Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/78570250-56f3-3db5-9a06-a9ff061a77b0.roa
File:                     78570250-56f3-3db5-9a06-a9ff061a77b0.roa (raw, json)
Hash identifier:          XziSXQCilqjF5mvv4CLbOZ5geOlqNlW9BKDx413n8Ow=
Subject key identifier:   A5:74:53:5D:18:A0:4F:89:73:E0:86:FE:E4:ED:75:77:7D:A2:5F:4C
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6263784C3E5D7EBBCD7B80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/78570250-56f3-3db5-9a06-a9ff061a77b0.roa
Signing time:             Thu 30 Jul 2026 18:45:47 +0000
ROA not before:           Thu 30 Jul 2026 18:45:47 +0000
ROA not after:            Wed 28 Oct 2026 18:45:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2e1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:63:78:4c:3e:5d:7e:bb:cd:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:47 2026 GMT
            Not After : Oct 28 18:45:47 2026 GMT
        Subject: CN=e1e72309-b5c3-4324-8859-5b58dfc0d187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:0d:f0:70:0d:cb:57:cf:e4:99:31:a0:b3:
                    f4:28:f5:47:4d:de:ad:71:1e:b0:a2:26:36:e7:a6:
                    48:5f:5f:81:d5:05:a5:c5:89:90:2b:56:c8:eb:7b:
                    b3:64:37:9e:ec:d4:8b:e3:a1:1f:1c:eb:5d:ca:30:
                    f0:fd:ca:82:19:e6:1e:2d:1a:cd:ad:b9:df:4b:cb:
                    55:d7:8e:39:d9:1d:6c:9f:91:a8:fd:82:cf:cb:36:
                    09:e9:b3:5e:80:7f:80:7f:15:21:3c:14:05:af:64:
                    d1:15:0a:68:2a:76:1c:6c:48:55:4a:4d:5f:d4:89:
                    a1:63:09:2f:c7:1d:e8:c2:ef:ba:2a:b6:b2:a8:6d:
                    4a:30:9c:5e:ea:4c:a0:94:d8:dc:47:be:3b:3f:ca:
                    cf:5c:06:0b:5f:dd:4e:0e:f1:b0:84:a0:9b:d3:6b:
                    ae:90:68:15:55:7a:61:e1:12:0f:3e:01:98:f0:fe:
                    53:f9:ab:55:54:2c:5b:e4:a7:2b:64:de:a9:15:13:
                    20:b5:06:26:b3:a0:ab:e5:7f:37:e2:7a:a6:ee:ea:
                    79:56:3f:73:02:56:b7:a5:72:8f:4c:86:2e:bc:0d:
                    5c:d9:75:2e:69:12:56:13:59:5c:28:7c:10:26:25:
                    12:4a:6b:42:fc:7c:9d:d9:db:b5:fc:78:27:6c:02:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:74:53:5D:18:A0:4F:89:73:E0:86:FE:E4:ED:75:77:7D:A2:5F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/78570250-56f3-3db5-9a06-a9ff061a77b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2e1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:7f:ae:26:84:aa:1a:09:ba:af:60:19:f7:ce:e8:24:61:
         08:c8:35:7e:1f:f7:5a:d9:b2:3f:f5:87:61:c2:81:76:c8:fc:
         12:52:c5:a3:5d:6e:bb:7f:1e:c8:8f:0a:c4:4a:ce:5f:fb:eb:
         c8:56:b0:ff:e5:ac:ba:e2:d5:e8:4f:de:07:7c:ef:42:3a:cb:
         65:f2:5a:79:9c:fe:c3:97:44:4d:39:1b:1a:50:16:99:f8:e1:
         f7:e9:ac:ae:08:3e:46:b5:34:d2:d1:2e:c2:2d:3d:56:18:0c:
         65:ae:f6:8d:cb:b2:62:56:2f:f0:77:26:c5:84:17:7d:f1:85:
         7b:61:33:c5:dd:dc:6d:29:7e:48:ea:e1:05:6b:85:c4:bc:9b:
         41:71:77:ad:a0:43:8a:a5:b6:5d:91:47:63:ea:bc:3a:4b:d0:
         6f:c3:82:7d:18:2d:07:8c:dd:32:4d:85:50:a1:17:74:cc:20:
         1f:18:1e:f7:7a:ba:3d:62:b1:df:f4:ec:70:d4:33:af:0e:c6:
         e9:a9:27:55:62:db:cf:84:21:5c:34:0b:fa:9c:2a:d7:13:8a:
         5f:01:63:ed:18:72:db:11:6e:58:bc:99:fd:00:8f:3f:8a:40:
         3a:b2:e8:17:6a:17:6b:c6:1f:36:cd:19:ea:8c:4c:5c:b2:14:
         57:61:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:41 2026 by rpki-client