Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/edcce95f-0c34-334a-af25-9fdbb1ec77f3.roa
File:                     edcce95f-0c34-334a-af25-9fdbb1ec77f3.roa (raw, json)
Hash identifier:          0clZ7xTIKYqPyC7ZmyU9yr5cdLelO82PcUeMtY3CKis=
Subject key identifier:   84:AC:9B:EA:D7:C8:6D:A5:02:0A:7D:40:91:C6:BF:62:D6:F7:E3:72
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626900CC344C7FAB705A80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/edcce95f-0c34-334a-af25-9fdbb1ec77f3.roa
Signing time:             Thu 30 Jul 2026 18:45:50 +0000
ROA not before:           Thu 30 Jul 2026 18:45:50 +0000
ROA not after:            Wed 28 Oct 2026 18:45:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:331::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:69:00:cc:34:4c:7f:ab:70:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:50 2026 GMT
            Not After : Oct 28 18:45:50 2026 GMT
        Subject: CN=85df0a2f-d92d-44fa-b4b1-ce063f5ee2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:83:f7:df:9b:7c:04:b8:70:43:35:f3:95:
                    a7:ca:2b:e6:f1:30:57:da:27:d9:db:ab:26:79:7e:
                    73:a2:82:34:33:36:0a:4c:dd:ad:b0:f8:ba:81:dc:
                    93:ef:fd:58:6e:6d:2f:78:8e:a7:1d:3a:6f:5a:67:
                    41:a2:f8:e2:7a:e1:6d:1c:af:ea:53:b0:17:23:8b:
                    9c:e1:be:28:99:db:d3:86:80:06:78:52:be:50:7d:
                    a5:f1:00:2c:1f:9e:d6:6f:5e:68:75:64:b5:f1:c2:
                    47:fd:38:dc:5c:a6:76:6b:1d:01:43:48:37:60:09:
                    08:52:f5:29:22:61:6b:2e:2e:23:e8:c9:fb:ac:93:
                    d8:b2:ea:e2:f0:37:12:0c:fd:26:83:4b:a1:91:1c:
                    a5:e0:0c:bb:c4:50:23:69:fe:a6:0a:e5:06:d0:58:
                    95:3e:5b:ab:e0:2e:cd:84:67:2a:50:7a:bd:51:ee:
                    21:38:b1:9d:5f:61:91:b5:d9:f0:c3:5c:7e:c0:8f:
                    c1:6a:45:d2:02:d0:01:20:bb:8c:28:ec:cd:b0:60:
                    3c:d7:74:9d:f2:f2:9b:0d:94:f3:6a:94:26:84:64:
                    f1:86:44:3b:f8:be:63:65:ca:cb:6d:46:39:65:c7:
                    94:64:0b:bd:37:f3:24:1c:37:d5:32:dd:07:98:76:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AC:9B:EA:D7:C8:6D:A5:02:0A:7D:40:91:C6:BF:62:D6:F7:E3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/edcce95f-0c34-334a-af25-9fdbb1ec77f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:331::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:45:f8:e1:2f:1c:8a:90:f3:91:95:b6:60:e0:79:fb:ae:
         dc:05:8c:cd:92:97:50:fe:01:28:7f:a7:51:40:48:79:fb:f7:
         dc:80:52:ca:e9:26:2b:4b:15:8c:52:f7:56:26:eb:56:c7:53:
         50:50:5b:32:ea:99:83:c8:c6:68:3f:d9:e2:33:f3:d5:08:91:
         b1:21:7e:93:78:4a:10:14:9d:64:a5:e3:9e:21:38:75:c8:91:
         8c:06:89:b3:07:30:12:57:e1:59:fd:0e:e9:37:c2:43:c6:a8:
         48:8c:a3:3b:9b:d2:9b:46:f5:28:35:b8:24:a3:df:5e:ba:ec:
         38:56:05:d1:e2:11:3e:50:de:c5:79:2f:80:ec:93:8a:54:23:
         67:6c:6d:91:fb:3a:9c:5b:30:f9:97:59:1b:77:2e:f2:e8:2b:
         3c:7b:82:54:cc:ef:c1:26:63:df:a2:ec:d6:b8:df:a3:5d:a2:
         94:d3:98:a6:f5:71:67:73:47:bf:03:41:d5:a8:e6:72:94:2e:
         1c:5e:2c:52:cc:df:44:dd:03:21:eb:f3:94:e7:0a:d1:30:bb:
         dd:4f:a4:23:eb:15:86:bb:48:bb:9a:15:22:6f:47:b9:71:e1:
         b8:af:bb:d2:1b:38:98:76:18:b9:0b:f4:1f:76:aa:79:fb:e2:
         68:bb:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:15:26 2026 by rpki-client