Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7564d560-60f4-32bc-a904-c6f968a202e9.roa
File:                     7564d560-60f4-32bc-a904-c6f968a202e9.roa (raw, json)
Hash identifier:          8l2WFz048qe+EHHZ+LEVQ0FkR3MJHLnvr+1DOc/713U=
Subject key identifier:   44:F0:A3:40:D8:25:29:D5:55:E1:A8:FD:2E:92:86:34:90:56:AC:7A
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6241443F8D347B5D8C4700
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7564d560-60f4-32bc-a904-c6f968a202e9.roa
Signing time:             Thu 30 Jul 2026 18:45:31 +0000
ROA not before:           Thu 30 Jul 2026 18:45:31 +0000
ROA not after:            Wed 28 Oct 2026 18:45:31 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:ae::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:41:44:3f:8d:34:7b:5d:8c:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:31 2026 GMT
            Not After : Oct 28 18:45:31 2026 GMT
        Subject: CN=374eb61c-1f63-4639-b2c9-b0d8ec80d512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:9f:d5:b7:c2:b4:0c:97:cf:40:c6:5b:d4:
                    38:66:db:98:25:a8:2f:70:dc:85:bc:51:80:9d:ba:
                    7e:b0:10:27:48:20:23:7d:6f:7b:19:90:2e:d2:49:
                    3e:85:e7:f6:6c:54:2c:19:cf:e0:a1:38:ea:58:a9:
                    88:be:67:c5:63:05:8f:5e:43:37:65:f9:84:2d:bd:
                    3c:6c:fb:37:c4:e3:a4:f5:f0:40:f4:e0:94:be:f9:
                    c5:26:09:76:b3:f3:d9:fe:07:b5:8f:9d:b7:cb:ce:
                    e7:87:e5:b7:f3:69:1f:38:ae:1c:92:87:5e:24:48:
                    f1:48:13:37:3a:28:ae:f1:18:56:fa:76:c9:a0:be:
                    3b:b2:ad:0d:7b:0a:77:c0:05:e9:a0:91:3f:b7:5d:
                    28:4b:e6:c4:54:5b:0d:f3:38:6d:4b:8b:a1:56:c5:
                    df:4f:c3:44:10:22:d0:be:b4:e6:7e:8d:c3:22:2d:
                    62:25:2b:ed:f1:40:db:bf:1b:4e:d6:d6:f6:36:bb:
                    5c:30:0c:11:68:86:04:a4:dc:e9:03:52:80:0c:09:
                    7a:f8:16:a6:06:33:80:ef:03:c8:75:67:a8:60:21:
                    33:76:b8:67:71:28:73:0e:68:56:47:51:fa:c5:38:
                    24:49:7b:d0:9a:89:91:13:74:e1:9d:f9:4f:79:31:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:A3:40:D8:25:29:D5:55:E1:A8:FD:2E:92:86:34:90:56:AC:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7564d560-60f4-32bc-a904-c6f968a202e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:ae::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fc:bb:27:9b:74:6a:f2:b7:02:17:fb:ef:7b:e0:a2:12:e3:
         bf:6f:d0:ad:51:f6:5e:14:2c:1e:5e:d5:53:6a:3a:e0:f2:fc:
         2a:0f:1b:ad:c7:c6:2e:76:19:82:b4:88:df:43:4c:bf:f7:77:
         37:39:60:fb:1f:96:c8:fb:72:30:69:6a:c7:c5:ab:e2:e4:31:
         36:da:3f:44:dd:5d:26:13:cd:d2:81:e5:e5:2e:c0:42:3d:0f:
         2b:d8:45:fb:87:e9:9d:dd:0a:00:d8:3b:92:24:06:11:05:09:
         ee:ef:ce:dc:2e:42:01:94:ff:bc:e6:ba:fd:9a:dd:8f:2c:2c:
         8d:99:18:60:48:35:3b:f6:16:88:0c:47:0a:3f:29:40:57:bf:
         23:0e:5a:9a:9d:43:bd:76:00:e4:bf:8c:37:b2:f1:56:c0:b4:
         88:1a:26:0e:58:c4:d5:41:0d:c8:5c:90:89:28:40:b6:b0:49:
         6a:6d:28:24:13:ef:2a:45:f7:6f:d2:77:09:16:84:d3:6e:ec:
         fe:95:fe:6b:24:6b:41:84:b0:08:5e:be:dc:46:80:53:e6:02:
         42:8b:3e:6a:0a:82:e9:bc:6c:90:51:c0:b5:9b:e5:e8:94:a8:
         da:90:9c:57:4f:21:14:3f:e8:b9:3d:7e:66:8e:66:a4:e2:48:
         89:f6:3c:bb
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYkFEP400e12MRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDUzMVoXDTI2MTAyODE4NDUzMVowLzEtMCsGA1UEAxMk
Mzc0ZWI2MWMtMWY2My00NjM5LWIyYzktYjBkOGVjODBkNTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtqf1bfCtAyXz0DGW9Q4ZtuYJagvcNyFvFGA
nbp+sBAnSCAjfW97GZAu0kk+hef2bFQsGc/goTjqWKmIvmfFYwWPXkM3ZfmELb08
bPs3xOOk9fBA9OCUvvnFJgl2s/PZ/ge1j523y87nh+W382kfOK4ckodeJEjxSBM3
Oiiu8RhW+nbJoL47sq0Newp3wAXpoJE/t10oS+bEVFsN8zhtS4uhVsXfT8NEECLQ
vrTmfo3DIi1iJSvt8UDbvxtO1tb2NrtcMAwRaIYEpNzpA1KADAl6+BamBjOA7wPI
dWeoYCEzdrhncShzDmhWR1H6xTgkSXvQmomRE3ThnflPeTELqQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFETwo0DYJSnVVeGo/S6ShjSQVqx6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvNzU2NGQ1NjAtNjBmNC0z
MmJjLWE5MDQtYzZmOTY4YTIwMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AK4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAIvy7J5t0avK3Ahf773vgohLjv2/QrVH2XhQsHl7VU2o64PL8
Kg8brcfGLnYZgrSI30NMv/d3Nzlg+x+WyPtyMGlqx8Wr4uQxNto/RN1dJhPN0oHl
5S7AQj0PK9hF+4fpnd0KANg7kiQGEQUJ7u/O3C5CAZT/vOa6/ZrdjywsjZkYYEg1
O/YWiAxHCj8pQFe/Iw5amp1DvXYA5L+MN7LxVsC0iBomDljE1UENyFyQiShAtrBJ
am0oJBPvKkX3b9J3CRaE027s/pX+ayRrQYSwCF6+3EaAU+YCQos+agqC6bxskFHA
tZvl6JSo2pCcV08hFD/ouT1+Zo5mpOJIifY8uw==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:16 2026 by rpki-client