Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/99d84609-b118-35c3-803d-f2d82458be2f.roa
File:                     99d84609-b118-35c3-803d-f2d82458be2f.roa (raw, json)
Hash identifier:          m1SqfQcjQMe6uJETQ3wSPzBG9OW66qbP78WDa3HJcu8=
Subject key identifier:   5B:FA:5A:08:D5:53:E7:BC:40:FA:D1:40:66:31:CE:6B:64:E0:FB:73
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6249C66A07806C5941F940
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/99d84609-b118-35c3-803d-f2d82458be2f.roa
Signing time:             Thu 30 Jul 2026 18:45:35 +0000
ROA not before:           Thu 30 Jul 2026 18:45:35 +0000
ROA not after:            Wed 28 Oct 2026 18:45:35 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:145::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:49:c6:6a:07:80:6c:59:41:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:35 2026 GMT
            Not After : Oct 28 18:45:35 2026 GMT
        Subject: CN=55d244f3-c129-409c-8f7f-8ca5b92b065c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:94:c5:fa:7f:71:88:0b:e8:3a:eb:ec:9a:
                    9c:a0:5d:e5:27:9b:dc:d8:f6:be:52:ff:1d:3a:f8:
                    75:2a:fd:06:0a:42:6c:db:0a:90:7e:fe:0b:fb:9f:
                    dd:63:30:79:f0:b6:1f:a7:9f:31:7a:39:7d:ad:68:
                    84:a5:c6:72:27:68:d8:29:29:27:21:30:7f:88:ee:
                    50:59:96:99:d1:e6:ba:46:5d:52:94:0d:d3:51:fc:
                    69:e9:3b:08:b6:d1:65:43:9b:c8:fa:02:9b:ff:a7:
                    8e:ce:bf:3d:f6:08:15:53:8e:6c:2c:a7:cb:6e:a0:
                    b0:1a:71:2e:08:d7:17:91:dd:95:7f:69:55:aa:cd:
                    43:f5:68:97:6f:2a:76:ed:12:97:5b:2a:3f:5b:80:
                    95:04:9d:ca:a7:19:76:93:14:73:23:ff:69:b5:1f:
                    ef:1a:dd:9b:6a:11:df:b5:58:07:c0:ff:36:e1:09:
                    e2:01:d1:a0:c7:7e:86:85:82:57:ce:5d:14:87:c6:
                    bf:48:dd:8f:02:e9:d8:1f:35:6d:7f:26:95:0f:a0:
                    da:3e:0c:bc:04:56:ab:e8:08:e8:15:01:3a:4c:63:
                    98:68:26:e0:f8:cd:f4:a1:cf:d3:b2:b5:13:e3:e0:
                    6b:38:56:e3:cd:1d:42:a9:45:11:39:48:ee:40:fd:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:5A:08:D5:53:E7:BC:40:FA:D1:40:66:31:CE:6B:64:E0:FB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/99d84609-b118-35c3-803d-f2d82458be2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:145::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:52:2d:e3:27:5f:66:6d:98:ae:3c:67:22:42:37:06:7f:
         a7:87:cf:df:32:8a:d2:09:81:d2:d5:ad:a2:15:85:64:d8:03:
         4f:2f:1c:e5:d3:47:be:cf:86:79:14:08:34:f3:72:8f:44:0a:
         54:ff:52:b4:a5:10:67:83:e8:6f:ef:10:ed:07:3d:e2:bf:db:
         b1:06:b6:10:8b:55:4e:45:b8:4e:35:ff:56:71:a5:c7:fd:72:
         3a:4b:42:fc:bd:0d:25:6a:38:26:35:23:04:07:6d:9a:9f:fd:
         98:96:3b:65:69:f1:5c:d4:17:c2:45:51:66:95:b1:0f:ef:84:
         03:9d:59:20:6e:32:2c:9d:00:0c:73:46:69:21:ae:da:9f:d9:
         88:ea:7e:4f:cd:56:75:c2:50:a7:a8:4b:66:dd:5f:22:a2:fd:
         15:84:2e:e7:1c:e4:27:44:94:1f:74:f9:ed:f7:f1:35:68:8d:
         cb:35:19:ad:63:94:19:0e:59:28:d1:5b:04:4a:80:7e:cd:4c:
         32:23:87:ce:93:b6:af:08:90:76:cb:05:2a:e6:0d:06:e2:32:
         e7:13:01:58:bf:17:a2:84:e5:0c:86:e1:d1:8b:e7:e0:e8:5d:
         0d:3f:23:63:ce:4e:62:e1:51:65:32:e1:2c:cf:a0:d3:d3:a4:
         ec:29:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:20:11 2026 by rpki-client