Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/68da062a-41de-3a3e-97fa-53b29ae4990d.roa
File:                     68da062a-41de-3a3e-97fa-53b29ae4990d.roa (raw, json)
Hash identifier:          fcR05F48eT2nOKmRroPU9dIdGsHdcGZxIRELiTcnt9o=
Subject key identifier:   96:F3:61:EE:10:7F:68:57:CB:70:B7:E6:F2:EA:06:FB:76:6F:A4:32
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6250B994E0D79380660BC0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/68da062a-41de-3a3e-97fa-53b29ae4990d.roa
Signing time:             Thu 30 Jul 2026 18:45:39 +0000
ROA not before:           Thu 30 Jul 2026 18:45:39 +0000
ROA not after:            Wed 28 Oct 2026 18:45:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1bc::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:50:b9:94:e0:d7:93:80:66:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:39 2026 GMT
            Not After : Oct 28 18:45:39 2026 GMT
        Subject: CN=fde2f342-3bdb-437c-8a51-fa1adb1b85c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:3c:47:4b:92:85:62:d1:e6:69:3f:51:16:
                    b2:9d:3c:d6:72:e6:f1:3c:62:d6:d8:41:40:86:35:
                    6a:16:7b:1e:f9:b9:69:a5:2b:39:98:37:5b:7c:59:
                    ef:ca:fa:f5:96:5b:9f:15:09:5f:b0:9c:75:1e:23:
                    fd:e3:f6:60:0f:a1:98:c1:fc:18:69:cf:3d:9c:2f:
                    98:2e:a9:90:a4:8b:08:56:fb:81:a9:60:2a:9f:9d:
                    b7:73:cd:1c:55:2a:e6:ce:fd:9f:71:f4:fe:ec:f1:
                    eb:31:c3:30:af:05:a0:d1:3c:66:c0:06:e2:a7:5d:
                    20:47:a3:06:43:e1:5b:18:01:cd:6b:e4:9f:1a:18:
                    dc:7a:4b:12:db:c5:31:c3:3a:6b:93:2b:fe:7b:25:
                    f1:26:25:95:12:48:22:2c:37:e5:a1:17:fc:0f:32:
                    66:56:68:f0:06:2a:a0:f1:a9:3f:d7:ba:6e:81:e0:
                    ec:4b:af:18:6f:82:00:dd:32:d3:0a:9e:36:4f:17:
                    2c:10:77:c3:0a:97:db:fb:52:7b:4b:5a:98:f7:4c:
                    23:5c:6a:36:a8:e0:d0:71:62:98:b2:d0:ca:19:bd:
                    8b:3e:67:3f:8a:a5:ad:18:61:07:4e:54:f8:f8:23:
                    bf:26:5d:f3:cd:41:56:f2:dd:28:1b:3d:93:af:75:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F3:61:EE:10:7F:68:57:CB:70:B7:E6:F2:EA:06:FB:76:6F:A4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/68da062a-41de-3a3e-97fa-53b29ae4990d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1bc::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:14:4a:bb:0d:d3:03:26:6a:e9:e5:f3:58:c9:d6:36:69:
         b2:5a:d2:c8:b6:7f:04:2e:44:66:66:5e:29:ec:7b:bd:c2:78:
         bc:2c:e0:58:66:b4:b3:d0:71:a5:06:17:52:23:d0:8d:d1:1d:
         9a:9f:92:99:07:9d:62:dc:39:c0:88:f5:a7:83:ef:1a:c1:01:
         c2:82:d8:d8:c0:45:dc:89:e5:21:26:e7:b2:17:e3:b6:86:4e:
         df:3a:1d:ab:4c:5a:c3:3a:77:fa:62:ab:2d:a1:b2:34:5c:a4:
         b2:ca:aa:2c:11:02:21:e1:3e:72:cd:63:a8:97:5c:82:bc:c2:
         5e:a1:95:e8:66:c5:86:af:ed:43:f7:e6:d2:d1:3f:58:fb:dd:
         42:3a:85:90:c3:49:a1:b7:32:b9:8f:c8:30:10:2e:44:fe:f9:
         a4:88:e7:d7:6b:84:5a:5e:62:61:63:01:e3:14:a7:0d:ac:7d:
         6b:8d:79:93:49:f7:7c:de:61:3b:02:02:b0:4b:8f:1f:60:fb:
         f5:d1:66:ca:b7:95:22:d8:83:dc:36:6a:dd:16:52:43:25:e7:
         c0:bd:73:a0:d3:85:70:f6:93:3f:b9:7c:e1:f5:70:f8:84:3e:
         28:b4:63:0b:bf:a8:bf:be:c2:b0:19:62:b1:87:da:52:2c:84:
         64:1f:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:41 2026 by rpki-client