Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/caecc19a-348a-3f49-8a8b-03a0ed117a94.roa
File:                     caecc19a-348a-3f49-8a8b-03a0ed117a94.roa (raw, json)
Hash identifier:          m/j8Js0w7FL0F1OPu3PdUkqcbAxiB4zMuKzIvbgAtKA=
Subject key identifier:   A4:0D:41:57:31:54:85:10:CE:61:BA:51:BA:78:40:C2:B0:05:D7:0C
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6244B63FD314BA49456800
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/caecc19a-348a-3f49-8a8b-03a0ed117a94.roa
Signing time:             Thu 30 Jul 2026 18:45:33 +0000
ROA not before:           Thu 30 Jul 2026 18:45:33 +0000
ROA not after:            Wed 28 Oct 2026 18:45:33 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:ec::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:44:b6:3f:d3:14:ba:49:45:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:33 2026 GMT
            Not After : Oct 28 18:45:33 2026 GMT
        Subject: CN=cabad0d1-cd15-48b6-8d72-040d41e8c597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:fe:7e:fa:ce:c8:ac:ef:bd:9d:2d:45:1c:
                    88:0f:71:f8:67:55:71:ae:d8:57:d9:bd:cf:52:7f:
                    dc:14:a5:a2:eb:8e:d6:e7:d6:77:d9:fb:0c:3c:a7:
                    dc:7f:da:72:91:60:24:5a:19:31:2c:b2:19:bf:f3:
                    ec:f7:f0:ca:ce:a5:ea:73:36:46:b8:9e:46:1d:cb:
                    22:38:69:81:69:c6:c9:43:79:35:ae:18:b0:de:c8:
                    fe:98:a0:ef:c7:75:dd:9a:33:1d:e9:67:60:74:9c:
                    7f:d8:c3:bc:cf:80:04:cd:56:01:2e:99:b0:3a:d0:
                    78:99:25:d0:da:4c:fc:0f:34:2d:7a:7b:ce:1c:d9:
                    05:64:a1:20:da:60:e4:37:cc:33:1c:d5:84:96:3b:
                    c8:d1:39:78:97:cd:00:f3:cc:2d:78:bd:81:2f:b4:
                    b1:a6:23:73:46:59:51:4f:07:d0:82:cd:57:f8:f7:
                    f7:67:82:e8:6b:f6:02:0a:3b:6c:92:0e:62:b5:8c:
                    dc:f4:a2:12:e1:04:ed:66:e8:5b:77:79:6c:8c:e2:
                    d9:a8:de:2a:45:ee:2b:d1:fa:83:98:aa:d9:30:80:
                    b2:81:59:24:7e:42:7f:7a:bb:40:8f:1a:33:56:7f:
                    37:ab:f3:fa:e8:ab:ad:75:59:1a:1a:85:8e:f8:16:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:41:57:31:54:85:10:CE:61:BA:51:BA:78:40:C2:B0:05:D7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/caecc19a-348a-3f49-8a8b-03a0ed117a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:ec::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:ef:3e:21:fc:2a:ba:3f:9f:72:f5:0a:7e:ea:69:1e:d6:
         8d:60:2a:2b:59:a8:17:bd:55:88:65:60:e9:a6:ad:96:f0:5a:
         46:ef:2b:95:c7:e0:44:54:ad:90:a6:72:0e:f7:8b:62:74:3b:
         4c:ec:63:54:e7:63:e0:90:fb:2f:48:16:7d:c1:c2:9a:73:48:
         c2:c7:b5:41:82:3d:57:67:ff:26:dc:f0:f0:ae:1b:db:2b:c3:
         f0:98:65:1a:68:23:ec:20:90:da:7e:53:cf:d6:47:ea:8a:cf:
         a6:ff:cb:27:25:37:86:f9:b4:3f:00:21:23:0e:1e:5d:f1:e5:
         c0:6f:30:d5:94:52:91:28:49:e0:e5:80:ca:59:ef:1b:ab:75:
         40:b3:e6:ba:4c:38:0e:73:7a:98:f1:83:b9:55:76:8f:c6:99:
         45:58:da:35:b6:78:e8:73:4e:20:39:c7:9d:08:4e:5f:db:e6:
         01:81:aa:fb:4a:e9:48:23:37:0d:c6:e5:e6:e8:23:9d:27:da:
         78:33:3e:05:bc:9a:8b:ea:bc:1b:d8:8a:3d:3c:2c:17:0c:e6:
         84:2d:fb:c8:08:31:5e:58:6a:ef:83:d1:47:0f:16:9a:4d:22:
         68:52:29:d5:cd:12:2f:9d:1a:8a:29:f2:ad:50:1a:be:dd:64:
         ff:3d:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:31 2026 by rpki-client