Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cc039cb8-652c-3dc2-9cba-66f9abda8a66.roa
File:                     cc039cb8-652c-3dc2-9cba-66f9abda8a66.roa (raw, json)
Hash identifier:          6tOgTKnqVi30+ahBzZevcTuUIpWu7w/RaY4/Y/s9Opg=
Subject key identifier:   C6:1D:26:19:D4:5D:C7:A4:82:F7:D3:F7:46:A7:2A:E7:D9:29:D7:48
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623B461900844AA13353C0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cc039cb8-652c-3dc2-9cba-66f9abda8a66.roa
Signing time:             Thu 30 Jul 2026 18:45:28 +0000
ROA not before:           Thu 30 Jul 2026 18:45:28 +0000
ROA not after:            Wed 28 Oct 2026 18:45:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3b:46:19:00:84:4a:a1:33:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:28 2026 GMT
            Not After : Oct 28 18:45:28 2026 GMT
        Subject: CN=17af999c-4fc6-4662-8fe6-508553540785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ae:69:6b:f3:8a:1b:0f:87:9d:6f:f5:54:23:
                    f4:01:7a:aa:62:38:ef:3e:e4:f9:0e:1d:00:a4:46:
                    a8:49:43:09:ba:68:a1:38:01:39:56:e2:bb:15:f1:
                    ac:75:a1:26:d3:43:69:2e:f4:64:70:66:92:14:f4:
                    22:3d:f1:12:15:2b:de:f1:4b:4c:aa:b6:ad:ae:96:
                    dd:b8:99:a1:09:d4:48:e6:14:10:e7:cb:92:f8:0e:
                    4e:0d:f4:c5:ce:d1:34:27:bf:f5:f5:53:67:f9:73:
                    aa:43:85:1a:b1:07:22:07:a8:6e:a0:c6:db:8a:eb:
                    dd:ea:c9:bc:e1:3a:b9:77:f7:3c:78:39:7d:02:8b:
                    92:36:9a:9a:68:47:75:6a:93:28:0b:bb:18:1f:a9:
                    44:65:44:e4:f9:70:2b:d9:eb:0b:2c:26:b2:8f:bc:
                    b1:8e:df:96:23:b4:01:6c:4d:f2:a6:24:63:b2:1f:
                    e5:d1:88:7e:bc:6a:09:01:8e:fa:35:74:82:a1:b9:
                    54:11:ac:ee:76:d6:50:c7:bf:ff:22:d0:50:b7:dd:
                    61:85:9c:0c:6c:fc:dc:92:16:41:82:80:1e:a4:e3:
                    6f:1a:db:13:0d:8a:e6:00:76:60:96:33:64:6e:91:
                    47:9a:46:37:6d:7c:4f:79:28:2b:71:b3:3c:28:60:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1D:26:19:D4:5D:C7:A4:82:F7:D3:F7:46:A7:2A:E7:D9:29:D7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cc039cb8-652c-3dc2-9cba-66f9abda8a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:cc:af:dd:f0:89:c5:7a:a7:56:c8:1e:c5:58:8d:8c:39:
         2f:27:95:16:3e:36:4a:46:e1:a6:b5:30:9a:66:0b:68:70:43:
         d0:d9:34:82:31:9d:51:37:5e:c9:e7:ee:d8:79:16:e2:2b:42:
         cf:ff:b3:fb:0f:68:24:16:45:b7:7e:91:f1:d0:70:39:bd:19:
         8e:8e:58:c8:fb:f1:2d:de:1b:b8:8a:d4:ee:42:b5:82:e8:9f:
         b1:b5:9e:61:cb:70:19:6b:ba:6e:f6:d7:2a:ed:a3:13:9d:c1:
         31:37:fe:63:92:04:96:1f:79:ae:d3:05:6f:82:7d:1f:db:88:
         7d:e0:d3:dd:5b:85:5f:6b:f9:e1:b1:5b:83:4b:e4:fe:10:b8:
         80:23:f8:91:ed:17:a3:0e:ae:6e:0f:af:da:7d:e1:92:52:27:
         34:6a:c1:b5:68:df:b6:32:d4:f8:57:1e:3f:cf:e2:63:0e:76:
         22:8b:0c:2c:dc:30:c2:03:b4:b0:93:9f:c5:47:26:10:a5:58:
         13:a8:cd:21:88:7c:cc:db:74:47:9d:26:df:37:50:19:9c:9a:
         91:1c:30:b6:0c:99:a4:f8:a7:77:42:27:e5:a1:01:04:37:6d:
         43:b6:49:ec:48:a5:dc:3d:ae:6a:e1:c9:e8:97:fb:2c:74:c6:
         5d:02:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:43 2026 by rpki-client