Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/833ebc6f-f392-3e6c-b0c8-137579500afa.roa
File:                     833ebc6f-f392-3e6c-b0c8-137579500afa.roa (raw, json)
Hash identifier:          5OFV7uvc2wdtbJ7xfnM4OT7E3Bw/AXtkr7QXSuS3b9E=
Subject key identifier:   4A:19:FA:9D:8D:ED:74:E6:28:1A:4E:CF:B0:83:5F:2E:C5:7F:45:FF
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625846B3C089D2A2DC4EB0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/833ebc6f-f392-3e6c-b0c8-137579500afa.roa
Signing time:             Thu 30 Jul 2026 18:45:42 +0000
ROA not before:           Thu 30 Jul 2026 18:45:42 +0000
ROA not after:            Wed 28 Oct 2026 18:45:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:237::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:58:46:b3:c0:89:d2:a2:dc:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:42 2026 GMT
            Not After : Oct 28 18:45:42 2026 GMT
        Subject: CN=29c61279-c730-4f85-9bd4-f9f119d02da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:8d:e2:03:dd:a3:a8:cf:f0:35:40:e8:e8:
                    1e:3a:c2:e5:7f:81:57:9e:59:de:b4:77:0a:0d:e7:
                    f8:19:5c:40:92:38:bf:49:76:76:f5:f8:fc:65:4b:
                    37:c2:64:87:a2:7f:26:cc:0d:8e:09:d9:bd:d0:47:
                    6a:8d:58:e9:37:79:7e:9f:f1:9c:33:ff:e5:f6:be:
                    14:e2:ee:04:f5:1e:91:24:e7:f3:1f:43:2a:d9:b2:
                    b9:10:e5:9c:88:55:b8:cb:36:a8:a2:62:a5:c4:24:
                    68:3d:f1:94:a2:ba:cb:8a:f1:2b:4b:13:5e:b1:f3:
                    52:0d:98:98:38:a1:d6:55:b1:96:fe:db:ed:ed:bb:
                    f6:02:c9:51:52:53:b1:db:06:c9:10:89:fc:26:d8:
                    06:b0:ef:ec:ac:f0:5a:b4:f5:68:d3:10:1b:a3:7c:
                    8a:aa:f7:4b:79:d6:bc:d3:22:29:74:fb:61:f0:be:
                    b1:7f:4c:c1:9b:0f:7c:7b:9f:9c:e6:3e:5d:ce:e8:
                    91:d0:d7:28:86:43:46:49:e1:d5:e2:44:4e:36:47:
                    0c:c2:0d:56:02:39:04:35:0d:9e:75:34:bd:fc:02:
                    58:0c:18:95:06:42:25:57:11:03:da:da:c9:e5:12:
                    49:bf:99:6f:ab:92:50:7c:3d:07:a9:69:2e:b1:3d:
                    4e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:FA:9D:8D:ED:74:E6:28:1A:4E:CF:B0:83:5F:2E:C5:7F:45:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/833ebc6f-f392-3e6c-b0c8-137579500afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:237::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:60:60:24:19:a8:22:0c:c0:d9:64:ca:9b:10:8b:3e:b9:95:
         7d:5c:8b:1e:7a:9b:28:7a:a5:46:a7:47:15:60:4f:61:60:b5:
         39:d8:56:ad:22:6b:ba:a3:c1:85:79:46:b4:0b:1f:84:e0:11:
         52:e0:fb:29:ee:0e:bf:2d:43:b6:7c:19:8e:b4:94:8b:e3:ab:
         5f:d6:62:ff:07:67:51:22:5d:b2:c6:18:22:85:a2:7f:a2:0c:
         eb:8a:64:06:33:c2:ad:74:4d:70:2d:90:b9:c2:bb:2e:c8:a0:
         e8:57:6a:51:e0:e6:e7:8e:f0:47:09:e7:57:b8:1a:e7:01:a2:
         51:f0:8f:3a:72:c6:58:e9:b8:70:18:26:6b:a8:f5:c5:15:48:
         a0:46:18:63:e5:b8:6f:d7:02:4c:29:16:25:27:12:73:4a:a3:
         4f:b7:f5:c5:66:51:4f:c6:e3:55:f6:c8:cf:2e:da:e0:d4:e6:
         ae:de:62:00:b4:f2:cc:5e:98:a6:fc:e9:80:dc:05:3c:9f:c8:
         e6:55:af:cf:c4:36:43:0c:c4:df:49:b2:09:0d:5a:18:7b:25:
         44:ee:fd:81:96:55:fa:1a:c9:b9:45:ed:c7:a0:6b:48:7b:e3:
         b8:df:32:6c:1b:66:ee:f5:f7:dd:57:24:e6:72:13:47:da:87:
         cf:86:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:28 2026 by rpki-client