Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/ab7cce21-dde7-31bf-a9d6-f3c78ca70695.roa
File:                     ab7cce21-dde7-31bf-a9d6-f3c78ca70695.roa (raw, json)
Hash identifier:          jer1UkUE85DgdZVWxOSUoO8fHJ/c3stlEJYZY+ChSng=
Subject key identifier:   2C:B5:DB:E5:7B:2D:01:D8:FB:8F:D4:F6:FB:A6:38:85:C2:3C:47:AA
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626E68350AA8271F281580
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/ab7cce21-dde7-31bf-a9d6-f3c78ca70695.roa
Signing time:             Thu 30 Jul 2026 18:45:53 +0000
ROA not before:           Thu 30 Jul 2026 18:45:53 +0000
ROA not after:            Wed 28 Oct 2026 18:45:53 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:380::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:6e:68:35:0a:a8:27:1f:28:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:53 2026 GMT
            Not After : Oct 28 18:45:53 2026 GMT
        Subject: CN=4f8ac97e-d7d9-4484-86b3-fdabfbca7260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:e7:b5:56:9e:2d:7f:19:cf:f8:73:ff:83:
                    35:14:b4:54:a1:82:5b:00:e1:15:0e:1e:49:e3:d6:
                    45:ac:41:8a:78:26:a8:11:cc:0d:ee:1a:ef:c1:d6:
                    9c:55:5e:17:bb:f1:07:e9:2d:a7:13:0f:f0:59:08:
                    2e:b9:8f:5c:47:71:e0:67:5e:3d:1f:42:0a:6c:86:
                    fa:90:46:95:c4:2f:00:d4:5f:a2:26:ed:26:52:a2:
                    ea:cc:48:e6:1f:e4:57:03:50:63:4d:84:bd:e3:da:
                    aa:86:b8:f8:06:a0:bd:b9:a7:b6:99:40:3b:b7:75:
                    db:71:5a:1c:f2:01:62:ad:49:d8:b4:40:94:be:b1:
                    e5:7d:da:84:20:37:d1:98:5b:ca:dc:c4:7b:42:db:
                    bc:f0:33:17:44:67:c0:f2:9e:59:b6:3e:95:9f:c3:
                    86:e0:f6:a2:3c:65:ab:04:93:e5:40:45:9e:9c:86:
                    e3:5b:8b:f6:fe:3b:97:7a:2e:bd:1d:a2:57:d9:25:
                    44:4e:af:0e:a2:56:d0:38:2f:de:fb:29:d0:3b:f4:
                    11:33:8d:9b:8e:b2:83:f1:5d:7e:ad:c0:45:28:9d:
                    d4:fb:28:5c:bd:1e:a3:5c:cd:3f:98:1b:d4:7c:50:
                    01:01:68:44:92:b0:aa:b6:a8:af:4b:76:c5:9e:a8:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:DB:E5:7B:2D:01:D8:FB:8F:D4:F6:FB:A6:38:85:C2:3C:47:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/ab7cce21-dde7-31bf-a9d6-f3c78ca70695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:380::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:30:3c:47:0e:3a:49:54:21:b5:62:c8:21:0b:df:c7:26:
         96:b9:be:47:60:90:46:31:8f:95:e7:5a:2a:9a:85:03:18:02:
         87:43:65:d9:3c:20:7f:74:69:5e:33:2f:03:0c:d4:61:6e:0e:
         57:b3:9c:18:e9:c5:18:e2:44:61:d9:d9:9b:8e:37:a6:a1:db:
         9e:d4:81:3e:14:5d:28:c5:f9:c6:61:5c:8c:cd:65:51:ae:a2:
         87:a9:52:5e:4f:df:d4:30:25:e7:01:2b:c0:85:15:4f:ec:9b:
         a0:bc:ff:da:57:ef:e1:06:1b:71:a1:f1:28:4a:fb:a2:4e:fc:
         6c:9d:61:eb:e0:1f:71:43:f1:2f:71:96:ef:c6:57:cb:fb:ba:
         34:d8:d5:8c:25:df:12:7f:d1:01:f3:e0:ac:a8:54:14:12:ed:
         ee:55:13:18:d9:62:d3:68:df:54:00:3e:77:3e:e7:84:a2:6a:
         41:57:2a:fc:4a:dc:b8:9d:06:99:f2:0e:db:bb:14:95:44:ff:
         1c:85:bb:5d:91:be:9f:b2:ac:dc:b5:e3:c1:9d:f5:61:0c:9b:
         f8:a4:65:bd:fc:31:3c:4d:35:31:5e:7e:f5:8a:65:c9:84:d1:
         67:5d:b1:52:b3:95:2f:cb:dc:00:f0:20:ef:51:2f:0a:32:b1:
         51:81:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:21 2026 by rpki-client