Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/4a9fbb4c-a9de-39c5-a88c-d1b192a37bb4.roa
File:                     4a9fbb4c-a9de-39c5-a88c-d1b192a37bb4.roa (raw, json)
Hash identifier:          Mzvi39bZTrLr5+EUqKT+RNOwyVloY5XmrctUuMGu/lE=
Subject key identifier:   3C:32:EE:33:55:62:08:2E:E0:97:C1:EA:BC:1D:A6:AA:14:B9:B8:64
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624ECD5BDFB6320CEA4840
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/4a9fbb4c-a9de-39c5-a88c-d1b192a37bb4.roa
Signing time:             Thu 30 Jul 2026 18:45:38 +0000
ROA not before:           Thu 30 Jul 2026 18:45:38 +0000
ROA not after:            Wed 28 Oct 2026 18:45:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:19b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4e:cd:5b:df:b6:32:0c:ea:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:38 2026 GMT
            Not After : Oct 28 18:45:38 2026 GMT
        Subject: CN=74a3b011-15cd-4216-82e3-6abb76b70dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c2:75:1f:85:26:fe:65:0a:9a:6a:ab:a6:8a:
                    3a:c1:ee:7b:08:83:8e:21:80:b1:da:59:e1:88:12:
                    8a:8b:77:63:44:d4:16:c7:32:3d:0e:87:4a:3c:c3:
                    e2:83:0f:08:e6:21:2d:fa:a6:3e:fa:ba:ea:75:ef:
                    8d:8b:ab:6b:c4:d6:86:2b:d0:a7:43:a8:ad:75:40:
                    53:3e:85:e2:be:33:a1:98:e2:64:15:92:6e:3b:25:
                    b6:ca:86:30:31:dd:b7:7e:11:de:3a:88:4f:67:d2:
                    1f:ca:3e:1f:c4:e6:0e:f0:f8:8d:d6:fe:9b:45:06:
                    c1:f5:8d:95:6f:33:7b:a7:db:eb:18:89:21:18:98:
                    7a:fd:71:f8:56:0f:27:56:78:1e:69:e4:ac:4b:30:
                    94:76:06:66:c0:ff:cc:14:20:a5:5f:80:e7:fc:f6:
                    b9:a4:b9:14:21:c8:fe:17:03:4c:12:14:ca:56:ce:
                    7f:9e:45:14:aa:44:f0:21:0b:f4:10:d8:b5:93:6e:
                    93:2c:f5:04:3e:0e:7a:61:6a:c8:25:f9:ae:57:ff:
                    f9:36:8b:d5:69:9f:05:9c:57:12:cd:f2:dc:92:cd:
                    61:06:92:79:c6:0a:3e:9b:3d:89:34:ca:aa:e2:d4:
                    b2:f2:11:5b:78:12:5f:0b:85:11:bc:b6:f5:78:f6:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:32:EE:33:55:62:08:2E:E0:97:C1:EA:BC:1D:A6:AA:14:B9:B8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/4a9fbb4c-a9de-39c5-a88c-d1b192a37bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:19b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:15:04:6b:b9:ef:c5:38:8b:96:db:38:09:07:a0:4d:4b:83:
         37:e4:8d:1d:56:10:90:27:39:ac:94:fa:18:c4:f8:24:62:3b:
         d3:7e:ab:bc:ee:a2:5d:e3:02:c2:52:6b:94:1d:d0:c7:a3:8f:
         62:42:01:b0:25:40:79:22:55:2b:be:c5:06:fb:85:0e:f9:3d:
         ed:f7:14:f1:1e:16:88:e5:8d:15:43:08:16:6e:ea:87:a3:b5:
         d2:98:3d:d3:f2:99:ff:02:9c:8a:9b:f9:fe:0a:db:a4:67:fa:
         a4:44:17:f0:bb:e0:e2:ff:15:6e:e9:0e:54:60:a0:52:b0:90:
         77:a0:12:bc:37:64:b9:79:75:01:fd:83:fc:b3:f7:fc:3b:b5:
         f3:4c:32:0c:53:a1:4f:37:c8:85:97:7a:9c:76:56:f7:a8:48:
         f0:05:8a:de:80:4e:5a:c8:28:d0:47:8c:65:12:45:30:a6:a8:
         af:66:d4:d8:bf:4d:fc:ec:fb:c9:65:96:1e:bb:7c:1b:60:ba:
         4e:cb:4c:ae:29:53:86:d5:dc:1c:dd:4e:c9:76:86:13:ab:ce:
         7c:c1:48:44:e8:bf:ce:04:07:26:05:f2:cb:46:35:ce:8a:26:
         a0:ce:1d:10:96:ce:0b:14:cf:04:01:7e:3d:f6:49:5b:ad:7e:
         5b:9f:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:52 2026 by rpki-client