Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9761d250-3a78-33b2-82b3-69a27a63e356.roa
File:                     9761d250-3a78-33b2-82b3-69a27a63e356.roa (raw, json)
Hash identifier:          yZeSwNUSwUEIEzTdbQ0QFLHD2EB4dKZRD6Aw9rh906U=
Subject key identifier:   FD:20:38:7E:5E:D0:56:10:C2:0C:CE:34:4C:98:6C:89:C7:4A:52:E0
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624BC0368A573E2EF3BC80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9761d250-3a78-33b2-82b3-69a27a63e356.roa
Signing time:             Thu 30 Jul 2026 18:45:36 +0000
ROA not before:           Thu 30 Jul 2026 18:45:36 +0000
ROA not after:            Wed 28 Oct 2026 18:45:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:167::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4b:c0:36:8a:57:3e:2e:f3:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:36 2026 GMT
            Not After : Oct 28 18:45:36 2026 GMT
        Subject: CN=590a5bfd-6ab2-4710-ae39-a83f3b2e1dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:db:30:85:e4:94:46:7e:e3:01:2b:dc:86:
                    3b:cf:10:b1:ef:8c:87:9d:f9:bc:3b:8a:fc:6b:fa:
                    a5:99:6b:59:43:55:3f:e9:93:ed:92:e6:5f:f9:62:
                    35:ec:4c:ec:08:b0:f3:23:4c:4b:0f:68:bf:31:ae:
                    3d:30:06:5a:e8:75:dc:cf:ed:57:48:35:7e:3e:52:
                    68:73:b7:73:e4:4b:85:62:d2:73:46:43:9f:c7:e2:
                    11:53:96:2e:f7:58:ff:4d:5f:55:3e:dd:55:96:89:
                    4b:36:60:1f:79:65:74:a2:30:94:65:a7:bd:27:df:
                    59:72:0e:87:fd:50:69:52:0a:18:75:6a:e0:f0:1c:
                    30:37:bf:1e:b6:6e:f9:5c:79:2c:24:dc:51:c7:c2:
                    89:6c:5a:84:e5:37:e9:99:92:f6:88:13:f9:ed:df:
                    0d:62:3a:a5:46:a7:a8:a2:a8:d9:97:9d:60:9e:ac:
                    a6:c0:4f:44:ef:c0:22:cf:c5:90:4b:16:0d:a4:20:
                    18:46:78:d6:9d:f6:1d:84:82:d1:69:0c:de:b3:9e:
                    6a:28:4b:5c:08:0c:75:a1:84:0e:9e:ca:04:f2:83:
                    0d:03:23:32:16:a0:3a:aa:90:0b:cc:48:c4:00:4b:
                    66:94:5c:d6:3f:70:12:65:1b:5d:2a:02:4b:ba:54:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:20:38:7E:5E:D0:56:10:C2:0C:CE:34:4C:98:6C:89:C7:4A:52:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9761d250-3a78-33b2-82b3-69a27a63e356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:167::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:33:b1:cf:07:1b:db:b1:9c:2b:6e:ab:cb:e1:f0:6e:81:de:
         a2:96:16:9d:39:1c:f9:ff:46:4b:9f:0b:88:86:6d:29:51:ef:
         7d:e9:cb:9f:12:ab:c6:16:aa:6e:56:da:88:b7:f8:aa:79:47:
         51:28:13:10:76:79:0f:fd:e9:1b:85:24:a3:95:6c:33:a6:df:
         a1:58:5a:fb:14:01:8c:2d:03:d9:b1:24:a3:ae:48:3f:c0:2d:
         33:b5:5a:94:b2:c9:01:bf:5c:60:34:c6:a2:e4:7b:ae:ea:ab:
         db:27:bb:4c:2d:bd:63:3b:62:81:26:c0:0b:0f:65:bb:11:7e:
         58:f3:92:70:fe:ad:10:9c:e7:a8:93:d6:6f:86:24:0a:18:2b:
         7f:d7:65:91:cb:5e:b4:59:79:84:bf:aa:4e:e4:db:e3:4f:a0:
         e0:86:e5:2b:1a:76:50:87:0c:8d:70:e0:2b:fd:12:11:f1:be:
         fd:36:7c:66:ce:23:ca:20:04:bb:8d:a9:bd:69:b3:48:33:02:
         59:73:44:6c:eb:96:04:08:8a:2e:4d:e3:60:f7:2f:fc:b8:b6:
         62:9b:d2:e2:db:28:fc:ac:e7:aa:f7:3a:80:a9:d4:64:04:e1:
         43:3d:48:92:d8:7b:92:4b:62:1d:3c:6b:42:8b:46:46:29:a6:
         1a:55:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:17 2026 by rpki-client