Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/70b70dbb-b668-3d60-8672-ff4845506cdf.roa
File:                     70b70dbb-b668-3d60-8672-ff4845506cdf.roa (raw, json)
Hash identifier:          4fOPm0ndK5uXQjBXLpezsoEIkDByIJskpL4ACXBqofk=
Subject key identifier:   8D:26:18:CF:EF:BE:62:4A:35:58:5A:8D:87:43:62:2F:D1:64:A1:4F
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624EFAED64FAD5ADC1DD00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/70b70dbb-b668-3d60-8672-ff4845506cdf.roa
Signing time:             Thu 30 Jul 2026 18:45:38 +0000
ROA not before:           Thu 30 Jul 2026 18:45:38 +0000
ROA not after:            Wed 28 Oct 2026 18:45:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:19e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4e:fa:ed:64:fa:d5:ad:c1:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:38 2026 GMT
            Not After : Oct 28 18:45:38 2026 GMT
        Subject: CN=2ef5581c-771f-442b-ac1b-d14c6e93f259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3f:d9:ab:50:bc:cc:69:fe:b1:4f:85:72:3e:
                    52:68:e9:5b:a3:f7:66:af:19:cf:2c:f1:0c:87:5d:
                    74:55:5d:d8:a8:dc:c7:90:b2:b5:84:15:e4:00:55:
                    f7:4b:41:63:fe:e6:c7:6e:6a:7e:c3:e2:7e:2a:77:
                    3b:ed:81:fd:0d:02:f3:a6:13:3c:b8:2d:2e:aa:17:
                    f2:a4:45:3f:da:75:84:3c:bf:1a:c5:0f:81:69:71:
                    e3:70:ed:3f:92:34:26:66:24:0b:87:11:a2:d3:7d:
                    70:83:2e:12:4e:3d:bd:08:99:47:a1:08:76:cf:3b:
                    82:56:31:e1:56:03:7e:b1:1a:97:5d:5c:bb:72:f8:
                    28:2f:c5:e9:0a:82:fe:21:b4:fd:95:5d:47:4b:f8:
                    4b:5d:f5:4c:91:67:39:40:d9:7a:33:0f:26:86:d5:
                    1b:62:be:f6:e1:32:fa:98:9c:79:0d:6c:ec:0b:91:
                    96:26:ec:1f:c8:18:9a:54:ec:6c:b4:34:5f:58:78:
                    ca:e3:96:39:2c:8c:f0:91:c2:23:25:07:ec:29:f2:
                    82:6a:84:60:da:c2:ed:84:92:78:9d:9b:b2:46:20:
                    e5:af:6d:87:54:65:a4:33:ef:db:0e:ef:93:a2:e2:
                    02:65:3c:fe:c7:6c:10:ec:e3:58:49:53:1d:35:e8:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:26:18:CF:EF:BE:62:4A:35:58:5A:8D:87:43:62:2F:D1:64:A1:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/70b70dbb-b668-3d60-8672-ff4845506cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:19e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:0d:5a:e7:90:09:90:9b:6c:85:43:79:b9:5a:d1:4d:5b:
         32:6e:39:60:83:78:32:7d:80:e6:35:91:46:cc:ef:da:fe:d0:
         62:dc:bb:49:4c:23:83:72:47:6b:a5:fc:32:69:20:94:31:d5:
         56:65:cf:bd:f2:f6:6f:12:7b:43:98:6e:3f:bd:ad:af:ae:de:
         24:e8:91:d9:cc:04:7e:7b:47:11:ac:37:78:72:c3:c2:87:5b:
         80:e3:9d:78:2f:3f:c5:a4:ea:c4:99:fa:44:98:77:b9:e9:d7:
         be:f4:9a:e8:cb:36:ec:68:fb:e8:7f:5a:a3:6f:6a:1f:97:64:
         54:da:1f:8d:b8:78:66:02:b4:c7:64:c3:23:60:33:96:37:f1:
         fe:6e:8c:3b:f2:01:20:46:19:ef:9a:af:86:c1:bb:11:f5:e9:
         99:a2:a9:40:a1:e2:11:dc:87:5b:9f:cd:02:48:14:2f:94:3a:
         41:33:b7:7f:fb:26:d5:75:b0:19:49:bd:27:54:ad:e0:cf:71:
         64:07:5d:8b:9e:90:e2:b1:0b:6f:3a:20:96:82:fc:ad:36:8f:
         eb:de:94:73:90:ac:0d:a1:4e:f6:46:7e:40:78:dc:88:d0:e4:
         92:13:56:ca:4a:70:8a:d0:d1:d5:5c:ee:33:20:f3:50:5d:2d:
         b1:6f:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:15:21 2026 by rpki-client