Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cd1344b6-400e-3b78-aeee-069a432806ba.roa
File:                     cd1344b6-400e-3b78-aeee-069a432806ba.roa (raw, json)
Hash identifier:          20JcDKM7ZS/pmWNUTLCTbZIuiqnC9WT7t3fRd+zMcPs=
Subject key identifier:   90:E7:7C:4D:F7:31:23:B1:63:BD:BA:64:A8:02:37:AB:81:5A:1A:F0
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6255D49312C025D74303E8
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cd1344b6-400e-3b78-aeee-069a432806ba.roa
Signing time:             Thu 30 Jul 2026 18:45:41 +0000
ROA not before:           Thu 30 Jul 2026 18:45:41 +0000
ROA not after:            Wed 28 Oct 2026 18:45:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:20f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:55:d4:93:12:c0:25:d7:43:03:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:41 2026 GMT
            Not After : Oct 28 18:45:41 2026 GMT
        Subject: CN=a97daac6-57f7-42cf-9927-fd6cc2738f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:ef:f0:c6:52:c2:a3:f1:3b:3c:c7:8f:4a:
                    a1:1d:d3:ba:22:91:61:b4:06:f8:60:d4:1b:24:f6:
                    f9:aa:e6:9f:ec:47:0a:ae:c1:4c:df:bc:bf:53:fd:
                    53:0c:20:75:64:61:52:3c:99:ae:2c:77:6f:2b:f0:
                    5c:df:e3:27:bb:64:7a:b5:d6:95:01:a4:19:78:e5:
                    3d:f5:92:46:9e:37:fe:43:63:6d:e2:0b:d9:1a:dc:
                    3c:ad:e3:05:6d:77:b3:d5:e8:f5:c7:d1:a7:e2:a6:
                    99:bc:cc:bf:d1:f7:62:b6:eb:2e:39:e2:64:7e:c3:
                    21:8a:c5:b8:35:5c:bf:2a:07:f3:56:42:59:53:6b:
                    5d:5f:e4:49:da:46:30:b0:e8:73:7e:e3:9c:4f:47:
                    62:d8:de:90:32:04:20:54:1a:57:a6:46:63:7f:9b:
                    b6:b6:ac:78:9e:7e:0a:44:47:53:73:d1:95:be:37:
                    f3:7f:75:d0:fa:47:a4:59:64:ff:84:30:c6:85:ec:
                    20:cf:b8:b7:ae:f9:2d:08:05:46:65:79:20:94:b0:
                    9b:4f:fa:a6:d7:4b:02:f1:f1:2e:a1:6b:0f:eb:3b:
                    76:6c:cb:4b:5d:c4:0a:a3:f4:56:46:4d:c0:fa:58:
                    a8:fa:0e:5c:bf:a1:a5:65:f3:69:32:c2:59:b4:09:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E7:7C:4D:F7:31:23:B1:63:BD:BA:64:A8:02:37:AB:81:5A:1A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cd1344b6-400e-3b78-aeee-069a432806ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:20f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f4:34:1d:de:df:1d:5a:b7:d2:bf:be:e6:37:50:62:fa:82:
         e9:d5:5c:e0:b1:2c:07:e8:e9:ff:d0:5d:78:b3:24:65:5d:f8:
         70:19:0d:e6:bd:15:62:2b:57:4b:dc:21:06:cd:a2:11:b9:47:
         b3:54:75:79:48:f8:f0:42:14:e5:a7:a6:d3:2e:31:8a:5b:37:
         b7:50:93:60:db:34:22:18:51:ce:97:1e:1a:07:b6:82:35:c9:
         e8:d6:dc:75:46:a2:3e:25:5f:bf:80:52:1b:40:be:a1:3d:96:
         a7:84:60:28:21:d7:fe:77:e2:f0:7a:bd:ba:38:cc:e6:d5:b6:
         f9:bf:a7:8f:05:f0:cd:98:a6:8d:54:31:cb:48:ee:34:00:d7:
         17:86:ba:f3:88:89:c3:bb:cf:31:fe:8d:3c:55:0e:af:1c:d3:
         6c:3d:53:09:a3:5c:d1:c7:0b:41:b7:38:0d:db:db:6c:58:ce:
         53:0d:bc:22:5c:42:ff:05:26:80:35:cd:53:f9:fd:68:54:ab:
         90:8a:8f:5c:c1:d5:3b:61:83:61:a4:97:79:9c:44:ad:61:e4:
         aa:fc:d2:99:8a:8c:01:1a:75:f8:63:3c:16:bc:db:8a:96:18:
         fb:71:21:ff:ee:56:bd:8e:73:85:14:95:75:ad:d9:e5:24:88:
         1e:4a:51:5b
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYlXUkxLAJddDA+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0MVoXDTI2MTAyODE4NDU0MVowLzEtMCsGA1UEAxMk
YTk3ZGFhYzYtNTdmNy00MmNmLTk5MjctZmQ2Y2MyNzM4ZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxfv8MZSwqPxOzzHj0qhHdO6IpFhtAb4YNQb
JPb5quaf7EcKrsFM37y/U/1TDCB1ZGFSPJmuLHdvK/Bc3+Mnu2R6tdaVAaQZeOU9
9ZJGnjf+Q2Nt4gvZGtw8reMFbXez1ej1x9Gn4qaZvMy/0fditusuOeJkfsMhisW4
NVy/KgfzVkJZU2tdX+RJ2kYwsOhzfuOcT0di2N6QMgQgVBpXpkZjf5u2tqx4nn4K
REdTc9GVvjfzf3XQ+kekWWT/hDDGhewgz7i3rvktCAVGZXkglLCbT/qm10sC8fEu
oWsP6zt2bMtLXcQKo/RWRk3A+lio+g5cv6GlZfNpMsJZtAn34QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFJDnfE33MSOxY726ZKgCN6uBWhrwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvY2QxMzQ0YjYtNDAwZS0z
Yjc4LWFlZWUtMDY5YTQzMjgwNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
Ag8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAHvQ0Hd7fHVq30r++5jdQYvqC6dVc4LEsB+jp/9BdeLMkZV34
cBkN5r0VYitXS9whBs2iEblHs1R1eUj48EIU5aem0y4xils3t1CTYNs0IhhRzpce
Gge2gjXJ6NbcdUaiPiVfv4BSG0C+oT2Wp4RgKCHX/nfi8Hq9ujjM5tW2+b+njwXw
zZimjVQxy0juNADXF4a684iJw7vPMf6NPFUOrxzTbD1TCaNc0ccLQbc4DdvbbFjO
Uw28IlxC/wUmgDXNU/n9aFSrkIqPXMHVO2GDYaSXeZxErWHkqvzSmYqMARp1+GM8
FrzbipYY+3Eh/+5WvY5zhRSVda3Z5SSIHkpRWw==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:01 2026 by rpki-client