Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d4ed5d94-b843-3d68-964c-17fe33776171.roa
File:                     d4ed5d94-b843-3d68-964c-17fe33776171.roa (raw, json)
Hash identifier:          R1KAJPkeTHxY4VbIkLVfCRXCngun2aEg1KG1eFXuVVM=
Subject key identifier:   1D:66:EC:3D:9C:BE:DF:4E:EC:AC:8E:56:44:80:35:CA:54:6C:A0:A9
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623B883EFB24F18958CC80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d4ed5d94-b843-3d68-964c-17fe33776171.roa
Signing time:             Thu 30 Jul 2026 18:45:28 +0000
ROA not before:           Thu 30 Jul 2026 18:45:28 +0000
ROA not after:            Wed 28 Oct 2026 18:45:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:43::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3b:88:3e:fb:24:f1:89:58:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:28 2026 GMT
            Not After : Oct 28 18:45:28 2026 GMT
        Subject: CN=cde3f632-ee16-4155-8266-e9ffb6621f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:13:7d:17:6f:eb:7b:e8:3b:8f:9b:4d:16:
                    12:99:97:27:1a:4f:23:c6:ed:9e:4e:81:e5:e4:96:
                    6a:47:6b:96:84:c2:6e:bf:6b:02:14:62:ca:cc:98:
                    10:ce:bc:65:37:76:64:f5:d0:8c:36:0c:1b:a7:4a:
                    58:81:d7:d8:24:c6:b0:3a:02:c7:52:07:8c:47:a7:
                    e5:b5:d6:87:58:19:b7:f0:80:39:8a:8c:50:04:97:
                    7e:27:99:b8:e9:2d:a1:7c:76:96:d4:dd:7e:f6:d2:
                    e1:94:61:49:21:23:38:c8:a5:55:f5:cb:fc:37:d8:
                    e6:ba:c8:61:8a:df:6e:81:06:a3:9d:fd:96:1c:3e:
                    a5:28:74:db:a5:b7:bf:3d:15:56:0a:5a:d1:66:09:
                    f3:ff:8e:b6:83:7f:2c:12:c5:6e:dd:87:75:0f:e6:
                    1c:fa:4e:b7:5e:ec:4b:31:a2:e7:d4:f3:8f:34:87:
                    45:fd:3b:12:0b:14:2a:c8:b9:2d:f3:8c:9f:f4:59:
                    81:fb:ca:51:78:86:27:12:10:f8:59:2f:b9:d6:75:
                    6b:e6:3e:95:45:4c:e1:93:bd:07:98:09:93:1d:f2:
                    24:16:74:df:06:a1:34:98:81:d5:f0:2c:ab:97:70:
                    ef:4f:53:dd:ad:c0:27:dc:f8:c1:88:df:5b:b6:1c:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:66:EC:3D:9C:BE:DF:4E:EC:AC:8E:56:44:80:35:CA:54:6C:A0:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d4ed5d94-b843-3d68-964c-17fe33776171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:43::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:11:33:5b:bc:80:20:dc:38:05:65:22:09:de:fd:51:26:8a:
         27:99:c1:b6:82:a8:89:8f:09:f2:dc:b1:b3:06:fe:0b:8e:9c:
         a6:66:27:ef:54:3d:e8:e7:aa:2b:66:97:20:32:d8:b9:50:00:
         07:96:5f:d1:6d:0a:a9:c5:fc:91:1f:74:a4:6e:c0:7f:24:2c:
         cb:bb:c3:02:f3:fc:9d:47:e5:e7:e1:32:aa:46:47:88:32:15:
         5b:a5:f1:0c:0c:11:27:21:b8:e2:c0:c0:99:17:e4:30:63:61:
         c6:5a:ad:a8:0d:96:35:d5:65:ef:a6:71:15:8c:4d:a3:91:bd:
         91:14:08:94:2b:54:b8:1d:5d:13:7c:18:b5:a3:bc:97:75:c3:
         5f:f3:c8:a1:7d:49:3c:7f:3a:44:6f:bc:ae:62:73:89:ed:06:
         be:4f:83:20:fc:c3:14:0c:5a:ff:0d:8d:0e:bd:32:51:6b:5d:
         77:f0:74:65:d8:6d:3b:34:ca:0f:3a:c0:20:02:99:57:b9:84:
         2e:f2:a1:43:51:d8:29:65:41:71:6d:a5:e1:f4:95:55:65:2a:
         43:f2:3e:bd:3a:77:bf:6a:e2:0b:5f:16:b2:23:0b:f9:19:0f:
         3a:62:c5:6f:a9:81:54:d0:14:b2:34:56:ab:7f:cd:7d:0e:61:
         1e:60:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:14 2026 by rpki-client