Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7e73d210-e052-34e5-9437-025313e1360e.roa
File:                     7e73d210-e052-34e5-9437-025313e1360e.roa (raw, json)
Hash identifier:          8Ie96qOVz4jXx1NKMvO5fTJEbwCQq2QuDl8Jfm/zhG8=
Subject key identifier:   E7:B2:71:FA:4A:47:3C:67:1E:55:FE:5E:F9:E4:DD:4A:30:58:28:E8
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62681D1D18388AFDA58100
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7e73d210-e052-34e5-9437-025313e1360e.roa
Signing time:             Thu 30 Jul 2026 18:45:50 +0000
ROA not before:           Thu 30 Jul 2026 18:45:50 +0000
ROA not after:            Wed 28 Oct 2026 18:45:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:324::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:68:1d:1d:18:38:8a:fd:a5:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:50 2026 GMT
            Not After : Oct 28 18:45:50 2026 GMT
        Subject: CN=8e1ffdd1-efb1-4118-a8ba-5ce0f502db71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:5b:40:00:45:08:88:80:f6:0c:7f:8a:e3:
                    cc:4d:26:6c:dd:a0:9c:57:06:e5:f3:28:c0:e8:cb:
                    25:58:8e:04:dc:92:85:dd:93:a8:95:72:0c:0f:77:
                    0e:1a:e7:69:de:cf:62:ab:3c:90:0a:70:6f:f4:1e:
                    54:00:21:1f:26:b3:3d:5d:06:7f:fe:34:7a:7f:f1:
                    77:33:df:67:5d:92:89:c8:1d:34:ae:6b:6f:44:91:
                    47:13:c0:6b:7a:15:99:18:2d:f0:b9:3c:44:22:b9:
                    00:17:06:fe:17:45:24:a9:f9:ef:ac:79:88:b7:93:
                    64:1e:af:25:2f:cb:97:b3:d7:28:a0:87:31:95:83:
                    7d:a0:c3:40:a4:03:6f:85:e6:f1:84:39:c5:0b:76:
                    6c:3c:91:b1:b3:20:d1:c2:bb:f3:0e:56:3c:e2:cd:
                    23:bc:bf:2c:ef:36:d8:58:d6:57:90:f5:67:29:07:
                    50:e8:49:34:eb:b2:81:6a:00:87:92:23:3b:44:36:
                    76:d5:99:77:54:d1:c2:e0:33:9e:eb:00:8a:07:d2:
                    41:8e:dc:da:d5:49:32:9a:cc:df:c8:21:37:7d:37:
                    e7:1b:42:8b:04:d9:25:3e:f3:f9:fa:12:b1:0f:b6:
                    57:fb:24:1b:06:a4:d8:34:76:9d:6f:03:b0:82:c9:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B2:71:FA:4A:47:3C:67:1E:55:FE:5E:F9:E4:DD:4A:30:58:28:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/7e73d210-e052-34e5-9437-025313e1360e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:324::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:05:8b:90:ca:05:03:d8:d8:e4:ee:fa:18:0a:be:8b:15:b9:
         52:b6:dc:90:dd:72:c3:e8:ec:da:39:30:52:5d:54:55:e0:2e:
         7a:5e:e4:fa:24:39:c9:90:77:d6:e6:e3:78:db:ce:7f:0f:e0:
         e1:28:a3:d1:be:e8:59:ff:f9:6d:5f:92:e2:6e:78:f1:b1:e7:
         06:fc:76:af:58:df:3d:3a:45:74:6f:0a:a4:bb:7c:b9:1c:ec:
         b2:d8:4b:47:95:62:b1:7f:ad:e2:10:1a:8a:7e:8d:d3:c2:14:
         9a:34:cb:b5:d4:4b:3d:d5:c5:1f:1c:c4:b7:58:d1:ed:ea:1b:
         84:d6:71:1b:7b:b2:0f:b3:a7:d4:39:a0:87:59:36:b1:4b:61:
         58:29:89:cf:ec:1b:52:ed:b0:f7:10:96:46:42:9b:21:19:50:
         8d:97:74:58:8b:4c:8d:f9:dd:20:4a:59:f5:99:66:57:41:f0:
         f3:44:49:64:c2:94:5f:1c:8d:d0:45:d6:80:4b:9c:89:5e:38:
         0e:18:1b:94:c0:06:c4:9f:22:c6:a5:2e:b9:d8:ec:9f:a0:3b:
         c3:af:67:f5:72:c2:5f:6c:e0:cf:81:b5:72:0d:b0:64:c2:2c:
         10:57:93:4e:20:92:a4:ff:19:e6:14:ee:27:16:e9:04:3b:4c:
         3d:3c:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:14:07 2026 by rpki-client