Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/936ad607-f3fc-37c0-92ac-0dca7a6a81ae.roa
File:                     936ad607-f3fc-37c0-92ac-0dca7a6a81ae.roa (raw, json)
Hash identifier:          TUCy/CwRwuVgEXVkJ7Wqn9Gg0C6fQ975yneu4lRIJiM=
Subject key identifier:   4F:C3:8E:01:32:CB:07:C6:BC:54:0E:36:CB:D4:34:78:6B:E3:85:F1
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6253A983026D850BF23A00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/936ad607-f3fc-37c0-92ac-0dca7a6a81ae.roa
Signing time:             Thu 30 Jul 2026 18:45:40 +0000
ROA not before:           Thu 30 Jul 2026 18:45:40 +0000
ROA not after:            Wed 28 Oct 2026 18:45:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1ec::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:53:a9:83:02:6d:85:0b:f2:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:40 2026 GMT
            Not After : Oct 28 18:45:40 2026 GMT
        Subject: CN=4e76e9b9-87a3-49c1-a0ff-419468b6e63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:fa:cb:b0:6b:81:4c:4b:35:d6:d1:40:b6:
                    1f:58:83:15:41:48:5a:ca:78:2a:d0:d9:ba:0e:e8:
                    61:9c:9b:23:37:b2:d3:52:f1:9b:d0:16:88:07:a9:
                    1f:e3:32:cc:4c:1e:b0:06:f4:aa:4d:7e:b0:e1:1f:
                    ba:27:1d:5d:dd:7c:b2:59:e7:1e:b3:a3:b0:95:65:
                    d4:42:76:a9:13:31:00:8d:21:65:34:f3:90:ed:c2:
                    bf:d4:87:66:6b:6b:86:ca:31:11:92:11:56:1c:77:
                    61:4b:99:17:75:10:42:05:2d:a1:cb:c2:bd:f0:13:
                    16:a7:8f:1e:05:e9:08:62:20:bf:8f:5e:d3:af:2c:
                    e3:0b:48:cb:d8:9f:ec:5a:c2:e6:1b:c7:06:f9:a3:
                    55:27:46:51:51:9f:0e:cf:cb:1f:56:9f:d7:d9:2f:
                    fc:19:d1:ba:46:bc:df:c1:67:25:a5:67:e0:75:a9:
                    bc:fb:71:5c:f3:06:43:69:21:ad:2d:a8:ad:58:1d:
                    7c:3f:e4:ff:7e:a2:03:48:d8:33:3d:93:65:f3:80:
                    ee:d9:07:e7:c7:68:d1:24:eb:25:da:ba:16:cf:c9:
                    58:2d:c8:6c:88:31:fc:2c:5d:af:dc:9e:f4:fd:6b:
                    54:68:37:8a:c5:74:37:b4:a7:56:de:6d:63:9c:1b:
                    c7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C3:8E:01:32:CB:07:C6:BC:54:0E:36:CB:D4:34:78:6B:E3:85:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/936ad607-f3fc-37c0-92ac-0dca7a6a81ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1ec::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:95:d4:1d:e0:35:8b:1a:dd:c7:fb:ba:f6:c9:d8:6d:de:ff:
         56:3b:fa:3e:48:4d:85:2c:2e:76:9f:20:01:45:e4:12:61:a7:
         31:5a:b7:8b:d8:db:e0:09:cb:1a:c7:f2:40:ca:6a:65:f6:0f:
         66:39:98:aa:1d:6b:31:67:6e:f6:01:b1:a2:22:82:f1:6e:a4:
         85:f3:b5:3d:ed:2f:ac:c0:d6:88:ea:0a:30:e4:9e:b7:43:87:
         dc:b6:3c:5b:26:7c:ed:95:1c:54:ed:27:88:3d:a9:33:aa:87:
         ce:46:4c:1f:c5:b0:92:00:08:cd:14:38:c5:58:c7:19:39:f4:
         7e:02:a1:d7:0a:2d:e7:d1:5c:01:11:84:7e:e0:67:d6:87:18:
         cd:81:d3:a9:72:b2:c3:78:bc:98:ac:ce:a4:d7:9a:ee:1a:db:
         10:8b:5c:c8:e3:33:16:dd:d9:f3:ae:08:46:9b:3e:08:e6:c0:
         33:03:90:99:1c:7c:51:5a:0c:34:fb:55:13:74:9d:7b:7a:24:
         8f:de:4b:42:99:45:6b:4d:64:33:15:4b:23:59:c4:82:01:69:
         5e:08:b8:07:4f:4e:d3:2c:7a:53:54:6a:7b:03:59:4b:11:e9:
         d8:ac:e5:f1:f0:62:e5:95:22:37:30:bc:39:4b:64:bc:c5:e0:
         9d:31:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:58 2026 by rpki-client