Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/c801e75a-bbc5-3da7-9d60-5b4e2e800bfd.roa
File:                     c801e75a-bbc5-3da7-9d60-5b4e2e800bfd.roa (raw, json)
Hash identifier:          3keCvzEvjZOz8fiWpjPTRi5tGnY6t5gDfuWCb3Vc9OA=
Subject key identifier:   D8:34:98:56:56:92:75:44:51:A0:9E:07:83:D9:E5:50:BE:1C:F7:09
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6243859196D41E0719CB30
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/c801e75a-bbc5-3da7-9d60-5b4e2e800bfd.roa
Signing time:             Thu 30 Jul 2026 18:45:32 +0000
ROA not before:           Thu 30 Jul 2026 18:45:32 +0000
ROA not after:            Wed 28 Oct 2026 18:45:32 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:d7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:43:85:91:96:d4:1e:07:19:cb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:32 2026 GMT
            Not After : Oct 28 18:45:32 2026 GMT
        Subject: CN=eda09d59-4a46-4640-bbe0-1dfb25155afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:99:8f:74:f2:fa:39:37:95:e7:9a:e6:5c:
                    91:75:56:95:d9:6f:84:5a:4c:fd:30:3b:b8:cb:4b:
                    de:59:4d:9a:9c:d5:be:db:47:22:86:11:e0:cd:5f:
                    b6:7d:64:a9:f9:e8:bd:f6:77:df:dd:78:67:df:27:
                    93:8a:54:a6:87:cf:7b:32:1a:ef:43:7a:a1:c0:db:
                    66:3c:99:38:8b:04:4a:aa:a3:d4:ea:09:4a:16:23:
                    d1:83:dd:50:df:89:b2:20:bf:2d:13:87:89:03:f1:
                    5a:1a:41:ab:da:9e:b3:0c:1d:e7:ff:cc:74:b2:f1:
                    c6:97:11:b4:cb:65:0a:7b:85:44:73:85:b3:69:63:
                    3f:b4:d6:b0:59:63:aa:f9:b1:12:da:20:08:50:55:
                    a9:8f:e9:1c:fe:64:56:6d:57:f3:c6:e9:e8:1a:55:
                    86:3b:41:37:e4:c6:e3:b9:37:d0:3b:1e:2a:0f:b3:
                    8c:0a:15:dd:1f:c1:56:5f:2e:2b:d1:f6:d0:69:08:
                    76:5b:62:cb:e2:b4:f4:74:8b:9f:08:3d:0d:81:aa:
                    e9:33:19:ea:2f:18:99:bd:57:76:4b:89:09:89:a1:
                    dc:4b:59:6c:5d:4d:8f:d9:a8:5a:46:81:d4:d2:01:
                    47:27:e1:2d:86:06:80:4f:1b:23:47:b4:93:d5:bb:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:34:98:56:56:92:75:44:51:A0:9E:07:83:D9:E5:50:BE:1C:F7:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/c801e75a-bbc5-3da7-9d60-5b4e2e800bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:d7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:6f:2f:92:63:55:a2:71:e6:48:32:89:dc:83:3f:61:e2:
         94:e8:33:83:2e:6e:59:d5:f4:25:10:26:7b:c6:c7:c5:49:fb:
         8f:88:12:04:85:66:92:2f:b1:be:35:09:b7:07:d6:a5:3f:65:
         1a:de:62:0b:dd:c5:af:f6:ac:2e:e9:b5:95:db:b3:f1:29:d1:
         c6:b6:48:c7:7c:80:5b:aa:0e:eb:75:95:75:ea:07:4b:b5:2e:
         3c:33:eb:3a:8d:28:86:53:0f:b4:f2:05:fe:1e:4d:bf:c7:0e:
         ec:a1:6d:f2:85:7a:11:63:d0:f6:b3:3b:ad:dc:3f:29:6e:26:
         61:9d:38:7a:d9:bf:bb:0e:55:c4:68:b8:02:67:69:f4:bb:a4:
         1e:38:58:49:cf:7c:c4:66:65:f6:c9:df:65:7f:f4:f4:f5:d0:
         d5:fe:9c:1e:31:60:ce:90:5c:1f:81:ea:60:cf:0f:5c:15:1f:
         b9:0b:de:30:c2:b9:54:32:6b:77:21:45:a5:57:a4:65:3d:e5:
         41:a1:3e:70:67:7f:fe:a6:f4:7f:96:8b:3d:5a:14:05:b0:5b:
         57:aa:99:b0:4c:44:95:18:f3:76:e1:f0:30:38:3a:70:4f:6c:
         e5:bd:dd:2c:80:1f:f2:b1:4b:a9:5d:45:36:a1:1c:98:72:27:
         ac:ef:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:11 2026 by rpki-client