Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/54968f5a-f49f-3007-a9da-7d034b1aaf74.roa
File:                     54968f5a-f49f-3007-a9da-7d034b1aaf74.roa (raw, json)
Hash identifier:          kjd7GRSq8okwIqNEHCGh7+KJgTUsX84wNQsd+R4qKhk=
Subject key identifier:   13:4E:C0:B4:D6:64:78:C5:05:0E:C4:BC:D4:C1:4B:60:51:2A:0B:ED
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625ED3734428E96FF3E880
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/54968f5a-f49f-3007-a9da-7d034b1aaf74.roa
Signing time:             Thu 30 Jul 2026 18:45:45 +0000
ROA not before:           Thu 30 Jul 2026 18:45:45 +0000
ROA not after:            Wed 28 Oct 2026 18:45:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:29d::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:5e:d3:73:44:28:e9:6f:f3:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:45 2026 GMT
            Not After : Oct 28 18:45:45 2026 GMT
        Subject: CN=f702a0be-766e-443a-af18-54ee73424362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:fd:b0:a2:26:26:df:dd:2e:5d:a7:27:6f:
                    b8:fd:54:a1:17:d8:d5:60:c7:11:09:14:72:1e:28:
                    17:c1:2e:1d:4a:9a:72:cf:65:c4:1d:c3:58:34:56:
                    ee:9b:b9:21:d5:54:a5:75:47:cb:c2:07:03:5b:fd:
                    32:0b:30:e3:fd:e5:89:3a:f7:48:22:cb:e6:c5:76:
                    9a:8e:eb:03:a9:54:20:bc:9f:20:9a:7a:97:ff:ce:
                    7b:e5:d4:5c:69:c2:fc:65:04:09:a7:0b:65:56:12:
                    c6:27:3a:a2:a2:c8:1b:f1:b8:ca:af:be:0d:d3:cd:
                    ec:27:77:1e:82:26:77:09:d0:79:3f:19:0d:1f:b1:
                    3c:4d:eb:49:42:ea:6a:1c:8f:98:4f:85:9d:4b:f4:
                    46:de:1d:33:9c:71:47:01:ef:6e:51:12:f6:fd:1a:
                    59:8b:8e:db:1b:e2:ac:c5:5a:15:5c:8f:34:d3:41:
                    8f:9f:ec:96:ea:70:f6:a0:2f:96:b3:b6:06:72:33:
                    7e:51:cd:14:12:88:8f:33:33:7e:6c:17:60:38:05:
                    41:0d:0a:f5:5d:c3:a1:80:8b:84:4f:16:96:02:71:
                    42:59:9d:36:b2:bf:87:d0:9f:f5:a4:ff:06:f6:07:
                    3d:1c:d9:d3:ec:b1:1a:5c:bd:ce:c1:ef:3d:80:c1:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:C0:B4:D6:64:78:C5:05:0E:C4:BC:D4:C1:4B:60:51:2A:0B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/54968f5a-f49f-3007-a9da-7d034b1aaf74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:29d::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:c9:fb:88:fb:2b:05:4f:87:7f:45:87:8c:05:f9:51:d9:
         f1:06:f9:10:f0:35:5d:76:05:e7:42:78:77:5f:4d:01:4c:93:
         90:95:6c:62:10:4a:32:00:28:0a:4c:ee:c5:ce:4b:47:8f:4f:
         11:6b:9b:eb:30:e3:25:d1:7a:01:08:fe:5d:82:ad:14:c8:c9:
         83:58:5c:d0:80:6a:ff:87:17:46:48:b7:a9:20:66:44:5f:26:
         3e:90:31:aa:9f:08:02:2e:63:65:0f:e4:b7:bf:d5:58:33:54:
         3a:fd:90:b3:1d:90:82:32:a2:0c:da:5b:3f:43:4c:7f:53:cf:
         2d:22:35:0e:2b:f2:2b:2a:57:60:eb:09:08:c0:3c:a6:85:52:
         6e:c8:5a:9a:6f:42:a9:11:37:24:cd:e4:29:2f:f9:67:c6:ec:
         eb:47:54:ff:5e:17:4e:4a:d7:8d:98:c2:ae:08:72:db:4a:88:
         10:7c:f6:ab:1c:d4:86:b1:9b:74:a9:d9:b4:b7:d9:a3:46:2b:
         68:6d:43:b4:cc:b4:65:72:fc:8b:2d:aa:8a:4e:8a:20:57:49:
         de:31:5f:9f:91:ea:16:23:b5:94:8a:dd:db:bb:4d:03:04:3e:
         1c:9b:b7:2e:94:4b:69:b6:0c:a7:f6:15:ed:41:3a:d8:91:0f:
         fd:6d:f2:af
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYl7Tc0Qo6W/z6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0NVoXDTI2MTAyODE4NDU0NVowLzEtMCsGA1UEAxMk
ZjcwMmEwYmUtNzY2ZS00NDNhLWFmMTgtNTRlZTczNDI0MzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdn9sKImJt/dLl2nJ2+4/VShF9jVYMcRCRRy
HigXwS4dSppyz2XEHcNYNFbum7kh1VSldUfLwgcDW/0yCzDj/eWJOvdIIsvmxXaa
jusDqVQgvJ8gmnqX/8575dRcacL8ZQQJpwtlVhLGJzqiosgb8bjKr74N083sJ3ce
giZ3CdB5PxkNH7E8TetJQupqHI+YT4WdS/RG3h0znHFHAe9uURL2/RpZi47bG+Ks
xVoVXI8000GPn+yW6nD2oC+Ws7YGcjN+Uc0UEoiPMzN+bBdgOAVBDQr1XcOhgIuE
TxaWAnFCWZ02sr+H0J/1pP8G9gc9HNnT7LEaXL3Owe89gMHZuwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFBNOwLTWZHjFBQ7EvNTBS2BRKgvtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvNTQ5NjhmNWEtZjQ5Zi0z
MDA3LWE5ZGEtN2QwMzRiMWFhZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
Ap0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAWUvJ+4j7KwVPh39Fh4wF+VHZ8Qb5EPA1XXYF50J4d19NAUyT
kJVsYhBKMgAoCkzuxc5LR49PEWub6zDjJdF6AQj+XYKtFMjJg1hc0IBq/4cXRki3
qSBmRF8mPpAxqp8IAi5jZQ/kt7/VWDNUOv2Qsx2QgjKiDNpbP0NMf1PPLSI1Divy
KypXYOsJCMA8poVSbshamm9CqRE3JM3kKS/5Z8bs60dU/14XTkrXjZjCrghy20qI
EHz2qxzUhrGbdKnZtLfZo0YraG1DtMy0ZXL8iy2qik6KIFdJ3jFfn5HqFiO1lIrd
27tNAwQ+HJu3LpRLabYMp/YV7UE62JEP/W3yrw==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:20:13 2026 by rpki-client