Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a49cc000-339c-35fe-bf35-419a54122486.roa
File:                     a49cc000-339c-35fe-bf35-419a54122486.roa (raw, json)
Hash identifier:          FhhKlw8C+UussTGUNxvVVVj3vuARY9wPWNMDHcwnyts=
Subject key identifier:   08:58:4A:51:88:19:6B:25:83:F7:20:C1:C0:DB:A4:0F:03:99:98:B6
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62756A938C4A2B432532C0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a49cc000-339c-35fe-bf35-419a54122486.roa
Signing time:             Thu 30 Jul 2026 18:45:56 +0000
ROA not before:           Thu 30 Jul 2026 18:45:56 +0000
ROA not after:            Wed 28 Oct 2026 18:45:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3e3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:75:6a:93:8c:4a:2b:43:25:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:56 2026 GMT
            Not After : Oct 28 18:45:56 2026 GMT
        Subject: CN=0ae0090d-fb57-4fd8-acae-85bec5abba1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:dc:87:49:c3:70:d7:22:3f:5b:0d:7c:87:
                    d3:13:45:d6:d9:06:28:d0:f8:e6:a5:02:82:05:e8:
                    00:b6:2c:e0:cc:2c:74:77:67:2f:cc:62:76:45:9d:
                    e2:65:50:75:3f:d0:59:96:92:0e:c5:db:8e:82:d9:
                    d6:40:6e:51:a7:75:11:dc:b3:b2:25:65:e1:ae:3c:
                    a5:0d:22:57:50:5d:68:3d:fa:aa:b5:e9:be:db:64:
                    c6:17:b8:65:ec:5f:88:be:a8:5a:32:92:e1:10:10:
                    c4:cb:ee:1a:10:db:0d:59:4c:3d:8c:49:79:bb:18:
                    9e:14:bc:05:6a:09:e9:2e:6d:56:6a:fa:27:b6:eb:
                    5f:48:6f:1a:c3:83:80:bb:a9:5c:a3:de:9f:67:13:
                    20:0b:08:ab:9a:24:f3:7f:b0:45:87:a6:84:88:db:
                    03:3c:ef:02:1f:4a:98:06:1d:7e:d2:7e:c0:c3:f0:
                    36:94:3a:4c:3f:2e:28:81:33:21:d1:93:3c:d0:98:
                    5f:23:2d:fe:dc:d0:d7:9e:d9:84:0d:14:8c:83:16:
                    50:de:1b:f3:2d:2f:8e:05:4a:6a:81:a1:9d:55:9b:
                    59:0e:e1:6b:56:34:bd:d2:dc:35:fe:bf:fb:99:35:
                    57:94:3c:0d:7e:01:6d:77:77:52:d7:92:63:03:a5:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:4A:51:88:19:6B:25:83:F7:20:C1:C0:DB:A4:0F:03:99:98:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/a49cc000-339c-35fe-bf35-419a54122486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3e3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b5:58:47:13:b5:b2:bf:f7:42:c7:22:5f:d9:04:ce:a0:42:
         91:d8:2d:a1:8c:26:c6:73:59:51:5f:17:5e:46:a7:63:69:2a:
         8d:6d:fc:9b:b4:ec:12:63:f6:82:8d:07:21:d1:88:d1:a8:c7:
         79:75:94:3d:92:dd:76:45:00:64:c2:12:21:ad:c9:df:8f:bb:
         0d:ec:ea:a7:6c:86:77:15:ae:fa:76:de:d1:9e:bc:9a:63:0e:
         8b:38:20:b8:86:78:74:b2:3f:96:2d:64:1f:e0:c3:18:58:aa:
         25:e0:79:85:41:dc:a7:54:7f:64:73:ed:c9:e7:f8:b6:5c:18:
         bd:db:77:f4:a7:00:89:ec:b5:04:4a:47:b0:d5:a3:f3:bb:5a:
         3b:25:ed:03:8f:4d:ed:c9:2e:60:a5:0a:90:94:d1:8b:a4:d4:
         ad:5b:16:3a:85:3e:39:f1:c9:4a:37:f4:56:be:db:8a:fa:80:
         b6:ab:b0:85:e9:75:a2:9b:c0:77:f7:97:47:8c:5c:97:b0:e3:
         07:68:77:b0:bc:d9:a4:d5:4e:42:8a:6e:a0:e3:d1:c7:96:8d:
         55:2e:5b:29:28:de:ba:c9:57:b2:ab:33:4d:8f:97:cf:bb:3f:
         41:ca:0b:8b:5b:23:fd:1b:d8:fc:80:f7:e3:b6:da:de:50:31:
         88:4c:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:24 2026 by rpki-client