Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/b49392ff-220f-3129-bf52-86b8ceb0456e.roa
File:                     b49392ff-220f-3129-bf52-86b8ceb0456e.roa (raw, json)
Hash identifier:          bQf2crZg4GdSEMunXoguUK3T6GH0GeHp1wGRnhCucAs=
Subject key identifier:   E0:48:FE:F3:70:70:29:C4:71:01:D3:6E:26:BC:96:AE:A1:33:EF:16
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6252FC922E4EE9131C8780
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/b49392ff-220f-3129-bf52-86b8ceb0456e.roa
Signing time:             Thu 30 Jul 2026 18:45:40 +0000
ROA not before:           Thu 30 Jul 2026 18:45:40 +0000
ROA not after:            Wed 28 Oct 2026 18:45:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1e1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:52:fc:92:2e:4e:e9:13:1c:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:40 2026 GMT
            Not After : Oct 28 18:45:40 2026 GMT
        Subject: CN=8096295d-2267-491d-b2d1-94a2e51f4561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:2e:4a:ad:70:58:7b:dc:c9:26:da:37:4f:
                    81:68:e3:37:b3:66:c5:21:d0:88:93:d7:6d:e6:cf:
                    58:9b:bc:90:60:53:0e:af:c0:7a:1d:65:01:b9:ab:
                    bc:7e:1a:80:f8:4e:1f:5b:e7:1c:13:ce:fa:7c:81:
                    99:4a:03:5d:46:31:b1:06:13:d3:2b:7c:18:d0:6b:
                    08:6e:7f:82:5d:b1:d1:81:d4:c1:0e:04:fe:0d:2c:
                    e3:87:85:a4:15:2b:1b:3b:ac:ad:f4:fb:f3:f0:70:
                    9e:05:a1:64:3f:97:cb:ea:cd:ae:91:1c:b2:ac:22:
                    cb:79:fe:91:8f:bc:59:5d:19:f4:b4:57:5e:98:8a:
                    c4:c6:e8:15:26:ce:1a:e9:76:5b:7c:d5:bd:68:f3:
                    81:6b:39:a7:23:25:32:8b:f8:c3:9a:df:76:41:3e:
                    38:34:23:10:c9:32:c4:29:fc:ff:8d:f2:83:13:0a:
                    9a:c2:fa:7c:0d:53:d3:37:34:77:ed:9b:05:66:51:
                    50:20:8b:b5:de:43:78:73:68:78:4f:bc:16:48:0f:
                    b2:35:59:d4:8e:9f:47:3d:59:bb:8b:84:11:2b:d4:
                    90:d8:bd:15:42:ec:ab:a5:92:02:7e:1e:a1:9d:fa:
                    40:99:64:b4:11:28:10:90:67:70:9d:d1:b7:26:63:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:FE:F3:70:70:29:C4:71:01:D3:6E:26:BC:96:AE:A1:33:EF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/b49392ff-220f-3129-bf52-86b8ceb0456e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1e1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f0:0a:45:e9:c1:85:af:35:8d:e6:b6:b3:9d:85:b8:88:cf:
         ae:b8:30:1c:00:f0:ae:cf:c6:8a:81:50:a7:c4:b5:92:f7:50:
         9b:fe:c8:75:ef:3e:e4:74:45:dc:e7:a0:b2:5e:91:8f:83:d9:
         04:0a:c0:f9:19:ab:10:c0:bd:77:56:18:fe:5a:23:3e:34:be:
         f5:70:55:71:88:83:a0:e9:f7:46:00:8d:c8:d1:ed:ba:d7:d6:
         fa:01:38:7b:9a:38:86:7d:0a:48:f8:83:80:43:21:c5:6b:50:
         cb:d4:3c:c9:de:6d:93:36:49:c3:d9:b8:04:4b:39:d1:53:4f:
         9d:83:e9:c4:03:79:fe:9b:6f:d6:99:0c:2c:14:15:3e:5e:d5:
         28:e7:8a:14:72:21:70:53:9c:13:2d:e8:c9:97:2f:69:51:7c:
         08:5b:e9:e1:3f:a6:09:e3:d4:5e:35:d1:b7:78:72:01:08:00:
         b7:20:c8:45:fd:77:2b:06:bd:49:f7:d4:10:db:f5:bb:8a:53:
         bc:39:aa:3a:d7:be:5c:7d:41:19:84:59:53:8a:26:82:50:51:
         d9:5b:97:e7:3e:19:4e:52:fb:ab:9b:bc:7f:bf:03:bb:f7:42:
         73:9a:0f:f0:bc:4f:18:52:19:2a:83:81:97:e7:6a:92:40:ef:
         85:f7:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:17:16 2026 by rpki-client