Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/dfe89852-b284-34a7-8c0b-61edb026dd60.roa
File:                     dfe89852-b284-34a7-8c0b-61edb026dd60.roa (raw, json)
Hash identifier:          mqTEfxPES3+TgELBumuMQKtpIEHzTy3RvskFi4IGIaU=
Subject key identifier:   56:31:AC:6F:C7:D5:A5:F9:75:C7:3C:73:07:A8:E1:15:D9:5D:31:C3
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC623CC07EEFF4D87FB67140
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/dfe89852-b284-34a7-8c0b-61edb026dd60.roa
Signing time:             Thu 30 Jul 2026 18:45:29 +0000
ROA not before:           Thu 30 Jul 2026 18:45:29 +0000
ROA not after:            Wed 28 Oct 2026 18:45:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:5a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:3c:c0:7e:ef:f4:d8:7f:b6:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:29 2026 GMT
            Not After : Oct 28 18:45:29 2026 GMT
        Subject: CN=aefcc068-c377-49ad-b550-83a09cb5446c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:6a:46:f9:57:06:1e:24:0b:2d:ac:18:71:
                    e9:f6:cd:67:4e:1e:a6:16:8d:0b:73:c4:7a:57:be:
                    db:6d:fb:99:07:80:f7:12:fe:1d:21:ec:22:6d:2a:
                    9a:86:8e:b7:e9:46:51:cc:c6:3e:35:76:0d:08:44:
                    ca:80:f0:5f:bb:b5:6a:09:73:ae:0c:68:2e:08:ed:
                    7b:7c:3a:da:e4:9d:b8:0c:e1:95:01:1b:7c:a0:76:
                    c3:5b:43:7c:28:11:c3:73:9f:2d:65:53:c8:46:62:
                    d6:dc:42:ca:42:9c:b3:2f:26:fb:0f:96:e8:60:ef:
                    78:9e:c9:4a:34:98:c9:57:9b:2b:fd:7c:8b:79:a1:
                    70:d3:09:00:9d:db:99:d1:c4:23:9c:f3:ae:94:0c:
                    e8:92:89:a6:5a:7d:8b:21:68:3d:a7:e9:97:64:87:
                    88:8f:f9:a5:6c:d9:68:38:ef:ff:56:f5:3c:c8:84:
                    97:b0:50:07:65:6e:6e:9f:f2:63:5d:5f:79:bf:4c:
                    5a:d2:b2:0d:78:89:21:5a:32:ef:d1:12:a2:bb:d6:
                    2f:fd:9a:24:eb:84:71:f5:c5:e4:f8:ef:00:b9:d1:
                    b4:f0:35:3d:db:87:cc:39:e5:00:91:3f:eb:ac:90:
                    80:24:c0:4e:f6:7d:74:21:c5:96:f4:96:8d:66:e5:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:AC:6F:C7:D5:A5:F9:75:C7:3C:73:07:A8:E1:15:D9:5D:31:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/dfe89852-b284-34a7-8c0b-61edb026dd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:5a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:ec:da:0a:1c:ca:62:5b:6a:29:41:41:37:b4:b6:6b:a4:
         34:f5:07:7c:ae:4d:46:38:54:5e:18:a0:6c:cd:dc:91:c4:19:
         d2:2b:1e:bf:23:75:ff:c4:02:32:84:39:d2:28:3e:77:56:5b:
         7d:a7:0d:aa:76:44:a0:73:3f:ee:d4:0d:ac:d6:de:5d:6d:29:
         d7:ed:d8:c4:20:37:f9:a9:ea:9e:8c:51:7b:a1:bf:de:a1:8d:
         36:29:bc:41:b0:a3:f9:89:42:5e:97:85:e6:6a:35:ae:90:9b:
         db:bc:5c:4f:a9:23:1d:b4:21:99:cb:27:30:5c:16:60:18:03:
         3e:d7:fa:82:6c:9d:f2:3b:d0:75:6a:bf:ee:4f:3b:63:26:ad:
         0a:5e:c7:ba:75:af:85:64:14:bf:1c:fb:43:8d:6c:bd:f6:a3:
         39:b5:95:8b:e8:b4:78:72:bb:ed:88:37:a5:03:fe:2f:be:4a:
         5e:fc:a6:75:0e:b9:4a:ff:08:b8:22:76:c3:5c:03:d3:92:1d:
         90:1c:5f:77:88:18:44:85:70:b5:15:43:c3:d0:bb:d7:0a:81:
         b9:7a:b0:04:7d:17:91:14:29:22:03:fd:a3:3a:2a:b0:fd:27:
         dd:b1:c2:65:03:06:bb:ec:56:a4:2a:8b:fb:43:0d:70:fd:f0:
         62:f2:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:01 2026 by rpki-client