Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7e1fa5a2-0795-3293-8fe5-9a042036e0c3.roa
File:                     7e1fa5a2-0795-3293-8fe5-9a042036e0c3.roa (raw, json)
Hash identifier:          85EFShxFbo/A12IT2a0NJ6RkCsw2SiNWXy+VnExfybE=
Subject key identifier:   EC:8F:9E:A4:10:A6:E1:E3:BC:66:C9:FA:55:28:8B:07:85:41:DF:B1
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625A2E992F1DA6DEAE3C60
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7e1fa5a2-0795-3293-8fe5-9a042036e0c3.roa
Signing time:             Thu 30 Jul 2026 18:45:43 +0000
ROA not before:           Thu 30 Jul 2026 18:45:43 +0000
ROA not after:            Wed 28 Oct 2026 18:45:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:255::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:5a:2e:99:2f:1d:a6:de:ae:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:43 2026 GMT
            Not After : Oct 28 18:45:43 2026 GMT
        Subject: CN=929a6b3a-7bfb-4eaa-8ade-960a876459cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:0e:3b:b0:3a:0e:54:99:70:0e:3e:f9:b1:
                    8b:48:10:97:e3:7e:0a:a0:af:44:9b:3f:c9:c8:4f:
                    b4:40:10:34:19:c1:6d:06:23:f4:98:8d:be:74:bb:
                    04:1f:67:cc:11:15:4b:07:f2:6d:0e:ed:11:5b:12:
                    b9:24:d6:77:1a:0d:91:a5:f8:b1:c4:11:57:7c:7e:
                    bb:26:7c:5a:08:1d:d5:3b:9b:f5:98:64:5e:ac:8f:
                    d4:49:d1:c0:8a:68:54:74:c9:79:a1:35:e1:25:8c:
                    4a:e0:5a:30:fa:65:80:0d:70:d8:94:2b:9e:59:f2:
                    22:f2:9c:3c:ca:8e:2f:d7:dd:cd:32:81:69:b3:67:
                    d5:07:e8:f9:9a:8c:6c:e3:7b:2e:d8:80:fd:f6:f0:
                    71:86:aa:f8:34:fd:7f:f2:ee:03:ac:8b:dc:94:07:
                    00:df:6f:a1:f0:fd:8d:24:96:d6:b0:06:d5:a5:b7:
                    ce:91:77:4e:b6:74:35:c0:e1:ab:0f:14:f3:20:56:
                    42:91:01:f0:26:84:28:8e:6f:c7:91:86:ef:1f:f2:
                    6d:b5:c4:7a:e8:81:fb:11:b2:db:b0:17:d6:85:20:
                    23:27:a8:55:e0:e1:9c:e2:13:b2:37:44:2c:76:7a:
                    38:be:a2:ef:88:fc:38:c7:8e:d6:83:cd:61:e2:4c:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8F:9E:A4:10:A6:E1:E3:BC:66:C9:FA:55:28:8B:07:85:41:DF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7e1fa5a2-0795-3293-8fe5-9a042036e0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:255::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:af:ea:f9:bb:96:b0:45:10:d7:8e:19:5a:70:df:e7:27:
         14:a7:9f:50:24:d9:01:1b:d2:a9:0f:e9:14:29:04:0f:3f:4d:
         f2:48:1e:25:a9:7d:25:c3:4e:d9:36:cc:40:73:04:fa:12:76:
         72:a7:0b:fa:d1:32:49:bb:da:e6:33:1b:0f:19:e3:be:d9:99:
         bc:37:9e:05:70:55:57:42:87:c0:68:ab:e2:23:b1:96:7b:1a:
         96:da:46:66:18:3b:b7:38:af:3b:c8:ae:86:dc:33:d7:54:78:
         ef:4b:39:17:73:ab:61:b5:f3:3a:71:96:a9:c4:26:6e:0b:70:
         08:ab:6c:1b:9c:c0:ac:62:5b:94:aa:fa:25:cb:f8:13:6d:2d:
         54:fb:82:dd:9e:9c:ab:35:73:86:8b:11:f3:8b:76:fc:88:eb:
         aa:0f:cc:9e:38:03:84:38:12:fb:b7:8b:aa:a7:48:4d:33:cd:
         92:be:c2:e4:7f:c1:77:0e:16:71:a3:5c:4d:75:61:ff:f8:41:
         71:43:45:2b:09:a2:14:c1:72:9e:01:a7:40:01:97:5e:31:1b:
         74:34:b9:ef:fc:e4:7e:09:b8:c5:7c:34:a3:b8:53:0e:a3:73:
         5e:8d:aa:d1:07:3d:40:d1:3b:a8:b9:2b:99:0f:5b:7e:d3:4b:
         8a:d8:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:10 2026 by rpki-client