Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f0940745-2171-367f-afd0-864cfe046f49.roa
File:                     f0940745-2171-367f-afd0-864cfe046f49.roa (raw, json)
Hash identifier:          FOVY/9vZDRWjEhw/wbOFijy5rZlXAnjcRFKZM/rzqxQ=
Subject key identifier:   44:E5:8D:E4:6F:76:17:BA:06:62:B5:06:FA:44:7D:75:D9:C6:1D:3C
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6247707C89B183D4FECB80
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f0940745-2171-367f-afd0-864cfe046f49.roa
Signing time:             Thu 30 Jul 2026 18:45:34 +0000
ROA not before:           Thu 30 Jul 2026 18:45:34 +0000
ROA not after:            Wed 28 Oct 2026 18:45:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:11c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:47:70:7c:89:b1:83:d4:fe:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:34 2026 GMT
            Not After : Oct 28 18:45:34 2026 GMT
        Subject: CN=5c591eed-7192-4881-a54e-4d236423b1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:a2:2e:72:46:41:fb:9a:9f:1f:f0:b8:86:
                    47:28:cd:7b:5a:24:00:0e:d5:91:50:a2:d7:9e:4c:
                    6f:78:b6:40:b6:c1:18:01:0a:5a:c2:a4:bc:33:91:
                    7e:42:bb:48:6a:81:2a:96:d8:af:ec:8a:b5:89:27:
                    72:cc:38:56:26:f3:cc:2d:af:04:36:e9:1d:09:9b:
                    42:a6:6e:5c:55:20:06:bc:ff:c0:0d:9e:79:d7:25:
                    fd:a0:71:db:00:09:1b:6b:7d:45:87:60:81:45:1f:
                    9a:1f:c0:13:9c:50:c3:d2:4e:dd:e1:42:a6:7c:3e:
                    41:04:f8:ae:15:17:51:a2:b6:eb:3c:2b:49:ca:16:
                    9a:74:c9:dc:26:b7:dd:ae:18:bb:f8:2d:c7:41:a3:
                    44:2c:8b:31:9d:34:2a:b6:57:c2:97:8a:c9:e0:20:
                    44:03:ef:e9:da:67:be:bf:10:76:f1:10:e8:7e:42:
                    44:ba:38:59:fe:d8:d3:b6:bd:b3:e3:e3:2e:03:c5:
                    cc:05:9b:b5:14:19:4e:b9:e2:66:04:e1:5f:e0:7d:
                    a4:44:7c:3e:cf:a6:60:9f:2b:10:ce:80:9c:4b:84:
                    e3:b6:48:97:5c:fc:c1:ed:82:af:21:09:5a:81:33:
                    1f:86:d8:0e:de:03:24:e7:27:9f:93:7f:ca:b1:48:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:8D:E4:6F:76:17:BA:06:62:B5:06:FA:44:7D:75:D9:C6:1D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f0940745-2171-367f-afd0-864cfe046f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:11c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:b1:fb:45:74:03:30:49:d4:47:19:0f:e1:98:d6:23:a9:
         65:86:ed:e0:71:99:f4:20:bf:03:ad:88:89:9e:11:58:74:65:
         18:c9:21:cf:2a:c4:96:cf:d1:11:0d:d8:f0:7f:8c:ef:72:81:
         21:26:e2:ae:52:a2:82:15:e0:15:d3:d9:20:e3:db:55:d3:03:
         ea:7d:6f:0b:33:03:77:cb:c4:0f:1c:bb:31:51:39:84:cb:86:
         05:89:d6:ca:4b:5b:85:f8:6d:6c:89:88:16:5f:ae:2a:3d:30:
         49:30:22:80:bf:56:87:66:b6:9d:b9:0b:c5:c0:59:89:a7:89:
         6f:aa:e1:16:43:cf:1c:d5:3e:b9:bb:15:c4:04:35:17:ac:13:
         69:03:31:9c:e9:b5:5f:cf:ee:76:fd:fc:ad:90:20:8d:97:79:
         ac:17:a3:d2:4c:2d:e0:a1:79:e2:b1:75:23:5b:37:d4:27:0c:
         9c:41:19:c2:3a:c3:a6:1d:f0:8a:0a:9c:84:fb:41:64:b7:df:
         42:85:f5:e2:59:66:b3:7f:1e:ff:e8:f8:7b:9c:da:04:b6:bc:
         4b:a7:7d:06:35:89:6e:35:8d:a5:4f:ed:4d:3d:03:31:6d:d1:
         42:41:35:1a:99:e2:69:50:7e:12:3b:63:af:df:92:3a:ea:3a:
         37:99:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:01 2026 by rpki-client