Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8819954a-764e-30c3-ac5b-e77734087780.roa
File:                     8819954a-764e-30c3-ac5b-e77734087780.roa (raw, json)
Hash identifier:          9EJFUL6vlVrRynjxKL4+jJsMg6gs+l5yfz0zwYp5Nh4=
Subject key identifier:   92:EE:D4:B6:46:57:95:C5:BA:FA:1A:80:C4:A0:14:63:42:05:41:5E
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623EAC2D74FCB224E8B6C0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8819954a-764e-30c3-ac5b-e77734087780.roa
Signing time:             Thu 30 Jul 2026 18:45:30 +0000
ROA not before:           Thu 30 Jul 2026 18:45:30 +0000
ROA not after:            Wed 28 Oct 2026 18:45:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:7e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3e:ac:2d:74:fc:b2:24:e8:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:30 2026 GMT
            Not After : Oct 28 18:45:30 2026 GMT
        Subject: CN=88cb04b0-2570-4f6a-a116-a99561a2b404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:66:d7:59:5a:c4:83:ff:42:67:73:cf:cf:
                    fc:7b:52:c3:a8:b7:d7:15:e5:66:91:d8:74:1a:04:
                    84:63:79:6d:8a:73:bd:5e:8e:41:5b:83:74:bf:ce:
                    aa:87:20:26:56:7b:44:4a:2d:7d:8a:41:00:56:14:
                    50:5b:d8:69:76:cc:4a:7f:e7:ff:85:eb:be:76:9a:
                    bf:f8:62:be:31:2f:d1:9a:55:17:7d:00:9e:af:8d:
                    5d:e7:49:87:be:d2:5f:74:2b:80:6d:94:40:bd:b3:
                    d2:84:ad:f2:b5:e3:9b:96:2e:c6:50:7c:8c:5f:cf:
                    34:a5:c3:77:7e:35:e2:14:6a:e5:01:cc:a7:64:6a:
                    85:bf:64:4d:83:3d:9f:d3:9c:20:a0:6f:d6:8e:20:
                    92:85:ab:78:f0:f6:d7:bd:84:22:8c:79:97:38:2d:
                    65:c1:a6:cd:44:f6:7d:39:fd:37:c7:2c:e5:0c:8e:
                    ab:07:3d:fe:5a:67:c2:3d:20:47:03:be:32:33:ae:
                    6d:5c:a7:cf:cf:e5:99:ca:41:39:3e:f2:f3:10:9f:
                    13:ed:e8:64:22:46:10:e3:da:0b:49:d4:89:13:de:
                    9e:25:af:60:94:93:f7:e9:7d:bf:43:33:f0:76:c6:
                    6c:db:2d:2e:2a:97:0d:bd:36:62:fb:57:c5:56:ae:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EE:D4:B6:46:57:95:C5:BA:FA:1A:80:C4:A0:14:63:42:05:41:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8819954a-764e-30c3-ac5b-e77734087780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:7e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:e9:67:23:1b:17:2f:b8:e5:47:24:86:a0:e3:40:94:da:
         4d:43:02:99:e0:62:81:26:1b:6b:5a:09:df:fb:52:cb:4c:d7:
         af:13:19:f9:b3:8f:00:d1:17:72:8f:3e:0d:74:81:57:16:6c:
         e7:d7:5c:39:78:cb:87:b2:5b:0c:14:1b:e8:b9:90:17:cb:72:
         d5:d1:0b:d1:0d:ae:de:08:05:86:f6:6d:8e:d3:2a:f7:51:eb:
         5e:fb:29:f6:ec:ee:37:bb:5f:5b:e7:c2:72:21:9e:5c:ab:c2:
         5f:7b:51:a5:06:f0:f4:ba:57:64:47:7e:9e:c3:9c:75:49:0c:
         8b:71:93:54:78:8a:fa:6a:1d:f3:53:82:02:08:58:e1:c2:67:
         d1:f4:67:3c:4b:42:a8:e2:43:f9:45:58:01:f0:49:37:38:c7:
         19:d6:91:67:ac:67:54:82:08:d8:cf:49:61:71:cd:07:de:65:
         6e:9c:d3:c3:32:d7:ec:e5:71:46:f3:4f:b3:c1:c4:dc:81:2a:
         c1:8d:94:06:7b:8f:d7:64:e9:a1:86:67:85:0b:8c:5a:11:45:
         32:e4:a7:a4:8a:e9:e5:35:93:6a:5d:10:40:2d:fa:ac:c2:df:
         fc:5a:f9:ed:73:da:66:19:7f:18:bd:8d:ce:6c:c6:fd:01:9a:
         6c:b0:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:39 2026 by rpki-client