Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5fbbfe51-d590-36a8-a356-95cbb1125832.roa
File:                     5fbbfe51-d590-36a8-a356-95cbb1125832.roa (raw, json)
Hash identifier:          xSkReYeoeafOUoUn9VdrHfWbrxXi+LC/scHoNuxodJQ=
Subject key identifier:   95:52:16:5B:9B:72:8F:E5:5D:39:BB:48:00:8E:26:2B:02:94:9C:93
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6255857552C7E5E8244F00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5fbbfe51-d590-36a8-a356-95cbb1125832.roa
Signing time:             Thu 30 Jul 2026 18:45:41 +0000
ROA not before:           Thu 30 Jul 2026 18:45:41 +0000
ROA not after:            Wed 28 Oct 2026 18:45:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:20a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:55:85:75:52:c7:e5:e8:24:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:41 2026 GMT
            Not After : Oct 28 18:45:41 2026 GMT
        Subject: CN=f6d45764-35ca-416f-9843-73383832125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:f9:cc:23:72:fc:62:fd:1d:4e:e9:d8:61:
                    1b:64:a5:03:96:0b:3f:49:ea:42:d8:54:83:6d:d1:
                    63:da:80:97:90:30:16:43:fc:48:eb:21:ee:2c:89:
                    95:1f:09:89:7d:51:0b:35:e5:32:a2:6c:e2:79:42:
                    04:42:e3:0e:0f:99:6d:d0:f2:7e:90:6c:1d:34:80:
                    0d:da:99:3c:5a:2a:f1:cd:9e:09:5d:51:a7:6b:a9:
                    57:9d:c1:fa:91:4f:a3:7f:3e:1c:23:dd:a7:09:55:
                    ac:2b:ac:97:65:da:76:2f:22:27:05:07:21:e1:c4:
                    92:31:da:1c:45:3c:13:1e:70:57:e0:31:be:b9:f2:
                    cc:8a:13:85:c3:15:3f:5d:68:8a:d0:7b:12:e2:53:
                    74:98:eb:b0:22:0d:ea:e7:d5:16:59:45:c1:d3:1e:
                    d4:48:c3:2d:07:26:8b:88:b1:3d:c5:29:cd:67:cd:
                    30:f1:df:74:71:51:14:da:c3:64:3f:ef:f5:d2:fa:
                    d6:7c:a0:73:56:77:b9:68:41:12:14:81:a0:49:1b:
                    6f:7f:8a:36:ac:ff:75:bc:e3:72:29:23:5c:26:21:
                    d7:ec:84:d0:38:17:2f:93:73:89:9e:50:32:00:59:
                    47:72:6f:52:03:db:1e:c3:05:9e:0a:ed:3f:1b:6f:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:52:16:5B:9B:72:8F:E5:5D:39:BB:48:00:8E:26:2B:02:94:9C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/5fbbfe51-d590-36a8-a356-95cbb1125832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:20a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5f:dd:1b:20:3d:6f:07:7f:8d:d9:60:f5:2d:53:fb:ed:ea:
         7f:ae:d4:16:0b:1d:83:00:8e:c1:0b:20:4b:66:1c:c3:6f:97:
         68:f4:7a:f6:84:a4:c5:63:7f:b6:a1:8a:a5:b0:79:f0:d6:ba:
         41:1a:c5:03:c0:ad:70:ee:55:a8:0a:87:ce:cb:37:99:bc:c3:
         0c:1c:5d:3e:93:f5:ed:67:ae:0c:5d:92:52:92:f1:61:c3:3a:
         53:e1:c8:0f:0a:e2:97:88:6c:62:ba:d8:40:57:79:06:f2:c1:
         b5:f5:97:70:94:fe:03:96:13:66:d7:08:04:12:64:2d:d7:40:
         f3:95:b9:08:95:be:f3:da:c5:92:d6:f5:53:ae:b0:32:93:7a:
         6c:16:5a:3b:a5:b7:4f:72:df:8e:d3:93:cc:a6:3d:30:46:c7:
         1e:f5:99:ad:b9:63:54:12:d3:41:c2:34:99:4d:88:2f:2c:90:
         db:d6:3a:10:47:97:f6:d3:32:41:c3:54:4e:1f:9e:f0:7c:a7:
         91:63:d8:a8:eb:9f:08:e7:74:2a:b5:c0:db:86:48:ea:4a:00:
         9d:df:f0:44:0e:7e:f5:dc:18:10:60:b4:fc:d8:dd:91:3a:b8:
         72:b9:a8:89:ba:a7:be:c1:b0:96:5d:b3:17:3d:e4:4c:bb:a4:
         de:09:77:13
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYlWFdVLH5egkTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0MVoXDTI2MTAyODE4NDU0MVowLzEtMCsGA1UEAxMk
ZjZkNDU3NjQtMzVjYS00MTZmLTk4NDMtNzMzODM4MzIxMjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSH5zCNy/GL9HU7p2GEbZKUDlgs/SepC2FSD
bdFj2oCXkDAWQ/xI6yHuLImVHwmJfVELNeUyomzieUIEQuMOD5lt0PJ+kGwdNIAN
2pk8WirxzZ4JXVGna6lXncH6kU+jfz4cI92nCVWsK6yXZdp2LyInBQch4cSSMdoc
RTwTHnBX4DG+ufLMihOFwxU/XWiK0HsS4lN0mOuwIg3q59UWWUXB0x7USMMtByaL
iLE9xSnNZ80w8d90cVEU2sNkP+/10vrWfKBzVne5aEESFIGgSRtvf4o2rP91vONy
KSNcJiHX7ITQOBcvk3OJnlAyAFlHcm9SA9sewwWeCu0/G280kwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFJVSFlubco/lXTm7SACOJisClJyTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvNWZiYmZlNTEtZDU5MC0z
NmE4LWEzNTYtOTVjYmIxMTI1ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AgowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAPV/dGyA9bwd/jdlg9S1T++3qf67UFgsdgwCOwQsgS2Ycw2+X
aPR69oSkxWN/tqGKpbB58Na6QRrFA8CtcO5VqAqHzss3mbzDDBxdPpP17WeuDF2S
UpLxYcM6U+HIDwril4hsYrrYQFd5BvLBtfWXcJT+A5YTZtcIBBJkLddA85W5CJW+
89rFktb1U66wMpN6bBZaO6W3T3LfjtOTzKY9MEbHHvWZrbljVBLTQcI0mU2ILyyQ
29Y6EEeX9tMyQcNUTh+e8HynkWPYqOufCOd0KrXA24ZI6koAnd/wRA5+9dwYEGC0
/NjdkTq4crmoibqnvsGwll2zFz3kTLuk3gl3Ew==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:02 2026 by rpki-client