Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9337c11c-5667-3c97-a489-86f964aaec3e.roa
File:                     9337c11c-5667-3c97-a489-86f964aaec3e.roa (raw, json)
Hash identifier:          GhM3FyjsARdH0UccvkJqYaV6BQW66bm9M0qfajpoK20=
Subject key identifier:   D6:A4:F7:70:F6:EC:CD:1C:65:64:F9:74:B6:BB:C8:06:9C:3D:4D:3F
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623FE8C7AF6084FC7C3380
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9337c11c-5667-3c97-a489-86f964aaec3e.roa
Signing time:             Thu 30 Jul 2026 18:45:31 +0000
ROA not before:           Thu 30 Jul 2026 18:45:31 +0000
ROA not after:            Wed 28 Oct 2026 18:45:31 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:95::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3f:e8:c7:af:60:84:fc:7c:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:31 2026 GMT
            Not After : Oct 28 18:45:31 2026 GMT
        Subject: CN=314b853e-d657-441c-8605-872d7f27ba62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:1b:4f:ac:8d:30:5e:46:2b:ad:e2:48:f3:
                    fc:db:17:26:3c:09:aa:58:a6:07:61:b0:6b:46:41:
                    f1:d0:a7:2c:29:68:b3:24:bc:9e:90:03:a7:27:aa:
                    a5:08:be:4c:91:3f:92:72:8d:a0:f7:37:0b:68:a1:
                    5f:a2:29:89:d8:ce:85:14:99:ac:46:d0:23:88:73:
                    2f:f8:a4:99:dc:3e:33:e6:bb:80:73:67:de:60:86:
                    12:5c:53:08:7a:85:88:21:d5:de:b1:4d:3d:81:ad:
                    68:2c:57:41:7b:5b:66:cf:0a:35:97:66:7a:3f:72:
                    b6:81:3c:96:cf:79:29:b0:4d:91:74:7d:81:0f:e1:
                    69:a6:96:84:8c:13:53:09:d7:33:5c:11:f2:94:84:
                    f4:b8:b2:e6:e2:6c:28:bc:b0:8e:24:84:53:61:32:
                    c7:d2:30:0f:a8:53:65:50:03:81:d4:77:75:9e:02:
                    05:f2:74:3c:be:d5:1f:1b:b3:bf:ec:bf:21:52:0f:
                    7f:8e:c1:76:df:1b:65:b6:d7:6d:ea:61:92:12:5a:
                    02:4e:96:69:04:a4:94:65:98:4b:0d:c8:b3:b9:08:
                    ba:7e:89:c4:c3:0c:64:17:c8:2c:5c:ce:1b:5b:5b:
                    5b:0c:7a:5c:8c:ce:c1:25:03:32:7e:0b:eb:4a:ed:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A4:F7:70:F6:EC:CD:1C:65:64:F9:74:B6:BB:C8:06:9C:3D:4D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9337c11c-5667-3c97-a489-86f964aaec3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:95::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:eb:50:ae:2f:fa:49:28:5b:95:16:1b:a8:79:39:d4:0e:
         67:89:6d:8a:a4:b0:8b:20:4c:82:42:33:46:4c:46:9f:ed:5c:
         14:1c:62:83:97:b4:91:cd:4d:68:a5:97:5f:58:b6:44:7b:71:
         f7:a1:4e:7f:b4:f2:a2:55:cd:4e:3b:e8:27:8a:63:0d:30:85:
         4a:0c:8f:97:61:83:96:54:e5:ec:cc:c9:f1:4a:84:9d:ee:70:
         c4:c2:61:2f:16:7e:76:68:6b:63:ef:4b:2f:e6:1e:45:9b:79:
         72:53:80:73:3a:89:97:9b:23:69:36:91:19:f5:70:59:dd:7b:
         9d:d4:1c:f2:4b:9d:85:dc:eb:7c:a7:fd:d9:74:df:01:5a:4b:
         68:ff:39:73:3e:ba:f8:42:f3:13:13:6b:a4:ff:7f:83:c1:53:
         f2:ee:56:5f:83:4f:ea:a0:18:6a:0e:16:5d:b9:5d:14:bf:d3:
         3a:8a:8a:e3:9b:2c:fb:e0:0e:b8:f2:83:27:cf:08:c9:41:2d:
         3b:ff:74:e8:38:6a:91:38:71:84:a1:dc:bb:88:8b:70:1f:d5:
         b1:92:70:f2:a4:79:c2:26:63:7a:d1:ba:16:9b:e5:d1:79:15:
         18:bc:f8:b2:39:fc:40:dc:22:48:ab:dc:78:4e:28:a3:ed:70:
         e6:d3:72:dc
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYj/ox69ghPx8M4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDUzMVoXDTI2MTAyODE4NDUzMVowLzEtMCsGA1UEAxMk
MzE0Yjg1M2UtZDY1Ny00NDFjLTg2MDUtODcyZDdmMjdiYTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTsbT6yNMF5GK63iSPP82xcmPAmqWKYHYbBr
RkHx0KcsKWizJLyekAOnJ6qlCL5MkT+Sco2g9zcLaKFfoimJ2M6FFJmsRtAjiHMv
+KSZ3D4z5ruAc2feYIYSXFMIeoWIIdXesU09ga1oLFdBe1tmzwo1l2Z6P3K2gTyW
z3kpsE2RdH2BD+FpppaEjBNTCdczXBHylIT0uLLm4mwovLCOJIRTYTLH0jAPqFNl
UAOB1Hd1ngIF8nQ8vtUfG7O/7L8hUg9/jsF23xtlttdt6mGSEloCTpZpBKSUZZhL
DcizuQi6fonEwwxkF8gsXM4bW1tbDHpcjM7BJQMyfgvrSu2shQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFNak93D27M0cZWT5dLa7yAacPU0/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvOTMzN2MxMWMtNTY2Ny0z
Yzk3LWE0ODktODZmOTY0YWFlYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AJUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEANczrUK4v+kkoW5UWG6h5OdQOZ4ltiqSwiyBMgkIzRkxGn+1c
FBxig5e0kc1NaKWXX1i2RHtx96FOf7TyolXNTjvoJ4pjDTCFSgyPl2GDllTl7MzJ
8UqEne5wxMJhLxZ+dmhrY+9LL+YeRZt5clOAczqJl5sjaTaRGfVwWd17ndQc8kud
hdzrfKf92XTfAVpLaP85cz66+ELzExNrpP9/g8FT8u5WX4NP6qAYag4WXbldFL/T
OoqK45ss++AOuPKDJ88IyUEtO/906DhqkThxhKHcu4iLcB/VsZJw8qR5wiZjetG6
Fpvl0XkVGLz4sjn8QNwiSKvceE4oo+1w5tNy3A==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:16 2026 by rpki-client