Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/42cc4922-b7fb-3d0d-97ed-6b0b0788e258.roa
File:                     42cc4922-b7fb-3d0d-97ed-6b0b0788e258.roa (raw, json)
Hash identifier:          Herj/Z5XnFLCV3SNVRDjonhVyNC0rQSt0YEM3aeaYuo=
Subject key identifier:   1A:3C:CF:3F:96:3D:81:D2:19:8E:BB:6F:31:60:F7:E3:F6:0C:BF:47
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623C703F9923AD4EF26BE0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/42cc4922-b7fb-3d0d-97ed-6b0b0788e258.roa
Signing time:             Thu 30 Jul 2026 18:45:29 +0000
ROA not before:           Thu 30 Jul 2026 18:45:29 +0000
ROA not after:            Wed 28 Oct 2026 18:45:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:54::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3c:70:3f:99:23:ad:4e:f2:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:29 2026 GMT
            Not After : Oct 28 18:45:29 2026 GMT
        Subject: CN=5cdf5fe9-5ebb-44ad-9366-d39cd372e0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:d3:44:f9:8f:c1:3b:64:c2:6d:0e:5a:52:
                    49:ac:ce:02:b0:be:1d:c9:c1:39:e2:e4:24:68:09:
                    cd:9a:4b:1e:18:77:6f:0c:8c:77:32:46:8d:6c:a2:
                    e4:c6:ce:82:06:a3:f8:61:c6:3b:c6:15:7c:e0:dd:
                    fe:a2:aa:dc:1a:fd:62:cc:4d:bd:47:d6:07:41:d2:
                    e6:3d:57:a0:e2:bb:1d:fc:d1:9d:e5:3c:3a:67:3b:
                    75:44:bc:5f:ef:24:79:53:9d:c7:5a:97:7f:dc:04:
                    ce:6e:bf:61:9f:25:17:17:1b:e8:71:e1:4b:1d:41:
                    9a:21:ad:da:97:d2:14:53:e0:75:2e:3d:ad:c5:66:
                    99:66:39:76:f9:66:3b:4a:2d:a7:41:d6:f3:93:93:
                    a6:62:d0:04:9f:26:28:55:00:30:15:e6:a6:6d:f4:
                    52:e1:66:92:ee:52:eb:4a:85:e4:f9:2b:47:ce:c3:
                    53:89:ec:f1:af:f5:a3:d6:b4:35:ff:9c:d3:67:d8:
                    f1:c9:be:a8:87:68:57:a3:ea:ff:14:01:99:a7:65:
                    cb:aa:3e:bc:d0:e8:23:2a:ce:41:3f:e7:64:e7:2a:
                    f9:29:2c:b3:ce:01:e7:08:8a:66:11:08:8c:20:85:
                    73:ec:fa:1b:3e:b3:34:b8:cd:eb:c7:f9:41:12:db:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3C:CF:3F:96:3D:81:D2:19:8E:BB:6F:31:60:F7:E3:F6:0C:BF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/42cc4922-b7fb-3d0d-97ed-6b0b0788e258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:54::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:98:ec:8e:78:46:94:23:c6:db:da:83:24:c6:a2:1b:86:c5:
         44:b3:8f:e5:1f:f4:cb:53:31:c0:6b:63:aa:0c:59:d5:61:f9:
         12:63:f5:d8:56:ed:6d:86:50:0e:ea:57:7e:bf:f6:dd:4f:2a:
         d5:1e:c9:38:ac:8a:9e:d4:6b:f1:d0:81:a8:08:56:37:eb:6a:
         19:f8:bd:e3:17:60:82:e1:da:a3:71:27:24:e5:7c:49:99:30:
         2b:a0:fd:14:b8:9c:ae:81:53:77:65:e7:17:0a:97:89:e7:48:
         ea:9f:57:ad:dc:ab:b9:f6:0d:f0:8a:9d:ab:7d:e9:87:17:80:
         95:fc:18:6b:92:ff:21:02:9e:47:c7:9a:68:d2:0a:82:16:f1:
         f9:4c:7d:00:30:84:fe:f4:3f:d7:72:95:e5:d5:2d:3f:4d:e3:
         1c:3f:db:dc:4c:8a:e6:2f:08:50:17:8c:12:d2:35:66:ad:8b:
         d3:e9:99:e8:89:71:39:bd:7f:d0:d9:8d:fb:74:cd:8d:ef:51:
         50:eb:c9:09:ce:43:93:c2:13:d2:f8:84:6f:3e:e8:7d:42:1f:
         27:b3:44:a5:a7:ed:79:75:7b:fc:7b:15:68:68:48:05:f1:0e:
         d3:35:3a:ae:e7:cd:ca:97:28:c1:71:38:0c:41:86:3e:85:64:
         6a:80:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:10 2026 by rpki-client