Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a2ed5412-21d5-3b59-a18d-27873b3d743c.roa
File:                     a2ed5412-21d5-3b59-a18d-27873b3d743c.roa (raw, json)
Hash identifier:          v72gP4K+KxAAHwtyXuXPiP4VAA+G26zjQPv5c7sX6zg=
Subject key identifier:   21:95:1F:07:51:51:86:CF:B3:98:F0:06:03:38:C1:A9:E1:95:60:26
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62461FD1373C6957806EA0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a2ed5412-21d5-3b59-a18d-27873b3d743c.roa
Signing time:             Thu 30 Jul 2026 18:45:33 +0000
ROA not before:           Thu 30 Jul 2026 18:45:33 +0000
ROA not after:            Wed 28 Oct 2026 18:45:33 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:105::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:46:1f:d1:37:3c:69:57:80:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:33 2026 GMT
            Not After : Oct 28 18:45:33 2026 GMT
        Subject: CN=7e8d0793-d6d8-468b-ba7d-f709b20ac8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:11:5f:05:63:61:8f:5c:99:c1:bf:9b:17:
                    60:50:c8:9d:5d:96:4e:7f:fc:18:a0:de:f9:8f:44:
                    51:25:2b:1f:12:dd:66:0a:32:44:bd:c5:78:3b:6a:
                    53:66:b9:19:ab:0e:84:79:35:83:c1:29:3a:b1:4e:
                    d0:06:e7:11:4c:38:07:48:f5:7c:5b:37:d9:18:43:
                    08:25:43:41:f6:15:e7:8c:ed:ad:13:2a:c5:7b:60:
                    3c:fd:9b:da:85:51:90:82:6b:df:26:05:f3:86:4b:
                    fa:cd:2d:a3:79:38:df:1b:61:b1:88:d1:ce:76:a1:
                    b3:e6:8e:db:85:c9:84:52:fc:b0:4a:81:40:d1:37:
                    9e:7f:1f:25:7c:e2:c6:4c:02:dc:70:61:12:e2:e2:
                    8d:dc:99:92:8e:5f:8a:2b:ab:fd:b9:8a:23:42:c2:
                    65:c2:c2:08:b7:f3:a2:d5:40:00:76:09:b4:0d:0b:
                    9b:a0:d0:c3:70:72:a3:fe:a2:cd:28:47:52:4a:fc:
                    c2:c2:5a:1a:ce:ad:54:ea:bd:00:d8:9c:55:0d:07:
                    39:6b:79:a3:1a:2b:f9:d2:9b:47:a7:46:26:21:e6:
                    40:0a:dd:8a:f5:4e:01:25:f5:33:54:47:dd:2d:22:
                    42:45:1b:87:5f:06:40:0d:2b:29:47:90:47:dc:fc:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:1F:07:51:51:86:CF:B3:98:F0:06:03:38:C1:A9:E1:95:60:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a2ed5412-21d5-3b59-a18d-27873b3d743c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:105::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:7e:0c:4b:bf:de:9f:3e:da:75:9b:11:90:71:0b:cb:67:
         70:a7:b2:eb:d3:96:e7:db:a5:9f:12:6f:a9:ba:5b:96:1d:3c:
         df:72:83:d3:9d:3c:82:aa:2e:9a:09:a1:8f:60:f3:ee:29:d1:
         8f:e7:70:b9:62:73:00:e9:45:ae:2c:ec:29:eb:37:92:d6:a5:
         0d:a6:aa:23:bb:1e:18:37:bf:6c:b5:43:b7:56:bc:ae:54:24:
         0d:81:e3:23:59:b9:68:0d:b9:b7:5d:41:0b:de:09:60:a5:9c:
         7e:a0:f1:ea:2e:81:ca:62:e1:ec:c9:f1:41:c5:cb:bf:98:53:
         d6:31:97:16:e8:45:2f:95:d0:ac:7e:34:77:b2:0b:b2:0d:1e:
         be:98:4a:ae:26:e2:bb:7e:5b:e0:75:54:9d:12:5e:f5:ed:61:
         28:16:2d:e6:39:28:74:ac:89:1c:02:c7:8b:74:62:f7:59:42:
         75:c7:d4:4b:e8:de:15:fc:08:39:a9:af:22:9a:72:28:ca:93:
         0b:4d:21:b0:f5:3f:85:aa:bf:e0:b9:de:8f:7e:80:b9:ed:e8:
         a9:1f:98:33:1b:4d:24:74:5a:fc:6f:7d:54:b8:64:ce:c5:e7:
         85:a1:82:68:fc:7c:b5:c4:84:bb:1d:8b:40:69:4d:36:ae:d1:
         29:b6:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:43 2026 by rpki-client