Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/64fbde5f-fb23-3a84-8fb0-660ca1da0434.roa
File:                     64fbde5f-fb23-3a84-8fb0-660ca1da0434.roa (raw, json)
Hash identifier:          6Fn/xS/rmepko0inB+LPG6amD+ccpyA2atzIVFD2lJw=
Subject key identifier:   72:A5:2D:59:D8:29:03:A9:05:C9:33:1A:95:0A:0B:79:F5:B3:F3:5C
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6265C1BEDB85E85D886E80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/64fbde5f-fb23-3a84-8fb0-660ca1da0434.roa
Signing time:             Thu 30 Jul 2026 18:45:48 +0000
ROA not before:           Thu 30 Jul 2026 18:45:48 +0000
ROA not after:            Wed 28 Oct 2026 18:45:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:302::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:65:c1:be:db:85:e8:5d:88:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:48 2026 GMT
            Not After : Oct 28 18:45:48 2026 GMT
        Subject: CN=f30132bc-1cea-491a-96fd-4c6216bd99bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:31:65:7d:8f:9b:9b:55:dd:1b:57:7b:09:4d:
                    8d:1e:d8:42:b2:25:2f:3e:9d:63:84:6b:bc:8f:5a:
                    c9:9c:4a:c9:31:b5:01:b6:43:0d:82:bc:de:16:67:
                    5b:f3:ec:ba:18:f1:4a:e9:44:da:0b:1b:81:9b:f4:
                    a6:21:26:54:01:2e:a0:6c:67:3c:f3:e9:4e:e9:17:
                    c4:6b:91:77:c5:46:8b:53:f8:4e:2a:4a:1b:5f:c9:
                    56:52:83:59:f3:1f:21:51:8f:89:98:cf:e2:31:65:
                    11:4b:07:76:75:f5:53:56:e5:90:6a:60:47:30:b5:
                    db:7e:db:5a:9f:34:fa:cf:94:80:6d:1f:7e:83:f6:
                    1f:e8:88:3e:ec:f1:32:4d:0d:d7:d8:21:66:5c:dc:
                    06:54:90:2c:74:a6:35:9e:d1:c6:1f:1b:54:13:7e:
                    94:e0:cd:1b:15:2a:6d:39:e9:ab:cf:35:90:92:bc:
                    9e:9c:76:ef:fb:17:ef:63:9f:ad:f8:5f:2d:41:99:
                    88:66:03:c6:54:37:d6:00:42:8b:5c:17:99:cb:34:
                    56:5e:a6:62:55:73:18:5e:d2:00:a7:27:d9:ef:3f:
                    04:e3:8d:eb:56:36:06:b4:1a:d2:b4:2a:dd:78:4e:
                    6a:49:7b:ec:9a:b9:60:52:17:40:9e:d6:ce:d7:6b:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:2D:59:D8:29:03:A9:05:C9:33:1A:95:0A:0B:79:F5:B3:F3:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/64fbde5f-fb23-3a84-8fb0-660ca1da0434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:302::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:9e:95:ba:5a:eb:b6:72:2d:5a:bf:de:05:fe:bb:50:8a:
         04:df:12:d0:56:56:0f:93:0a:63:4d:f5:e9:41:55:89:4f:f4:
         07:6d:e8:d9:70:a8:6a:a3:7f:58:57:f6:4c:9c:aa:57:7c:05:
         90:57:92:54:78:9b:62:31:ea:90:06:28:01:14:22:a2:05:21:
         d4:f5:4b:d1:a4:2f:7f:c2:d3:c7:56:fb:d9:94:f6:b6:75:bd:
         51:0e:4e:e0:e5:3c:dc:41:c8:13:24:ce:9a:63:fb:c8:45:c1:
         95:4e:ff:36:de:65:fc:44:37:34:76:b6:89:98:57:34:26:18:
         81:82:ae:35:e9:73:36:94:df:d8:48:0a:d6:f4:7b:8f:5e:2a:
         d4:9c:49:7a:1f:56:63:31:6b:ee:8a:c9:00:da:e5:01:d1:b0:
         fc:79:e7:65:61:5d:24:6e:68:56:fb:12:b3:5c:d7:4c:ff:d4:
         76:c8:3e:74:6b:aa:df:85:b9:b5:29:24:b0:10:de:9b:91:1c:
         66:61:57:86:a7:1c:76:7f:06:36:c4:0f:69:7b:5e:94:45:c6:
         76:7e:49:d8:0c:40:d3:b6:c9:da:79:6f:b4:c7:23:ea:af:e3:
         cf:b6:09:51:51:cd:71:3b:41:9b:3d:1a:61:af:43:9a:f2:fb:
         c5:4c:ce:65
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYmXBvtuF6F2IboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0OFoXDTI2MTAyODE4NDU0OFowLzEtMCsGA1UEAxMk
ZjMwMTMyYmMtMWNlYS00OTFhLTk2ZmQtNGM2MjE2YmQ5OWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zFlfY+bm1XdG1d7CU2NHthCsiUvPp1jhGu8
j1rJnErJMbUBtkMNgrzeFmdb8+y6GPFK6UTaCxuBm/SmISZUAS6gbGc88+lO6RfE
a5F3xUaLU/hOKkobX8lWUoNZ8x8hUY+JmM/iMWURSwd2dfVTVuWQamBHMLXbftta
nzT6z5SAbR9+g/Yf6Ig+7PEyTQ3X2CFmXNwGVJAsdKY1ntHGHxtUE36U4M0bFSpt
OemrzzWQkryenHbv+xfvY5+t+F8tQZmIZgPGVDfWAEKLXBeZyzRWXqZiVXMYXtIA
pyfZ7z8E443rVjYGtBrStCrdeE5qSXvsmrlgUhdAntbO12uqkQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFHKlLVnYKQOpBckzGpUKC3n1s/NcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvNjRmYmRlNWYtZmIyMy0z
YTg0LThmYjAtNjYwY2ExZGEwNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AwIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAFW+elbpa67ZyLVq/3gX+u1CKBN8S0FZWD5MKY0316UFViU/0
B23o2XCoaqN/WFf2TJyqV3wFkFeSVHibYjHqkAYoARQiogUh1PVL0aQvf8LTx1b7
2ZT2tnW9UQ5O4OU83EHIEyTOmmP7yEXBlU7/Nt5l/EQ3NHa2iZhXNCYYgYKuNelz
NpTf2EgK1vR7j14q1JxJeh9WYzFr7orJANrlAdGw/HnnZWFdJG5oVvsSs1zXTP/U
dsg+dGuq34W5tSkksBDem5EcZmFXhqccdn8GNsQPaXtelEXGdn5J2AxA07bJ2nlv
tMcj6q/jz7YJUVHNcTtBmz0aYa9DmvL7xUzOZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:55 2026 by rpki-client