Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/508095af-9947-340e-a367-9aaa3e77d70c.roa
File:                     508095af-9947-340e-a367-9aaa3e77d70c.roa (raw, json)
Hash identifier:          f9kY4J6NXOXrmfqAEIplwN6X8wv8gU/gksZXmajgM0M=
Subject key identifier:   41:D3:9E:FB:CB:02:D3:1D:73:1D:9A:BA:55:89:74:22:A2:71:FD:8C
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62657CE6BC2ACC81337080
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/508095af-9947-340e-a367-9aaa3e77d70c.roa
Signing time:             Thu 30 Jul 2026 18:45:48 +0000
ROA not before:           Thu 30 Jul 2026 18:45:48 +0000
ROA not after:            Wed 28 Oct 2026 18:45:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2fe::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:65:7c:e6:bc:2a:cc:81:33:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:48 2026 GMT
            Not After : Oct 28 18:45:48 2026 GMT
        Subject: CN=997328de-446f-4b1b-9fa0-7799e4fa1301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:ee:d8:dc:64:30:c3:8e:d7:50:d6:83:d3:
                    e8:da:0b:89:9e:7d:b7:61:a8:d0:20:83:34:bf:b8:
                    cb:77:d9:c7:d8:19:24:62:27:0a:a1:58:16:5e:7a:
                    d9:44:51:a0:3a:92:28:5c:02:24:54:5f:43:55:c1:
                    67:a4:75:50:60:e8:45:40:4f:ab:1f:77:86:a2:33:
                    64:1c:29:d2:47:8a:c4:83:3e:0f:49:15:d9:e3:75:
                    bf:fb:78:50:0c:9d:34:97:c8:21:ac:aa:ea:8a:8a:
                    10:4d:1c:f0:fc:e7:f5:5b:cb:87:c2:85:02:0e:6d:
                    97:98:22:f5:35:ea:78:01:db:7f:79:7e:f8:84:eb:
                    ca:db:f1:4d:df:e9:b1:9b:9e:20:fe:a9:6a:d2:c0:
                    48:68:92:91:0a:e2:ce:2c:77:15:7c:72:a1:c8:d4:
                    f4:66:70:a3:54:cc:2a:50:09:19:da:bb:f0:a3:87:
                    dd:c5:15:89:f3:9b:b7:38:c9:35:e9:83:bd:fb:a0:
                    2f:24:e2:aa:91:7b:94:83:93:13:d9:82:3c:b5:81:
                    b9:b3:89:7f:3b:8e:f2:1e:9a:24:ee:38:5a:66:89:
                    da:9b:b6:b7:51:04:c8:2d:36:89:66:be:3e:1d:b0:
                    d5:1a:a1:71:25:84:e1:83:68:e9:c6:f6:b7:63:6d:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D3:9E:FB:CB:02:D3:1D:73:1D:9A:BA:55:89:74:22:A2:71:FD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/508095af-9947-340e-a367-9aaa3e77d70c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2fe::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:2b:11:c4:34:11:6e:ae:f3:80:55:95:a6:de:9a:c3:9b:
         79:dd:9d:bb:82:d4:c8:e4:bb:5a:15:cf:e7:24:6c:85:1f:ff:
         ee:8d:5b:fe:e2:c2:4f:79:d6:fa:cd:b3:fd:b0:e5:54:fb:3a:
         38:a3:4e:a6:e1:55:9f:d4:6f:8f:fd:df:32:d1:33:71:37:7c:
         23:2a:bf:d4:88:2d:70:fe:2e:30:bb:4b:9a:9a:ef:89:37:0a:
         a7:10:c1:74:6c:6a:9b:f1:a2:b1:2c:3c:0e:12:80:63:6d:a5:
         10:15:bb:ad:14:0b:cc:f1:5d:87:83:2c:12:25:f1:08:84:c9:
         f5:d5:b6:1c:5e:57:97:b6:c3:c9:f2:18:ca:66:50:1d:02:b1:
         e6:5f:45:e9:76:20:86:f8:dd:3a:b7:2e:2f:c7:f7:22:7c:bd:
         81:43:5c:84:c0:94:ee:4f:3d:d5:df:d7:60:37:43:d5:4c:69:
         9e:36:dc:4c:5f:15:e6:85:7e:48:9b:46:5c:f8:f9:9e:b9:ec:
         3a:cb:21:cf:f9:c3:8b:c5:7a:3b:14:7f:23:c4:f7:8e:c3:c6:
         c4:53:54:cc:d2:55:1f:42:b8:76:4a:59:57:aa:46:b2:82:1e:
         8b:73:1b:5d:64:43:33:84:88:36:8e:d4:f6:a4:9e:9a:0a:f5:
         93:05:2a:a1
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYmV85rwqzIEzcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0OFoXDTI2MTAyODE4NDU0OFowLzEtMCsGA1UEAxMk
OTk3MzI4ZGUtNDQ2Zi00YjFiLTlmYTAtNzc5OWU0ZmExMzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dbu2NxkMMOO11DWg9Po2guJnn23YajQIIM0
v7jLd9nH2BkkYicKoVgWXnrZRFGgOpIoXAIkVF9DVcFnpHVQYOhFQE+rH3eGojNk
HCnSR4rEgz4PSRXZ43W/+3hQDJ00l8ghrKrqiooQTRzw/Of1W8uHwoUCDm2XmCL1
Nep4Adt/eX74hOvK2/FN3+mxm54g/qlq0sBIaJKRCuLOLHcVfHKhyNT0ZnCjVMwq
UAkZ2rvwo4fdxRWJ85u3OMk16YO9+6AvJOKqkXuUg5MT2YI8tYG5s4l/O47yHpok
7jhaZonam7a3UQTILTaJZr4+HbDVGqFxJYThg2jpxva3Y23WIQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFEHTnvvLAtMdcx2aulWJdCKicf2MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvNTA4MDk1YWYtOTk0Ny0z
NDBlLWEzNjctOWFhYTNlNzdkNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
Av4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAYS4rEcQ0EW6u84BVlabemsObed2du4LUyOS7WhXP5yRshR//
7o1b/uLCT3nW+s2z/bDlVPs6OKNOpuFVn9Rvj/3fMtEzcTd8Iyq/1IgtcP4uMLtL
mprviTcKpxDBdGxqm/GisSw8DhKAY22lEBW7rRQLzPFdh4MsEiXxCITJ9dW2HF5X
l7bDyfIYymZQHQKx5l9F6XYghvjdOrcuL8f3Iny9gUNchMCU7k891d/XYDdD1Uxp
njbcTF8V5oV+SJtGXPj5nrnsOsshz/nDi8V6OxR/I8T3jsPGxFNUzNJVH0K4dkpZ
V6pGsoIei3MbXWRDM4SINo7U9qSemgr1kwUqoQ==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:30 2026 by rpki-client