Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/66ab00c6-38a7-3d86-8d18-7876f6246313.roa
File:                     66ab00c6-38a7-3d86-8d18-7876f6246313.roa (raw, json)
Hash identifier:          u0hV06Xdhmh7bRVHJi+k4PWW2qIjEwdmymdxK+BEUA4=
Subject key identifier:   FB:FB:6E:05:8A:66:9F:51:B8:08:0C:83:1E:E2:A7:8B:6D:89:98:53
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625D02E196AA9F173F2D80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/66ab00c6-38a7-3d86-8d18-7876f6246313.roa
Signing time:             Thu 30 Jul 2026 18:45:44 +0000
ROA not before:           Thu 30 Jul 2026 18:45:44 +0000
ROA not after:            Wed 28 Oct 2026 18:45:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:281::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:5d:02:e1:96:aa:9f:17:3f:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:44 2026 GMT
            Not After : Oct 28 18:45:44 2026 GMT
        Subject: CN=95b82dfa-55fd-406f-beb5-96b3fb6412cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:84:44:ab:8e:e8:df:18:5e:a1:0c:ff:d0:
                    83:d9:3e:5c:79:e0:76:63:b3:b9:a6:49:a4:bb:18:
                    e0:56:b5:11:cc:55:e0:72:72:4e:70:d3:20:53:d2:
                    be:f7:b9:c7:56:0c:ac:23:38:32:71:5f:ae:aa:9a:
                    82:cb:88:7c:1f:55:19:58:b5:f8:ca:c9:e2:fa:4b:
                    0f:99:b8:98:12:b5:1e:66:31:4d:4c:03:b3:bb:ed:
                    12:41:6a:29:f4:71:87:fc:fe:7e:73:49:95:b1:63:
                    5e:37:86:96:7b:5e:ba:f8:96:26:f5:b2:fe:73:e3:
                    e5:38:b8:db:5c:96:f1:61:e4:b8:d1:04:20:61:fb:
                    b5:88:63:66:2c:2b:72:74:cd:a0:4c:30:ab:23:c9:
                    83:0d:ad:e6:2a:f4:f6:f8:f7:9c:bb:01:48:3b:88:
                    36:77:b9:c6:7e:0f:ae:79:ec:0f:7c:39:1d:4a:76:
                    b2:35:24:d6:25:d0:de:7a:63:09:eb:f6:69:8e:73:
                    3b:82:b8:e9:b8:ee:01:00:71:9d:d3:b5:6c:85:e4:
                    90:e9:7b:db:bc:df:cc:64:c3:7f:0b:0d:c2:fb:a1:
                    e3:42:53:9f:c3:35:79:b6:d2:e9:eb:04:0c:e1:10:
                    ae:0a:09:14:85:3b:a5:24:57:85:95:f6:3e:a6:b9:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:6E:05:8A:66:9F:51:B8:08:0C:83:1E:E2:A7:8B:6D:89:98:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/66ab00c6-38a7-3d86-8d18-7876f6246313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:281::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:f1:62:cd:e7:7e:ba:00:6a:ef:59:99:1d:42:b5:dc:39:
         17:46:35:7c:56:e4:8c:c5:05:ec:a9:e8:21:cf:b1:a0:b6:dc:
         62:1b:b1:2d:f8:d3:d8:12:0a:f8:df:b4:20:a9:01:46:35:81:
         3e:ff:73:1a:72:5e:64:0b:de:45:81:dc:6b:85:23:48:6d:50:
         ac:21:98:db:79:1a:00:d1:37:75:b2:08:6b:cc:5d:e2:51:a2:
         32:a0:e9:ba:34:13:8c:af:dc:63:b4:1e:e1:2d:67:8c:17:bd:
         78:cd:15:3f:30:2e:15:a9:d2:ff:50:78:ed:e3:8b:16:a8:59:
         14:b9:c3:b1:91:70:7d:4b:d4:03:6d:d1:66:c2:c8:5a:be:64:
         2d:e0:1a:6b:80:ea:d8:75:5b:d9:44:8a:04:2d:db:05:d3:1c:
         d0:13:10:17:f9:51:cf:8f:bf:77:ca:bc:c5:ac:7b:02:b1:85:
         97:65:83:6b:89:09:05:1a:cd:14:59:26:20:9d:12:12:0a:eb:
         ce:c2:a6:73:66:eb:aa:61:53:9b:cf:9d:dc:7a:43:03:04:b7:
         24:3e:af:06:f1:01:bd:6c:7e:37:19:c0:11:16:be:73:e4:1a:
         12:d5:e3:08:ba:04:b4:ea:52:e4:4b:c7:ec:d6:dc:8c:5b:0f:
         3c:6d:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:23 2026 by rpki-client