Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3e950ffe-179f-3b1c-9c28-f207b3c1023e.roa
File:                     3e950ffe-179f-3b1c-9c28-f207b3c1023e.roa (raw, json)
Hash identifier:          GcCn6Dvykh2lFA9dBJrxx65bW3eo5J6+xItmJiBAfCc=
Subject key identifier:   FA:6D:0E:ED:DA:E1:DC:3B:B3:39:C0:69:52:15:39:5E:D1:F8:7A:A4
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6266B26DCA5FBA584EFEC0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3e950ffe-179f-3b1c-9c28-f207b3c1023e.roa
Signing time:             Thu 30 Jul 2026 18:45:49 +0000
ROA not before:           Thu 30 Jul 2026 18:45:49 +0000
ROA not after:            Wed 28 Oct 2026 18:45:49 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:30f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:66:b2:6d:ca:5f:ba:58:4e:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:49 2026 GMT
            Not After : Oct 28 18:45:49 2026 GMT
        Subject: CN=1983003d-365d-409e-9b52-40913a1d5cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:f9:70:48:24:38:98:3d:e6:45:b9:9e:25:
                    6c:92:06:16:02:bc:5c:8e:fb:82:de:0a:e2:e4:d1:
                    65:8c:3e:1d:0d:39:2a:ad:ab:49:89:25:ae:63:e8:
                    37:6b:ef:38:07:30:b5:22:df:41:d1:24:7d:14:57:
                    b9:22:76:8b:99:18:6f:0c:e2:3b:a6:bf:88:5f:d6:
                    a5:89:59:7d:51:25:db:5c:96:5f:2f:ef:f5:c0:c0:
                    d8:f9:cd:dc:6b:f6:cb:35:5f:03:fa:d3:a3:4b:e5:
                    83:17:b7:f5:a7:3e:24:6b:2f:29:83:5e:7c:3b:e2:
                    cc:4c:d1:4d:0a:4f:b5:b6:78:1a:e7:7b:ba:16:df:
                    35:18:da:e5:08:c4:3e:26:34:a1:22:7e:e0:84:5f:
                    96:13:49:7b:9a:82:b5:2c:0e:a5:93:18:b6:48:7c:
                    59:43:fc:4d:94:5a:84:92:ee:24:56:de:b0:1f:a9:
                    6d:7c:ac:fd:94:2c:9e:0e:58:be:c5:67:0b:da:f1:
                    3c:e8:cf:30:ab:a6:59:97:b2:96:cb:8c:09:98:71:
                    f4:45:bb:5a:f1:f7:f0:ed:f4:00:8d:cb:ae:55:bf:
                    fc:d3:da:bc:ea:94:8c:d3:47:3b:e5:df:4a:d9:8c:
                    da:23:da:ec:16:bc:3e:24:b6:68:7f:ee:a5:11:5e:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6D:0E:ED:DA:E1:DC:3B:B3:39:C0:69:52:15:39:5E:D1:F8:7A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3e950ffe-179f-3b1c-9c28-f207b3c1023e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:30f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:56:9e:e1:2c:f0:be:1f:86:d8:62:d8:c0:e9:c6:11:b1:b6:
         20:61:08:b0:e9:27:db:0a:17:a3:41:f1:0c:de:62:42:44:43:
         5b:ce:22:47:58:65:15:8a:ba:68:95:a4:eb:4d:c2:71:1c:99:
         96:a9:dc:3d:44:bb:27:2a:40:bb:f3:90:d3:ca:34:0c:f7:d9:
         10:fe:2b:49:41:c1:aa:5e:39:5b:89:ea:04:93:0c:1d:ba:15:
         35:5a:ea:bc:e3:bb:ef:c9:76:2b:7d:87:fa:bc:03:a6:b7:96:
         47:23:7c:cc:86:a8:62:b6:be:27:28:c1:8b:04:ff:61:fe:01:
         2e:6e:a1:d9:9b:f3:24:77:a6:72:aa:b3:6e:00:b5:b8:b6:27:
         67:57:5d:45:6a:da:e5:f0:ff:ca:6b:d7:ed:c7:6e:6e:eb:66:
         66:d0:4c:7a:6f:bc:46:6f:40:42:9c:7a:0f:22:59:2e:a1:56:
         6d:87:30:33:8d:9e:11:d6:42:01:b7:af:1c:f1:a4:5b:7b:33:
         b2:48:50:49:99:47:55:78:30:7f:3f:e6:fd:7b:bc:4a:23:8f:
         a0:eb:ac:56:6b:76:56:96:81:b8:f0:b6:97:39:d1:08:6a:d9:
         74:d3:27:ab:36:75:cf:03:63:48:d2:a3:ff:dc:cb:39:d4:29:
         f8:ad:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:23 2026 by rpki-client