Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5f9e37d7-64d6-3cbe-a09c-7c330b32facd.roa
File:                     5f9e37d7-64d6-3cbe-a09c-7c330b32facd.roa (raw, json)
Hash identifier:          kP8E7AnHuHN2EBPBYNtGpbGGYQfVA47aV+HRx7EPa+g=
Subject key identifier:   92:CA:F1:F2:99:FE:71:4B:E5:40:07:BE:13:7E:00:19:12:B3:81:C0
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623D72542A71E02891F780
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5f9e37d7-64d6-3cbe-a09c-7c330b32facd.roa
Signing time:             Thu 30 Jul 2026 18:45:29 +0000
ROA not before:           Thu 30 Jul 2026 18:45:29 +0000
ROA not after:            Wed 28 Oct 2026 18:45:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:67::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3d:72:54:2a:71:e0:28:91:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:29 2026 GMT
            Not After : Oct 28 18:45:29 2026 GMT
        Subject: CN=b6e9ee4e-0d9c-43b8-b1dc-ad5ff98fe55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:4d:20:3b:e8:5f:95:44:b9:1e:80:d9:1d:
                    4e:21:52:d5:ef:a4:51:83:ee:68:6f:19:7e:f1:a5:
                    04:15:89:a9:ad:61:a1:58:3a:7f:e5:d6:ca:0f:99:
                    b5:74:26:55:69:ae:43:87:1b:1c:24:05:85:25:e7:
                    26:97:b2:78:81:a8:e0:1a:4d:02:20:52:6a:1c:3c:
                    cd:f7:0e:49:5d:da:13:92:d4:59:a2:60:71:98:6d:
                    7a:fa:c8:60:dd:b5:23:0d:f0:d9:6b:3c:55:ac:ff:
                    9c:55:c8:11:37:ab:e9:0a:01:e7:06:52:52:a9:91:
                    db:26:84:20:da:06:37:eb:e3:5b:e1:c5:2f:13:7c:
                    fb:3a:b8:27:e6:b0:8b:06:a1:4a:65:f1:69:6c:62:
                    5c:cd:ce:c9:13:76:49:7d:c0:52:1c:aa:66:ba:87:
                    e6:2a:ee:0c:86:05:3b:21:ed:87:69:21:f7:f7:d6:
                    6b:1f:a2:56:6b:6e:38:ed:07:3f:b0:ea:9f:26:81:
                    86:12:24:d9:20:f9:e8:7b:2b:6f:9e:00:49:d1:21:
                    aa:cf:c8:7f:63:26:48:b5:6b:38:ed:9b:d6:ce:be:
                    93:19:14:78:64:2b:9a:43:de:43:ee:13:47:30:85:
                    dc:5b:e3:b5:fa:2b:31:2d:95:f7:ea:4b:d4:83:a4:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:F1:F2:99:FE:71:4B:E5:40:07:BE:13:7E:00:19:12:B3:81:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5f9e37d7-64d6-3cbe-a09c-7c330b32facd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:67::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5c:80:87:74:a3:89:96:d1:bb:37:ca:67:92:e4:62:9e:ab:
         c3:45:55:36:f5:de:1e:2f:78:12:eb:5c:7a:ef:1d:18:ac:42:
         04:a7:0f:96:81:39:cb:92:ba:24:1f:51:e4:15:79:9c:9c:e5:
         8d:43:41:67:3f:85:73:d3:b7:f9:03:9e:c9:5d:7e:76:1d:0f:
         90:d0:b7:57:6c:f2:2f:f2:85:c1:c1:c2:fa:45:c2:4a:69:23:
         b9:82:19:12:33:af:e9:5e:f3:e0:25:1c:b7:85:55:72:03:16:
         6c:3b:e0:fd:0a:88:04:d0:85:26:1a:bd:d8:2f:3a:d6:bf:ca:
         09:f3:9c:09:b8:9c:3f:6c:a7:9d:91:ec:35:95:e8:67:8c:ea:
         fa:6e:b8:54:c3:83:59:eb:70:ec:80:3d:7a:5f:15:60:f1:54:
         df:34:d5:0c:80:29:24:ec:5f:89:67:1f:82:9a:2a:d8:41:cc:
         a6:f6:ce:68:29:d4:a6:d6:d1:b7:f0:46:d8:e0:81:49:b6:8b:
         bb:fd:e8:b1:28:ea:b1:44:fc:97:65:13:f2:bd:0e:fa:73:39:
         3f:0e:cc:44:0d:26:3b:2b:39:83:13:03:fe:b9:d1:cc:ae:75:
         fd:4c:3b:31:22:6d:33:c0:b6:72:74:d8:70:43:23:a5:b2:68:
         b4:9d:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:54 2026 by rpki-client