Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5af5441a-9707-3a20-96a4-53253c658cf3.roa
File:                     5af5441a-9707-3a20-96a4-53253c658cf3.roa (raw, json)
Hash identifier:          5iuIhfcQzqawGt6T0mY0FLsbxVG6JLMvK2kd6EROIyU=
Subject key identifier:   A9:4A:14:D2:20:DC:D2:49:55:16:6C:E4:2C:59:67:2A:99:0A:91:AD
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624D99FAAB9AE099653120
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5af5441a-9707-3a20-96a4-53253c658cf3.roa
Signing time:             Thu 30 Jul 2026 18:45:37 +0000
ROA not before:           Thu 30 Jul 2026 18:45:37 +0000
ROA not after:            Wed 28 Oct 2026 18:45:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:186::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4d:99:fa:ab:9a:e0:99:65:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:37 2026 GMT
            Not After : Oct 28 18:45:37 2026 GMT
        Subject: CN=f641ccb3-1513-4e10-bf20-b1e09783775f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:b7:7b:10:fa:9a:5a:bc:63:cf:fa:f0:7c:
                    fa:49:c3:d0:07:e7:6d:2e:a5:7d:84:2c:cb:8e:a8:
                    7c:6b:3e:6c:75:db:09:61:a0:17:23:b7:11:46:31:
                    7f:8c:d4:e7:be:16:41:71:6a:e6:5b:ae:40:d7:67:
                    83:b5:7f:77:8b:7b:68:98:d9:d2:29:67:8c:5d:76:
                    c7:06:96:2a:87:ae:aa:32:fb:7a:42:31:21:83:cd:
                    14:ff:cb:c0:fd:3e:e9:aa:b5:06:75:05:6b:60:d8:
                    05:32:cf:31:1f:df:00:5d:4a:1a:10:9c:41:bc:d6:
                    e9:c8:89:13:70:83:4b:dc:60:10:0c:61:17:98:5a:
                    8a:fa:1f:26:e2:a4:9d:5d:ee:9b:25:dc:d5:72:34:
                    f9:6b:d1:fb:22:91:69:1e:2a:ba:e2:70:1b:08:1b:
                    e2:be:45:e8:2f:4a:5b:ee:f4:a8:fb:c6:2d:7d:4a:
                    8a:d1:ef:84:a6:f7:32:81:a6:aa:ed:f8:4b:5e:a4:
                    6f:9e:44:49:50:bc:a1:b2:3d:41:2a:5a:fe:3a:18:
                    a6:bf:f7:1c:f2:aa:d7:7b:68:9e:f9:75:bf:5b:ac:
                    75:62:58:82:55:4a:fc:87:4e:c5:66:ef:3d:1d:d2:
                    e7:e1:88:ca:22:8c:f3:80:ed:e6:fa:12:7f:1c:ae:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:14:D2:20:DC:D2:49:55:16:6C:E4:2C:59:67:2A:99:0A:91:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5af5441a-9707-3a20-96a4-53253c658cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:186::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:50:68:75:a8:14:8c:e5:32:b8:ce:cc:85:2b:ac:c9:64:81:
         9a:82:5a:ee:9e:f0:00:23:76:02:10:5f:d7:0f:dc:c4:a8:fe:
         cc:4c:5a:14:53:12:e1:0d:5a:35:f8:64:82:33:e4:56:98:30:
         9d:18:39:ed:a3:aa:80:e3:7e:a7:bc:6c:b6:d3:ec:1b:2b:ba:
         00:bb:bf:88:30:55:27:41:9e:98:d5:71:a2:15:3a:f9:57:de:
         f9:cf:ed:bf:19:91:13:a0:30:12:30:eb:18:38:74:5b:f7:c9:
         8c:fe:84:f9:5b:aa:b6:15:b9:8a:f0:4a:87:a3:62:2e:4d:29:
         8f:09:53:c5:21:64:81:c5:29:78:c6:86:7a:1d:67:eb:80:2d:
         2d:f7:80:cf:90:8b:09:76:30:7b:0c:1a:72:08:ea:77:ed:46:
         cb:12:b5:33:b8:ba:4f:35:c0:19:de:ac:42:03:8e:e9:43:54:
         66:9d:65:bb:0a:17:32:bf:aa:9f:61:dc:8a:88:78:8c:85:e7:
         69:8a:36:be:db:88:47:d6:da:71:af:01:48:21:80:0b:78:8f:
         55:29:f0:52:4c:d2:70:70:ab:c1:2f:23:b4:b7:2a:2d:52:12:
         eb:ac:07:04:23:58:83:0e:c8:41:10:d1:b7:b7:37:82:2e:b2:
         da:6c:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:15 2026 by rpki-client