Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/566ff2ff-f140-3563-a9c0-74a0257445a0.roa
File:                     566ff2ff-f140-3563-a9c0-74a0257445a0.roa (raw, json)
Hash identifier:          jEmI5nz+leqolKfRn8POsdCiedQSRQPzllBm4xr9Ets=
Subject key identifier:   74:15:99:E5:1D:F8:C8:52:5C:3B:43:C5:A6:4F:06:6A:2B:B9:4F:25
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626F3FF457A0556778CC50
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/566ff2ff-f140-3563-a9c0-74a0257445a0.roa
Signing time:             Thu 30 Jul 2026 18:45:53 +0000
ROA not before:           Thu 30 Jul 2026 18:45:53 +0000
ROA not after:            Wed 28 Oct 2026 18:45:53 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:38c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:6f:3f:f4:57:a0:55:67:78:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:53 2026 GMT
            Not After : Oct 28 18:45:53 2026 GMT
        Subject: CN=d296ddf9-dc61-4bdb-8fe8-0196ad276d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5d:15:7c:8f:05:90:65:af:57:20:d9:87:2e:
                    73:c1:c8:84:4f:7f:bc:d7:ab:f6:52:e4:1b:70:f7:
                    5f:39:b2:4f:8d:07:28:6c:0f:04:cf:de:38:c6:c4:
                    1f:6f:1c:f0:eb:f4:bd:1a:d9:3f:b5:d5:47:6a:cd:
                    98:1b:63:a7:0a:b2:4a:ec:11:5b:1b:95:04:17:4f:
                    41:fb:93:a2:19:b9:0b:42:04:e0:4f:f0:82:d9:40:
                    78:24:ca:9d:09:ca:66:c5:75:aa:e5:bd:20:8c:ca:
                    82:96:de:99:22:a8:0c:84:82:1c:b2:36:b1:69:90:
                    db:f2:6d:69:93:a5:f5:00:60:27:d7:e5:83:69:7a:
                    d0:0b:96:59:2e:ff:2c:f2:3e:eb:d6:15:9f:3c:16:
                    06:c9:0a:1d:b3:e0:6c:70:e6:bf:67:81:3c:67:d0:
                    9a:85:fe:6c:4b:33:56:c6:66:2b:dd:85:b0:16:6c:
                    28:33:a8:ac:5a:67:31:53:85:a0:18:18:6e:02:08:
                    79:c6:5a:4c:7b:7d:11:74:fb:88:23:ff:8f:e8:ac:
                    73:59:02:5f:8d:76:36:17:b2:9c:7f:18:af:1e:6e:
                    6e:98:6a:f2:13:53:1b:55:32:c4:90:96:96:b5:00:
                    f5:31:53:3d:59:36:e0:e3:5b:7c:83:fd:b3:15:99:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:99:E5:1D:F8:C8:52:5C:3B:43:C5:A6:4F:06:6A:2B:B9:4F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/566ff2ff-f140-3563-a9c0-74a0257445a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:38c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:0a:f1:80:3f:84:a4:01:e9:8f:38:39:72:94:34:ca:ae:
         97:c4:8e:e9:2b:c7:ff:31:10:2e:c8:17:18:67:ad:6c:55:b6:
         71:36:12:cd:71:7e:a4:48:b2:5a:9c:51:8d:01:e8:39:b0:c9:
         21:0e:fd:18:d0:13:73:1f:76:80:a5:93:d3:5e:20:c4:dd:97:
         3c:7e:a3:95:e9:08:60:96:22:8d:f1:6c:6c:6b:3a:07:85:c4:
         95:69:dc:fb:6f:d4:b9:85:42:58:b1:4d:c4:81:ec:8a:90:33:
         53:e7:0a:21:90:33:d9:00:a5:aa:47:37:01:0b:be:3a:cb:d0:
         95:91:5d:a7:4c:01:ed:bb:a9:a6:f4:81:ad:42:75:6a:20:ae:
         66:9f:79:9c:d5:d2:6e:e9:df:2f:40:80:54:22:84:9f:69:1e:
         ab:34:5e:21:f9:48:79:19:9c:75:18:8b:bf:06:b2:af:e5:0a:
         f9:f2:26:2b:e6:0c:21:91:3a:8a:3a:14:c2:5f:b8:0b:23:00:
         df:a2:1d:21:6f:72:9f:47:58:da:32:e4:6d:3d:e4:9e:15:3f:
         ef:c2:26:5f:5e:cc:fe:8f:42:ae:81:83:35:f5:04:8a:38:98:
         33:8d:fa:1e:f6:db:e1:02:b1:e7:72:a2:a6:16:47:53:6a:94:
         82:2b:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:20:12 2026 by rpki-client