Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7a53fc86-659b-3062-ac81-0ca27b544188.roa
File:                     7a53fc86-659b-3062-ac81-0ca27b544188.roa (raw, json)
Hash identifier:          BCIDPB0I9xmAYq8EXU5UtxjbNmCymXJBMn4mcgKGKUI=
Subject key identifier:   8A:73:69:49:FE:CD:96:54:CD:F2:D5:EC:74:FD:88:DB:EF:22:D2:14
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626D3BECF2B80D0E3CF800
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7a53fc86-659b-3062-ac81-0ca27b544188.roa
Signing time:             Thu 30 Jul 2026 18:45:52 +0000
ROA not before:           Thu 30 Jul 2026 18:45:52 +0000
ROA not after:            Wed 28 Oct 2026 18:45:52 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:36f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:6d:3b:ec:f2:b8:0d:0e:3c:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:52 2026 GMT
            Not After : Oct 28 18:45:52 2026 GMT
        Subject: CN=5abd58cf-cbdc-44b6-8224-8ebd38532dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:72:10:96:dc:28:ef:b5:2f:e7:21:af:0b:
                    8d:0c:26:24:0b:e0:ed:bb:4c:22:28:25:59:0f:d1:
                    c9:b5:44:4a:2c:16:2f:43:b8:8d:8b:f4:8b:b3:1c:
                    cb:e5:50:1c:ce:2c:4a:e2:79:a4:e7:8e:50:e9:fd:
                    f4:8f:57:65:52:67:ad:71:fe:82:fe:2d:04:18:3f:
                    a6:17:21:18:c1:e4:34:0d:12:e5:28:a1:ef:c7:d5:
                    00:43:55:5b:3a:46:ed:77:1d:3a:c9:92:3b:4d:b3:
                    88:88:0a:5a:0a:17:a9:e0:eb:0f:94:d9:34:f0:da:
                    5a:2c:38:78:ce:4c:cc:6d:dc:46:27:6a:a7:c2:00:
                    9c:12:44:4c:fa:5b:09:1d:fd:84:4c:bd:2b:7b:61:
                    76:84:c8:b1:32:33:2c:1a:1d:9e:d5:0e:27:bf:c4:
                    cd:b2:e3:fa:4d:68:91:92:6c:78:b6:53:77:4b:21:
                    94:d2:23:b8:97:77:c8:ce:91:65:02:14:c3:50:02:
                    3a:2c:bb:ad:87:1a:1c:2d:a9:4f:03:4b:aa:cb:2c:
                    26:2d:38:78:aa:a5:9e:cc:d0:e8:3d:47:d3:d7:ef:
                    5c:f6:83:ba:7e:78:04:23:10:1a:84:68:65:be:32:
                    92:a2:03:7c:7a:12:ae:6c:8e:d3:aa:bd:c8:50:49:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:73:69:49:FE:CD:96:54:CD:F2:D5:EC:74:FD:88:DB:EF:22:D2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7a53fc86-659b-3062-ac81-0ca27b544188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:36f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:65:39:c7:8a:b7:5f:b0:db:32:e7:4c:ad:f9:da:ac:31:fa:
         f2:4a:8e:77:19:15:c8:ab:37:2b:6c:3f:c6:08:84:6d:2b:27:
         87:85:10:4c:41:38:ec:aa:11:44:fa:fe:60:74:1e:e7:d6:94:
         08:13:09:f3:15:d5:d2:68:19:2a:a2:96:39:83:04:75:1b:d4:
         1b:ce:3e:ee:e1:55:fb:e8:b3:ad:7e:b5:f5:74:fd:9a:c9:67:
         6b:46:5b:86:ab:e4:39:63:55:55:c1:c0:0f:57:f7:68:91:a1:
         1c:38:8d:a3:07:b2:61:88:6c:b9:cf:49:9c:0e:e0:fe:1e:1e:
         c3:91:d1:83:2c:4e:b2:11:3e:30:e0:73:c3:bd:fd:59:76:08:
         78:03:d2:d3:0c:40:90:92:42:81:18:8c:d8:55:57:2e:d4:6c:
         2e:64:e9:f6:08:09:f8:a4:2c:e5:e2:55:90:e3:cc:dd:b9:cf:
         ef:60:e9:9a:b1:7f:0e:a6:67:56:ee:b6:db:e7:13:24:dc:1e:
         49:47:01:bc:43:da:79:52:c7:65:11:51:19:84:51:3f:17:b7:
         1f:e5:1d:21:9c:66:47:10:e0:ec:d8:93:85:36:d8:a5:53:bf:
         6e:35:a1:a3:aa:12:8e:10:21:90:f7:31:6d:bb:e5:e7:6e:a2:
         d3:f8:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:23 2026 by rpki-client