Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d9e38a9b-a5c8-3216-abaf-ee813dcbdd39.roa
File:                     d9e38a9b-a5c8-3216-abaf-ee813dcbdd39.roa (raw, json)
Hash identifier:          sIA93//mRsIt2UPsYTVpgD9sFE238x4PgQ6ryfCLplg=
Subject key identifier:   62:F9:33:17:2C:F8:9D:33:D6:2A:8D:29:C3:74:0E:A0:67:94:BA:AB
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624870E50C46EEA64D9380
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d9e38a9b-a5c8-3216-abaf-ee813dcbdd39.roa
Signing time:             Thu 30 Jul 2026 18:45:35 +0000
ROA not before:           Thu 30 Jul 2026 18:45:35 +0000
ROA not after:            Wed 28 Oct 2026 18:45:35 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:12e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:48:70:e5:0c:46:ee:a6:4d:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:35 2026 GMT
            Not After : Oct 28 18:45:35 2026 GMT
        Subject: CN=940889bb-1ca9-4072-a4fc-182c96e5b4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:25:40:7a:b9:93:9a:8b:f5:0b:76:a4:12:
                    f1:d9:59:db:a8:40:d3:fa:71:5e:ae:5f:a4:5d:39:
                    49:d9:2e:07:91:85:7f:1e:24:10:e1:d1:e5:a8:c4:
                    80:60:17:19:28:95:eb:52:d0:71:71:b8:3c:aa:88:
                    59:16:4d:04:fb:a2:92:52:91:af:cb:5d:54:25:aa:
                    7a:9a:7a:e5:99:ef:22:d3:8b:0d:c0:0e:33:a6:93:
                    d2:7a:24:53:c3:7e:76:fa:9c:0d:dc:5d:e7:79:30:
                    5c:bc:78:90:c2:4d:44:ab:09:eb:35:8c:b5:da:59:
                    98:60:4b:9b:dd:99:04:da:6c:a3:96:cf:d7:03:fa:
                    0b:3c:b9:af:32:27:61:c0:c4:fd:e1:33:06:e8:f1:
                    84:75:4d:f7:4f:66:66:58:2f:c2:6a:15:c9:78:33:
                    95:b8:25:26:27:5b:e6:ad:b5:0b:d9:47:f9:df:e3:
                    83:28:09:c6:56:e0:77:d7:a7:18:63:79:bb:62:b3:
                    19:c7:2c:ea:a7:73:4e:65:51:3b:f1:92:06:16:02:
                    60:c9:1b:94:2d:81:70:b8:d2:62:40:fb:4d:68:e3:
                    a7:35:40:52:0d:96:95:26:6c:cc:3b:a5:12:d1:16:
                    2b:b4:90:9a:3d:85:de:43:fa:f6:6c:35:ff:34:78:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F9:33:17:2C:F8:9D:33:D6:2A:8D:29:C3:74:0E:A0:67:94:BA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d9e38a9b-a5c8-3216-abaf-ee813dcbdd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:12e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:7c:30:6f:9d:a0:bc:34:31:02:a9:ff:b7:f3:f3:f0:54:
         8d:84:cb:af:bd:c3:50:90:15:bc:a4:b8:bc:57:36:a8:42:91:
         73:69:49:c3:14:26:b3:c2:55:94:89:36:e4:c7:a3:95:b6:b4:
         0a:64:90:8f:e0:6c:5a:81:c9:a5:07:0c:1f:d9:5f:7a:2f:20:
         45:78:67:17:ec:71:94:1c:b7:93:44:cf:3c:ca:5a:3f:26:97:
         60:5a:f8:f6:f6:a1:66:21:5f:42:cb:14:12:dd:4b:e1:38:7f:
         a9:65:38:ef:b6:b2:6f:74:3e:45:30:6f:8a:9c:02:68:3a:16:
         b7:60:e2:1f:74:98:33:a2:aa:a3:8a:9e:26:66:e1:8c:84:59:
         3b:fc:2e:fb:53:94:00:69:74:1a:15:6c:63:1f:1a:dc:32:2e:
         78:df:82:4e:ac:a3:f4:1f:3a:be:22:58:1e:f5:a5:ce:20:d4:
         3f:a4:6b:df:47:16:d2:e2:87:b0:4e:57:23:05:4a:5a:b3:ab:
         7b:b3:0f:15:4e:b4:59:7d:cd:b5:4c:91:cb:8a:7f:1d:8c:f8:
         22:7b:47:b0:b8:5a:14:f4:5f:d8:90:f2:b9:36:02:ec:93:50:
         1a:53:a9:f2:eb:60:1e:15:2c:3a:58:7f:e4:14:0a:c2:c2:70:
         f5:69:49:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:15 2026 by rpki-client