Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a3b6603a-1ba8-33cc-8007-25cf1258e099.roa
File:                     a3b6603a-1ba8-33cc-8007-25cf1258e099.roa (raw, json)
Hash identifier:          4V27WhNYdyl7F186Vi4pLuGO2YwEhxSsU3/LocmlxGo=
Subject key identifier:   D1:5C:D9:B9:F4:A6:35:F4:F7:69:56:0F:02:93:3C:7F:F6:2A:E6:F3
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6259EC7540E0B8C230FF30
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a3b6603a-1ba8-33cc-8007-25cf1258e099.roa
Signing time:             Thu 30 Jul 2026 18:45:43 +0000
ROA not before:           Thu 30 Jul 2026 18:45:43 +0000
ROA not after:            Wed 28 Oct 2026 18:45:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:251::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:59:ec:75:40:e0:b8:c2:30:ff:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:43 2026 GMT
            Not After : Oct 28 18:45:43 2026 GMT
        Subject: CN=1e1fc410-4f92-4bb8-b83f-4461a98aad33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:4e:b5:34:a7:11:4a:98:29:10:99:26:b3:
                    aa:f6:dd:88:fe:35:11:21:c9:d9:ca:4b:3c:ee:d6:
                    77:0c:a7:fa:79:06:fd:d6:ba:9f:d8:9c:64:e5:87:
                    41:db:fd:84:db:3f:90:02:6a:5c:5d:15:7f:91:1c:
                    30:c1:fa:e1:d7:a9:70:f1:cc:26:17:48:a6:ea:9a:
                    53:43:06:fa:55:31:72:68:ca:3f:23:d4:c1:8e:27:
                    d0:b5:a1:e2:f9:02:b0:9b:0d:3c:94:a1:e2:10:9a:
                    36:f1:db:67:bd:e2:f8:4a:7d:c8:b7:e0:b6:f7:19:
                    ca:42:44:b8:f0:cb:c2:a7:7d:88:58:b8:ba:63:8e:
                    e7:a9:65:d1:01:44:ad:53:8e:54:18:37:a3:db:26:
                    2d:2a:cd:1b:ae:74:6b:39:59:2a:2a:5e:1c:00:6b:
                    d4:66:eb:8f:24:5f:ad:6c:e4:5a:29:76:3f:c4:7e:
                    ba:fd:91:30:2d:4a:6e:c3:f0:3f:32:2e:fa:50:83:
                    74:a5:69:2b:ce:bd:31:71:c1:bc:fd:6f:4c:e8:73:
                    96:26:c1:03:e7:44:8e:c7:4a:f4:67:f1:54:8f:00:
                    f1:c7:3f:99:64:8c:73:95:7b:4b:bb:b3:5e:29:e3:
                    e9:de:52:6f:5a:a3:bc:25:0a:2c:56:a1:2f:73:1f:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5C:D9:B9:F4:A6:35:F4:F7:69:56:0F:02:93:3C:7F:F6:2A:E6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a3b6603a-1ba8-33cc-8007-25cf1258e099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:251::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:6c:31:62:d1:cb:99:9c:4d:42:27:99:1b:63:7c:93:06:
         50:92:df:d9:ad:94:e8:42:db:24:c0:98:da:6f:83:81:27:c2:
         47:3f:68:0c:21:1d:83:0b:72:fd:bd:17:be:67:8a:45:05:97:
         00:74:88:23:db:c1:a2:f2:e8:5e:1d:e2:4c:63:d3:c2:1d:bb:
         84:2a:e0:00:e6:5f:b2:7f:47:47:53:19:73:75:6d:d0:63:71:
         e7:35:26:28:d5:31:80:2b:04:e8:0a:dd:09:8b:61:b0:b0:db:
         06:1e:87:e6:f5:c3:ce:bb:48:0d:34:e6:ee:1c:20:df:71:a2:
         f5:4c:9d:93:31:f4:4f:9e:4c:8c:10:01:20:4b:8c:6d:af:45:
         24:f2:e0:6c:ca:6e:94:8b:62:13:6c:0c:6e:cc:6e:6a:10:cd:
         d0:bf:f3:10:bb:e7:96:65:65:eb:b5:d4:f4:fd:fe:e6:fc:7c:
         c8:a3:aa:5b:6d:09:66:e3:43:ae:03:68:a2:3f:c6:2d:e6:ab:
         29:8b:d5:9a:51:3a:6b:f6:8f:cd:e5:80:a9:75:05:6a:90:09:
         41:65:d4:14:c1:41:73:08:02:61:9a:f4:e6:c2:9a:64:fb:61:
         03:a2:4d:19:12:17:c0:0f:dd:3b:dd:d0:7e:e7:33:51:75:45:
         ae:af:4a:cc
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYlnsdUDguMIw/zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0M1oXDTI2MTAyODE4NDU0M1owLzEtMCsGA1UEAxMk
MWUxZmM0MTAtNGY5Mi00YmI4LWI4M2YtNDQ2MWE5OGFhZDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3hOtTSnEUqYKRCZJrOq9t2I/jURIcnZyks8
7tZ3DKf6eQb91rqf2Jxk5YdB2/2E2z+QAmpcXRV/kRwwwfrh16lw8cwmF0im6ppT
Qwb6VTFyaMo/I9TBjifQtaHi+QKwmw08lKHiEJo28dtnveL4Sn3It+C29xnKQkS4
8MvCp32IWLi6Y47nqWXRAUStU45UGDej2yYtKs0brnRrOVkqKl4cAGvUZuuPJF+t
bORaKXY/xH66/ZEwLUpuw/A/Mi76UIN0pWkrzr0xccG8/W9M6HOWJsED50SOx0r0
Z/FUjwDxxz+ZZIxzlXtLu7NeKePp3lJvWqO8JQosVqEvcx+pIwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFNFc2bn0pjX092lWDwKTPH/2KubzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvYTNiNjYwM2EtMWJhOC0z
M2NjLTgwMDctMjVjZjEyNThlMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AlEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEALQJsMWLRy5mcTUInmRtjfJMGUJLf2a2U6ELbJMCY2m+DgSfC
Rz9oDCEdgwty/b0XvmeKRQWXAHSII9vBovLoXh3iTGPTwh27hCrgAOZfsn9HR1MZ
c3Vt0GNx5zUmKNUxgCsE6ArdCYthsLDbBh6H5vXDzrtIDTTm7hwg33Gi9UydkzH0
T55MjBABIEuMba9FJPLgbMpulItiE2wMbsxuahDN0L/zELvnlmVl67XU9P3+5vx8
yKOqW20JZuNDrgNooj/GLearKYvVmlE6a/aPzeWAqXUFapAJQWXUFMFBcwgCYZr0
5sKaZPthA6JNGRIXwA/dO93QfuczUXVFrq9KzA==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:42 2026 by rpki-client