Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8abfaeb9-49c6-3adb-a258-9c9860b85b1e.roa
File:                     8abfaeb9-49c6-3adb-a258-9c9860b85b1e.roa (raw, json)
Hash identifier:          MqFLn8XOSJ4OzO4jjq0SQvatxEXYixnQ2r5dRFIULk4=
Subject key identifier:   24:09:EC:F3:02:81:C0:12:27:FB:46:6C:91:81:06:B5:AC:B2:2D:F6
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62723BC713FCDA2AB1A7B0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8abfaeb9-49c6-3adb-a258-9c9860b85b1e.roa
Signing time:             Thu 30 Jul 2026 18:45:54 +0000
ROA not before:           Thu 30 Jul 2026 18:45:54 +0000
ROA not after:            Wed 28 Oct 2026 18:45:54 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3b7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:72:3b:c7:13:fc:da:2a:b1:a7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:54 2026 GMT
            Not After : Oct 28 18:45:54 2026 GMT
        Subject: CN=c03ca64b-f005-4463-87cb-e2311bf250bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:d9:b2:9c:11:9a:34:34:11:5c:0a:10:76:
                    3c:53:05:35:88:2f:73:b4:84:d5:de:0d:13:24:02:
                    ba:0c:46:75:c4:c2:81:46:c8:ae:c4:86:64:da:3d:
                    92:90:b9:6d:46:40:e9:40:3d:80:39:bc:46:87:42:
                    6b:8e:71:c0:0d:45:4b:25:95:60:3b:a4:79:de:cc:
                    e9:5d:86:20:34:a9:08:f1:8d:7d:96:6c:5a:70:de:
                    cc:5b:1e:a4:30:0a:0a:ad:dc:33:01:34:15:08:ae:
                    62:bb:ec:1f:a5:3e:ff:86:e3:e7:c4:a4:d6:27:65:
                    dc:14:81:bb:f9:ca:48:71:3e:fb:36:64:33:69:65:
                    bc:bf:5d:bd:7f:71:83:3e:d7:c1:f7:74:f0:9b:f6:
                    d4:ed:72:dc:11:88:20:73:e5:90:0c:ab:ac:0d:22:
                    15:be:e1:d9:71:cd:2b:29:64:12:5b:d1:66:4d:eb:
                    03:20:d8:59:ff:c5:82:7c:e0:10:82:e2:29:a3:0f:
                    55:60:d6:ef:17:d9:39:27:4f:44:a3:9b:7d:96:09:
                    5b:7c:77:4b:08:fa:e4:3a:99:25:c1:69:89:dc:88:
                    70:85:a6:e3:20:79:34:d6:c5:51:03:f4:46:9a:96:
                    fe:0f:54:eb:56:2d:77:c0:50:4c:41:32:d6:ab:db:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:EC:F3:02:81:C0:12:27:FB:46:6C:91:81:06:B5:AC:B2:2D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8abfaeb9-49c6-3adb-a258-9c9860b85b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3b7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:e3:df:3c:2e:a2:40:33:46:bf:9d:79:29:68:bd:61:55:
         5b:62:40:70:31:61:e5:38:29:cb:a6:66:55:a2:4b:d7:22:a4:
         73:62:d3:7c:8a:73:36:4c:33:2d:49:c5:29:d2:0b:54:e2:eb:
         3d:fa:de:ea:35:fc:5d:73:55:e8:0a:2f:73:d9:7c:a4:af:f5:
         dd:bd:94:20:bc:16:3b:79:56:28:aa:32:80:24:f0:00:2c:1d:
         62:43:88:c7:3a:6e:6f:bc:59:21:38:c0:a7:52:76:c1:97:3a:
         e5:7f:b4:99:a1:44:3e:58:20:87:c8:e5:c6:ab:32:b2:3f:35:
         f5:c4:e3:03:87:1c:cb:ba:fe:56:9b:d9:2b:e4:1d:5b:23:51:
         a0:72:c9:0f:ba:5c:4b:02:a9:8e:42:0b:86:a5:3f:46:42:c5:
         cb:9d:b9:b0:c0:5f:f5:8f:14:f5:2c:f2:98:cc:85:b0:ae:b0:
         dd:ab:50:14:cf:9a:c0:d3:25:8d:d0:f1:ef:40:b7:2b:2c:9b:
         6c:ee:13:ef:1a:28:37:fe:df:f8:60:6e:eb:a7:1f:b4:a6:6f:
         93:66:49:fb:4b:4f:2c:e3:be:c9:81:aa:ea:d1:4b:7e:e7:97:
         bd:f8:3a:6f:7e:e8:fc:50:3a:df:f2:05:7a:b8:d7:64:c0:2f:
         58:4f:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:14:29 2026 by rpki-client