Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/59fa0b8d-7413-3e43-8304-7f9481bfdd1c.roa
File:                     59fa0b8d-7413-3e43-8304-7f9481bfdd1c.roa (raw, json)
Hash identifier:          CmqgRQ3vHNq4oF/xpaIRk60Av1rkFhxYkpCWuLHEKfo=
Subject key identifier:   71:13:8A:2D:CE:F0:31:BF:56:48:F3:46:B1:D6:05:33:AD:66:8A:5F
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62703C9C09B029C1807080
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/59fa0b8d-7413-3e43-8304-7f9481bfdd1c.roa
Signing time:             Thu 30 Jul 2026 18:45:53 +0000
ROA not before:           Thu 30 Jul 2026 18:45:53 +0000
ROA not after:            Wed 28 Oct 2026 18:45:53 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:39a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:70:3c:9c:09:b0:29:c1:80:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:53 2026 GMT
            Not After : Oct 28 18:45:53 2026 GMT
        Subject: CN=b9d5cb48-a565-4d0f-8bad-b3b15c20fc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:3c:83:9a:ae:22:90:1b:62:3b:23:a3:25:
                    84:a8:66:8f:36:d7:ce:8f:87:c0:b2:06:0d:cf:57:
                    21:fe:c9:5c:80:e1:59:a1:c2:25:4c:be:a7:d6:3f:
                    a9:98:44:ff:98:32:c5:ff:be:35:ee:52:28:3f:90:
                    12:cd:a4:fb:ac:be:38:43:cb:9d:75:1e:81:aa:01:
                    6c:e8:2e:e9:a1:43:6f:51:96:58:7c:90:86:64:96:
                    ab:0e:02:eb:60:fa:bd:21:f1:14:49:6d:0a:71:e8:
                    e6:c1:c3:8a:42:62:db:f7:45:4f:e3:00:73:77:7b:
                    a9:d0:9a:6b:b8:49:4c:2d:0a:a5:59:f8:31:c7:67:
                    75:8a:69:2e:db:04:13:00:e1:42:44:98:d2:13:38:
                    18:25:60:cd:3e:c3:7b:b8:4b:71:7b:37:63:77:54:
                    90:e6:63:91:b4:c3:d5:77:78:bc:ad:da:31:20:6d:
                    c6:45:47:de:eb:31:3c:e6:fd:11:a4:85:7e:0c:fe:
                    03:ff:71:0a:ca:47:20:9c:a2:9b:4c:de:d4:71:dc:
                    98:80:4d:d4:3f:df:d9:d4:6d:1c:bf:2c:36:e7:1e:
                    4a:66:28:24:56:e7:9f:7f:2e:10:38:46:77:56:36:
                    bd:45:d7:94:7d:b3:94:47:c4:d1:7b:a6:a1:e4:fc:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:13:8A:2D:CE:F0:31:BF:56:48:F3:46:B1:D6:05:33:AD:66:8A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/59fa0b8d-7413-3e43-8304-7f9481bfdd1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:39a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a6:76:f9:ab:06:f2:32:73:7f:bc:74:71:38:03:6f:a7:e3:
         23:45:99:95:09:2e:ef:e4:97:9f:03:7d:f6:4a:c0:63:37:22:
         a9:49:ba:75:18:ec:ed:15:f5:64:2b:3d:34:03:c9:f2:0c:18:
         0b:28:a4:dc:02:61:fa:66:85:9f:d5:bc:e4:07:e7:f9:79:e5:
         4b:3e:1a:f7:b7:df:0a:7c:19:e4:3f:d8:49:b4:c4:0e:ce:cf:
         10:35:d9:96:ea:77:63:ca:ca:8f:ed:45:db:b1:6b:f4:e9:12:
         56:ff:18:71:db:5e:60:e2:89:59:97:b3:69:d9:e8:cb:b2:dd:
         39:b1:a4:4d:60:b0:06:8e:37:cb:e5:6b:c2:e6:b5:98:e7:87:
         a7:9b:ee:8a:c9:2e:7a:be:33:0f:65:9b:f3:a6:7b:df:73:e3:
         3b:f6:e2:21:36:f7:85:3e:a3:7f:62:78:b6:56:70:ed:66:74:
         e1:17:f0:6b:95:f2:2c:21:b4:7c:67:b3:56:bc:71:3f:e9:96:
         4f:55:b4:a7:d0:93:f1:f4:72:22:85:34:03:b1:c9:c5:78:12:
         2b:2e:9d:6c:5e:55:70:d6:0e:69:89:f7:fe:5e:26:e4:13:69:
         67:41:ad:02:a5:b2:33:b9:bf:13:a0:0f:39:15:83:b2:5c:23:
         0f:de:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:30 2026 by rpki-client