Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d6f06fdc-3faa-3bc6-94d9-9e6c189fb399.roa
File:                     d6f06fdc-3faa-3bc6-94d9-9e6c189fb399.roa (raw, json)
Hash identifier:          BLmgeRb8Bys5nmvwbX17sbN27JXl4iZbI65oLptq0zA=
Subject key identifier:   22:CB:F5:3C:38:59:5C:BB:B1:16:BA:BF:84:78:8D:28:6C:4C:89:9A
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC62650266A21762CBD8CE80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d6f06fdc-3faa-3bc6-94d9-9e6c189fb399.roa
Signing time:             Thu 30 Jul 2026 18:45:48 +0000
ROA not before:           Thu 30 Jul 2026 18:45:48 +0000
ROA not after:            Wed 28 Oct 2026 18:45:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2f7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:65:02:66:a2:17:62:cb:d8:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:48 2026 GMT
            Not After : Oct 28 18:45:48 2026 GMT
        Subject: CN=b5b77d28-7d3e-4605-9918-cede5e34afa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:35:6b:ca:b2:44:0a:32:0c:7c:6d:7f:72:
                    a0:80:d9:5b:8a:f6:a3:ae:d7:dc:54:e4:76:50:d2:
                    7e:cb:0b:a8:d8:51:a1:3c:33:84:3c:44:10:2c:7b:
                    80:d6:7e:49:e7:49:e8:7d:87:ee:18:ac:68:d9:8f:
                    dc:b7:c1:93:62:82:13:6e:46:c1:26:84:c3:ed:9c:
                    09:87:67:3d:d6:6c:e7:dd:dc:d7:72:58:ad:0f:7e:
                    a7:eb:93:e4:68:62:3a:02:cd:60:34:80:90:3e:2c:
                    6e:a4:85:f0:02:c3:ab:1a:fe:95:03:6f:b3:1b:18:
                    01:22:d2:19:73:84:ac:8c:c0:69:d6:1c:73:a6:7f:
                    10:51:52:94:6d:95:21:45:7b:79:62:ac:ad:57:f7:
                    df:69:be:9b:6a:26:86:9f:49:11:57:2a:cb:90:eb:
                    ad:74:58:44:e3:64:ef:cf:42:f9:13:9b:0a:e3:e1:
                    23:f8:43:ff:f4:20:90:86:23:d1:33:c5:89:61:9d:
                    54:72:c1:48:18:da:22:e8:26:81:3b:06:3a:ff:da:
                    15:34:22:cc:36:38:b7:50:16:74:4f:4f:22:f1:27:
                    13:5b:7c:88:03:8d:3a:68:cf:e6:12:a7:15:03:cd:
                    07:33:da:b3:1a:ec:ff:5a:7c:06:a5:e5:41:02:b8:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CB:F5:3C:38:59:5C:BB:B1:16:BA:BF:84:78:8D:28:6C:4C:89:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d6f06fdc-3faa-3bc6-94d9-9e6c189fb399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2f7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:2d:19:24:59:2e:ef:4d:53:22:c2:a3:f8:88:06:68:b7:
         67:10:e2:da:0d:52:b1:1d:76:b9:88:95:c0:87:a5:20:6d:d9:
         1a:63:40:51:4a:af:8d:f2:5e:f6:3a:1c:67:fe:46:9f:63:28:
         e2:21:d7:bc:5a:10:68:99:93:82:cc:14:19:ca:37:54:6e:f8:
         95:51:e0:d0:47:4a:ad:62:a1:dd:62:c8:f7:ca:83:72:59:42:
         28:9b:67:8e:7d:16:85:e0:b4:2b:e8:5d:7c:92:f9:9d:77:86:
         20:3d:9e:b1:4c:8c:72:96:3e:61:d2:a2:fe:64:e0:3f:4a:21:
         a9:28:05:fe:1f:27:95:db:7e:49:32:54:56:ec:73:7a:27:ae:
         af:a7:59:56:9f:5b:30:e8:6c:7a:a9:58:d9:8c:19:77:ac:05:
         60:cb:8c:1d:23:44:02:08:34:a3:aa:f1:09:53:16:69:88:e0:
         dd:6f:74:52:55:7f:27:3f:44:c7:c3:d2:23:47:f7:74:4a:c6:
         7b:91:25:5a:06:e0:76:7b:e1:c2:92:a9:50:8f:d2:07:c0:15:
         82:75:a0:8b:7a:c3:11:c6:4c:d7:a9:03:3a:ad:37:c4:41:c6:
         1b:12:21:de:f9:6f:9b:bc:c0:d5:a3:fb:b4:62:94:61:29:ab:
         1d:8b:bd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:14:05 2026 by rpki-client