Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d818fa92-833d-3662-bf8d-9fb612b78a4a.roa
File:                     d818fa92-833d-3662-bf8d-9fb612b78a4a.roa (raw, json)
Hash identifier:          8ddxno/n7J9s54S7ixi8j0e6J82ye0PdBatQOY+StTo=
Subject key identifier:   CF:71:89:E1:20:56:6E:D7:8A:E5:9E:8B:A3:8E:51:5B:1B:12:9F:C8
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6262F37B91F28B0756EF00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d818fa92-833d-3662-bf8d-9fb612b78a4a.roa
Signing time:             Thu 30 Jul 2026 18:45:47 +0000
ROA not before:           Thu 30 Jul 2026 18:45:47 +0000
ROA not after:            Wed 28 Oct 2026 18:45:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2d9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:62:f3:7b:91:f2:8b:07:56:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:47 2026 GMT
            Not After : Oct 28 18:45:47 2026 GMT
        Subject: CN=b8c47f85-66a3-408a-8fbd-d1cc4bc4e44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:b9:1f:7c:3e:43:97:ee:91:ac:e4:1a:75:
                    61:ec:70:23:0d:8c:1b:fa:75:66:65:52:61:6e:36:
                    28:74:92:a2:95:bc:45:06:a0:f4:7a:70:d1:75:0e:
                    be:64:99:31:33:d6:24:df:3b:e9:14:db:4a:93:72:
                    0b:66:1c:b6:c5:e2:9e:d6:bb:48:09:06:71:7e:10:
                    90:51:7e:47:bb:6d:f4:d6:4f:b6:48:1c:c0:fd:0d:
                    11:46:2d:8a:da:ae:d6:bd:04:24:a8:ef:d3:12:57:
                    5b:5c:4d:c7:2b:e1:9e:85:d8:49:e1:51:ad:79:c2:
                    3d:e1:79:fd:32:d3:fe:e0:19:6e:d1:a3:46:8f:a3:
                    a4:78:1c:32:25:36:8e:f3:4d:c4:39:bc:86:4d:0b:
                    28:32:41:89:06:3b:af:97:16:bc:10:28:68:58:ea:
                    a4:e0:4a:7f:84:c5:ca:5f:ae:2d:bb:fc:d5:a2:54:
                    12:bc:f3:2a:dd:0f:5d:b0:cc:b4:50:1e:8c:eb:77:
                    c2:d5:f6:94:c9:d5:b1:62:b4:26:01:4e:db:d8:86:
                    5f:01:52:59:de:ce:57:b6:84:2c:7c:2d:c4:91:46:
                    ec:ca:74:a3:55:96:49:cc:17:1f:50:0f:74:a1:0a:
                    d4:3b:11:12:c9:12:35:45:52:62:d3:82:b5:aa:bd:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:89:E1:20:56:6E:D7:8A:E5:9E:8B:A3:8E:51:5B:1B:12:9F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d818fa92-833d-3662-bf8d-9fb612b78a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2d9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:15:06:06:c1:a3:64:85:04:1e:6e:24:83:7a:27:4e:23:82:
         5a:00:20:5b:8f:65:8a:fe:97:a7:c1:f2:92:81:23:57:07:b6:
         2f:d8:d4:05:89:0e:38:b4:80:a1:7c:f2:0a:cc:19:0e:e8:29:
         6d:23:9a:ca:1f:51:29:83:1e:93:c0:78:39:17:9d:51:da:ca:
         ce:87:8e:0b:2e:93:1e:31:f2:d3:d3:25:c7:6c:0f:e9:10:59:
         36:70:d1:37:8c:dc:77:88:c2:1f:8e:62:38:9d:4d:6b:81:50:
         bd:32:f8:d5:68:00:4e:bf:89:05:68:95:35:84:9a:a6:0a:bc:
         ff:d2:ea:7d:56:3e:c7:5c:23:86:fe:e1:5c:81:4b:47:8b:a6:
         83:fc:9c:53:4f:a5:8b:83:8d:cd:31:c7:6f:22:2d:4c:29:49:
         5f:b5:1f:b9:72:fb:e2:43:70:e4:d0:85:3f:97:c6:de:09:9c:
         19:0b:ed:a1:22:dd:19:a0:03:ff:67:8e:a8:a9:08:8c:e2:49:
         6b:7b:1d:dd:de:48:b7:77:b5:8d:e8:b2:b6:5d:0e:30:ab:e8:
         a5:97:8e:ed:16:ee:e3:08:a2:d6:72:d9:a0:7f:02:76:e8:3a:
         6d:6e:69:20:6b:9a:a7:a2:89:2a:49:22:73:76:e4:f7:1a:34:
         85:38:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:14:32 2026 by rpki-client