Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7ad4e3bd-d8e8-3214-a4d8-4c6f98d49776.roa
File:                     7ad4e3bd-d8e8-3214-a4d8-4c6f98d49776.roa (raw, json)
Hash identifier:          ZQOYGtqaa5rtVbhni8sHlhNcBztyCVMwsS/GfbStk1Q=
Subject key identifier:   FC:52:49:1C:1C:2E:C4:69:38:FE:00:16:21:E9:49:DF:3F:85:75:DD
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623E8382896B910EFFBBA0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7ad4e3bd-d8e8-3214-a4d8-4c6f98d49776.roa
Signing time:             Thu 30 Jul 2026 18:45:30 +0000
ROA not before:           Thu 30 Jul 2026 18:45:30 +0000
ROA not after:            Wed 28 Oct 2026 18:45:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:7b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3e:83:82:89:6b:91:0e:ff:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:30 2026 GMT
            Not After : Oct 28 18:45:30 2026 GMT
        Subject: CN=bb4f4c8e-4695-4235-aa59-339476a208f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:0f:be:8d:6b:ad:ab:55:3a:c6:c7:dc:34:
                    98:f3:e7:f7:64:68:28:ee:fd:77:65:b5:12:b9:34:
                    9b:21:d3:eb:00:48:43:a0:eb:7f:19:5c:79:38:05:
                    50:6b:6b:b6:17:54:6c:46:22:e5:c6:e0:ad:e6:4d:
                    bb:a1:b3:1b:28:45:35:fb:39:db:3d:dd:22:0f:bb:
                    43:b6:67:cf:db:54:bf:5f:d5:ad:c2:d7:48:a6:54:
                    d5:88:48:a6:8c:59:1f:84:4f:32:ab:b7:ab:f0:05:
                    3f:82:f3:4e:42:63:26:a7:a3:90:dd:45:84:82:62:
                    8e:96:95:a4:c6:be:4b:08:65:50:22:ea:dc:e0:81:
                    48:65:9a:86:b7:1c:34:e5:07:46:9d:61:14:f0:c9:
                    a7:0a:f4:ce:b2:be:68:cb:bb:60:c7:d8:1c:87:0b:
                    ae:5d:3d:b7:74:8d:12:e6:e3:7b:7e:67:74:94:c5:
                    91:d6:43:9c:1b:8a:aa:36:79:2a:47:12:11:76:19:
                    c1:9e:2c:e7:e2:d0:9e:c8:8d:9a:12:20:38:c1:e9:
                    18:ea:a3:73:b1:f3:06:93:7f:ad:08:8a:06:13:b9:
                    3f:51:90:d8:59:9c:12:b2:ad:26:b6:2b:4b:e9:f8:
                    97:28:38:4e:d8:13:79:27:ba:ed:3b:79:82:e8:f4:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:52:49:1C:1C:2E:C4:69:38:FE:00:16:21:E9:49:DF:3F:85:75:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7ad4e3bd-d8e8-3214-a4d8-4c6f98d49776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:7b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:81:5a:e3:c5:01:02:37:0b:78:51:bc:9a:bd:2e:d0:b5:
         09:f2:74:e6:9b:38:9a:a4:6c:74:66:dd:bc:2f:26:a0:47:61:
         6f:da:32:2c:6e:57:35:07:6d:5a:67:9f:5b:d1:ff:2f:3e:8b:
         d5:e3:c2:9b:24:f8:2a:1a:8f:de:77:89:71:e1:17:72:a1:c4:
         b8:54:b8:4a:6b:80:cc:18:9a:46:3d:32:86:85:03:93:b1:85:
         72:c7:c7:50:ed:fd:b3:84:4d:76:22:81:80:59:75:a9:ec:96:
         a0:eb:e0:d1:e3:68:ea:60:64:6e:75:66:14:60:a9:e8:2d:00:
         24:29:2a:13:78:56:0e:98:f3:83:20:31:61:29:56:75:62:3e:
         3d:81:77:fe:6e:2a:bd:6a:c6:31:a3:88:b4:be:31:74:e4:f6:
         84:a9:15:8b:dd:f1:00:31:14:29:74:1c:02:1d:f2:ee:f6:10:
         64:b8:a2:27:7b:c4:7a:95:b7:b7:12:21:ad:87:5c:66:81:60:
         98:fa:24:b8:cf:b8:9c:ba:b8:39:5d:2d:17:1a:16:48:f3:24:
         e5:6e:8b:6b:60:3f:2c:00:d1:bd:e0:63:e9:5b:de:f0:97:18:
         43:17:36:8c:5b:12:53:f3:76:ba:fb:dc:b7:d8:3e:bf:01:ac:
         b5:c4:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:53 2026 by rpki-client