cf:b4:76:
                    7f:57:b1:94:b3:23:0d:5b:e0:16:51:31:d4:8b:cc:
                    af:cf:48:9f:66:8d:91:ff:04:a5:8f:63:ef:7e:fe:
                    d8:4f:32:ee:65:95:d0:e7:d2:8c:f0:8e:a4:79:d2:
                    35:56:69:98:53:87:7d:63:15:68:dc:7b:8b:5c:b2:
                    57:85:4c:d4:3c:0f:7f:84:aa:12:96:02:23:9c:a6:
                    ab:eb:ed:52:ee:3b:66:e0:30:69:6f:96:fd:22:48:
                    6f:d3:f7:99:9c:a0:e2:51:99:ef:28:3e:49:a5:0a:
                    71:0d:ff:eb:65:c5:91:b3:99:42:8b:fa:72:97:25:
                    0c:2b:96:e0:21:52:09:07:e3:9c:a0:e9:08:1a:55:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BD:E8:7F:31:82:19:44:DE:01:38:78:C4:EB:7E:C9:13:CE:A8:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/39f4a7ec-7774-3ef7-8c9e-6d07a2f435ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:353::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:18:0f:49:52:53:aa:d6:50:91:7d:79:69:96:e0:32:c9:8e:
         bb:b2:df:1a:0d:69:ce:31:a1:7d:ef:ea:4e:3b:07:dc:d1:49:
         ec:1b:d2:68:2e:a9:b8:37:de:a0:eb:e6:97:de:8a:e8:ac:79:
         69:84:32:3a:7f:b9:ce:35:6d:b2:88:6d:2f:4e:d2:6a:fb:d2:
         40:83:dd:19:d5:93:11:3c:b0:0b:46:cb:be:03:f5:a9:96:68:
         d4:be:e5:c5:48:2b:e7:d0:2f:b8:4c:7a:35:c3:4e:19:76:48:
         3b:5c:26:f6:ce:50:a1:31:c1:d0:f1:c8:d2:ac:ff:a9:37:6f:
         76:5c:30:a1:bc:de:f0:11:77:cd:01:bf:75:b1:8c:0b:60:d1:
         66:56:1d:22:bd:6c:b2:a8:d8:ec:9c:33:6c:87:29:40:2b:11:
         a8:42:2f:fe:79:0b:e5:bb:66:c0:5b:2c:c5:b0:4d:75:fc:6e:
         d8:a2:a4:6e:bd:5e:84:a7:3b:b3:e5:e5:07:df:49:0a:1c:26:
         23:87:1c:84:80:dc:a4:c2:28:87:26:bd:65:18:38:2a:c7:cb:
         4c:f1:b6:e6:bc:06:d0:3d:e3:23:b4:5e:5b:d7:11:30:c4:93:
         f4:f8:2f:de:02:51:29:e2:23:ca:3d:b3:31:6f:b9:e6:a5:66:
         82:5b:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:53 2026 by rpki-client