Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/ab677d1c-15e8-31ab-8e59-93f83a16a158.roa
File:                     ab677d1c-15e8-31ab-8e59-93f83a16a158.roa (raw, json)
Hash identifier:          UHjXlQ9gPgkC23iDnBmA6jA/E2vyw71sFZgng//ShpI=
Subject key identifier:   F9:2D:3D:E1:3D:7B:E6:42:D1:41:45:4E:27:5E:AC:26:A0:CB:25:CF
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624BB191C28BFB3FF5D480
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/ab677d1c-15e8-31ab-8e59-93f83a16a158.roa
Signing time:             Thu 30 Jul 2026 18:45:36 +0000
ROA not before:           Thu 30 Jul 2026 18:45:36 +0000
ROA not after:            Wed 28 Oct 2026 18:45:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:166::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4b:b1:91:c2:8b:fb:3f:f5:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:36 2026 GMT
            Not After : Oct 28 18:45:36 2026 GMT
        Subject: CN=cd310e9f-5e4c-4979-bc99-8b47c4eca0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:7d:16:a0:fd:1d:a3:f8:a5:00:29:70:84:
                    0d:fb:39:74:2c:fb:4d:9f:ee:b2:9f:8e:80:32:c8:
                    50:4d:9a:48:cb:c6:51:85:86:1b:91:25:d6:0c:2e:
                    76:0b:75:4b:07:7f:00:10:f4:9b:d5:3e:23:89:25:
                    85:d5:c5:3a:6a:4f:44:df:de:ec:b8:0a:3f:55:2d:
                    cb:fc:6a:ae:40:90:8b:81:33:2b:60:37:e9:8e:72:
                    11:95:45:79:c1:a1:30:90:d8:27:29:2d:92:8f:06:
                    0c:c7:26:f1:48:6a:65:2b:89:93:3d:92:5f:ec:9a:
                    e0:68:a3:83:e6:1a:39:ec:78:97:91:b4:cb:47:79:
                    1b:4b:73:75:80:1a:23:d8:bf:ec:69:ef:18:5b:19:
                    b8:d2:e6:8a:34:cd:32:25:fa:52:91:81:e7:c7:39:
                    c5:0e:67:dc:01:29:5a:f5:0f:3d:e7:8b:38:db:51:
                    94:1a:38:63:8d:58:9f:1d:57:0c:00:9c:42:15:42:
                    07:cd:00:8d:e9:34:97:84:5a:b3:c2:77:4e:e9:12:
                    1e:0c:8a:83:cc:34:48:4f:34:fc:7c:8e:51:4b:84:
                    2e:49:27:d9:b9:4d:a2:26:3b:03:33:8b:41:10:86:
                    82:7e:f7:86:9c:13:b4:57:b4:fb:e6:27:1a:23:43:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:3D:E1:3D:7B:E6:42:D1:41:45:4E:27:5E:AC:26:A0:CB:25:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/ab677d1c-15e8-31ab-8e59-93f83a16a158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:166::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6d:c1:bc:2b:01:6a:ba:15:30:cd:64:ac:09:a2:8c:aa:d1:
         18:f1:16:40:ad:f4:82:e3:14:66:a9:04:c5:0c:68:ce:48:05:
         2b:21:9a:86:7f:60:1a:de:1a:02:e7:d2:6c:2e:cd:14:e0:23:
         a1:a4:12:2f:76:26:b8:fa:fc:b1:5f:50:f3:2a:45:2a:cc:c7:
         6b:16:a0:95:a3:99:50:8e:0b:a0:5d:8d:11:93:30:a3:74:1c:
         2a:60:fe:63:8b:f7:41:2f:c7:cc:29:53:1c:b5:24:f7:f4:b6:
         da:e7:3d:a0:50:c7:ef:95:26:54:b6:55:8e:5b:e8:bc:0b:f6:
         cc:c4:23:b4:4b:0a:1a:26:3c:05:e6:3c:5e:78:d3:36:32:36:
         00:d9:46:0d:ad:be:e7:30:a2:05:7f:ee:c4:8d:1c:22:25:e3:
         e4:06:43:cd:a7:32:e6:1e:ac:79:62:76:94:7d:26:92:06:ae:
         6e:e8:e9:a4:8c:99:b1:51:96:16:d1:8d:00:9c:6e:1a:94:36:
         a6:99:c0:c4:c5:84:e7:c9:5e:58:68:16:e2:65:a7:d1:9e:72:
         16:ff:71:14:f5:b7:ae:49:ab:2e:16:aa:b0:b7:8a:1c:81:1d:
         f5:5f:a6:cd:54:7f:ef:29:93:04:0b:ac:f0:43:5d:63:92:a8:
         65:f0:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:42 2026 by rpki-client