Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/89be4f7e-cbbe-3efc-8a24-b252c98f89bb.roa
File:                     89be4f7e-cbbe-3efc-8a24-b252c98f89bb.roa (raw, json)
Hash identifier:          zSikZ+YhNyqH/Jn9W+sLcP8D1q00zb3vp5NFRQdSP+U=
Subject key identifier:   09:9A:9E:F4:08:6C:5F:20:54:5B:4F:89:6C:11:0B:60:51:67:DB:58
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626D0869D863F356E3AE80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/89be4f7e-cbbe-3efc-8a24-b252c98f89bb.roa
Signing time:             Thu 30 Jul 2026 18:45:52 +0000
ROA not before:           Thu 30 Jul 2026 18:45:52 +0000
ROA not after:            Wed 28 Oct 2026 18:45:52 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:36c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:6d:08:69:d8:63:f3:56:e3:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:52 2026 GMT
            Not After : Oct 28 18:45:52 2026 GMT
        Subject: CN=72ebc14c-e999-4dae-a365-9f8506009d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:ab:ec:03:33:a0:0f:09:34:43:aa:a4:9b:
                    db:62:39:f3:dd:f9:b8:4d:96:bf:ec:d2:a7:df:31:
                    fb:85:2a:23:70:dd:46:c9:70:cb:0d:44:75:1a:3e:
                    16:b9:9c:c6:9f:35:66:e5:ed:9a:9b:ce:8f:36:41:
                    d1:62:4b:a2:a9:54:43:f1:72:fe:15:5e:ba:3b:a3:
                    6d:8c:6b:da:08:6e:9e:d4:f0:6c:92:fe:5b:40:5a:
                    57:36:12:01:fe:9f:9f:44:02:3b:8f:33:52:d7:86:
                    84:22:fc:f7:68:c1:c1:93:3e:a9:9b:45:1e:90:fe:
                    0b:68:f2:5e:e1:55:b2:93:93:33:16:1a:1d:e4:05:
                    3b:8d:29:02:d9:21:0f:3e:eb:40:95:25:99:db:dd:
                    23:20:e5:d3:9a:14:af:51:33:c5:cd:f8:5a:31:06:
                    aa:0f:32:44:58:f0:09:45:bc:f6:e5:74:c3:f1:18:
                    80:d6:f4:4d:3c:be:3a:e4:5b:b0:6d:27:20:f6:07:
                    3a:6a:f3:86:53:04:6a:dd:51:60:a5:94:f8:33:ee:
                    8e:f8:e9:78:b2:14:e5:89:4e:b5:e0:e9:9e:73:c3:
                    ca:ff:e5:1b:ed:70:b0:0c:98:c2:98:26:aa:75:ec:
                    84:d1:d3:ae:03:8a:40:0d:98:64:d2:9a:44:10:7a:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9A:9E:F4:08:6C:5F:20:54:5B:4F:89:6C:11:0B:60:51:67:DB:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/89be4f7e-cbbe-3efc-8a24-b252c98f89bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:36c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:43:be:23:c1:6e:57:0e:12:d5:56:e7:da:f0:2d:f5:b0:
         5c:4d:3e:5a:7b:9f:0e:7c:d8:ae:eb:3b:5e:72:c3:31:af:06:
         9e:0d:aa:13:e7:ad:96:75:7f:aa:08:4b:03:07:9a:75:d5:0c:
         d3:96:21:79:a6:94:45:7f:cf:fd:c4:1e:be:5e:97:bf:10:9d:
         2b:a5:15:d5:5e:a5:b4:c6:61:37:24:9d:9b:2f:0e:c8:1e:2e:
         ff:c2:69:0c:c0:ce:d9:48:61:b3:d3:64:0b:b7:6c:47:87:2a:
         b6:13:c2:76:25:d3:7a:04:71:7a:dc:f3:17:91:46:e0:79:de:
         af:b6:8c:37:2a:7c:dc:3c:52:be:98:9e:37:30:c6:69:73:a0:
         49:dc:14:53:b0:5e:3e:e7:2d:de:02:5f:e7:b4:0a:c6:e9:b6:
         b7:8a:32:a5:8c:f8:84:46:9b:31:f8:67:66:9a:06:d4:f0:48:
         f2:25:17:90:e2:31:18:8a:c0:8c:c9:b4:17:5f:56:3d:39:2c:
         6c:66:44:3e:20:3e:6f:e1:90:55:71:2d:1f:6c:b0:ec:bd:c6:
         73:21:3f:93:07:fe:14:95:27:54:f3:8d:0a:4a:a2:56:a2:41:
         48:c4:0c:f5:ca:b5:9f:b5:a3:57:ec:63:35:b2:37:7d:88:94:
         b2:57:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:21 2026 by rpki-client