Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f0fa197c-67fc-3a46-9306-78a37701b698.roa
File:                     f0fa197c-67fc-3a46-9306-78a37701b698.roa (raw, json)
Hash identifier:          RtTKrS2JwgnozPML6D+vuRVDowHDlQ/ckBAWYxHZCY0=
Subject key identifier:   7A:4C:DA:4B:8D:14:E6:6A:E4:7B:9B:B6:D7:0D:A4:6E:BA:8A:7A:83
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC624B485DF3B6B1C5BC9038
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f0fa197c-67fc-3a46-9306-78a37701b698.roa
Signing time:             Thu 30 Jul 2026 18:45:36 +0000
ROA not before:           Thu 30 Jul 2026 18:45:36 +0000
ROA not after:            Wed 28 Oct 2026 18:45:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:15f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:4b:48:5d:f3:b6:b1:c5:bc:90:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:36 2026 GMT
            Not After : Oct 28 18:45:36 2026 GMT
        Subject: CN=bc6510c2-c1db-4639-a92c-eefb71d6cc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:65:0e:ff:05:32:e9:ff:27:3e:74:b2:b4:07:
                    19:7a:73:72:0e:da:de:36:58:b6:2e:69:e2:9b:1b:
                    27:6c:4f:4f:3a:b8:51:94:20:91:82:52:47:15:e0:
                    00:15:78:32:68:98:89:7e:83:0b:30:f2:cd:b1:85:
                    63:eb:95:42:1b:65:e9:41:5d:40:b8:74:48:de:0f:
                    a5:cb:94:78:6b:18:f7:39:0f:fe:68:dc:f9:16:4f:
                    f5:55:99:6a:93:bc:04:7c:43:50:a3:19:f1:ee:a8:
                    69:62:33:c5:9d:55:15:41:c3:9c:4e:74:3e:f5:40:
                    37:5a:f9:d5:f8:f7:51:e0:f6:4f:42:f3:6e:99:c9:
                    76:61:49:73:96:b3:ab:32:65:8c:f0:f5:16:cb:7f:
                    f4:d7:6f:c9:b2:b8:8e:be:76:e1:ad:ba:09:6c:a1:
                    fc:ba:c2:7c:b6:d5:71:4c:f0:02:1f:1f:ac:ce:3e:
                    e4:91:bf:79:e6:fd:ab:16:b5:96:c6:32:0f:1d:2a:
                    e8:fb:ff:6d:c9:b9:19:00:a6:6d:c2:4c:8c:59:71:
                    03:9c:17:19:85:a7:93:c0:ca:cf:a9:6d:53:14:f0:
                    14:9a:76:58:2b:29:1d:98:b9:bf:17:fc:33:35:ec:
                    7f:3d:81:5c:1b:73:0c:ab:26:2b:05:c8:a2:90:fb:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4C:DA:4B:8D:14:E6:6A:E4:7B:9B:B6:D7:0D:A4:6E:BA:8A:7A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f0fa197c-67fc-3a46-9306-78a37701b698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:15f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:30:90:9f:bf:4a:14:90:ce:3a:c2:c2:5a:92:6e:24:0e:
         d6:f3:f5:99:b7:d1:38:6e:81:42:07:ca:6b:49:55:58:45:45:
         b4:75:a9:ca:58:b2:5d:4c:e8:ee:d0:39:4e:38:a1:82:f0:0a:
         5b:a1:3f:76:fd:db:5f:68:1c:04:72:8b:fe:21:22:72:2b:be:
         55:32:45:36:19:3c:df:1c:d7:12:28:6a:2f:d0:0a:58:83:4c:
         e3:9d:83:0e:1f:c1:87:b4:f8:1c:3d:db:a5:45:3a:e6:28:9e:
         0c:43:79:1b:9d:d4:3e:30:f9:ec:9e:80:f8:17:a4:3e:0a:a2:
         2c:b0:70:07:f3:97:e0:66:d4:64:8c:1a:59:9f:6c:0b:47:e7:
         6c:a2:fb:9a:c2:67:c7:fc:e8:67:e2:48:cb:90:b7:e8:ae:09:
         56:12:47:e0:67:a3:23:ee:ac:1b:ae:8d:38:8f:6f:2f:14:28:
         17:0c:ca:fe:e3:af:7b:7a:c0:2f:3c:6b:45:7d:71:91:b2:6a:
         be:90:81:87:18:c9:3b:fa:8d:57:15:f0:c9:92:46:0e:a7:e6:
         f4:bc:a8:73:a4:c2:89:ec:c9:09:f8:2f:1a:9d:2a:75:6c:bc:
         7c:fe:fd:6e:ec:45:b7:ca:30:56:88:97:d5:a5:15:da:8b:35:
         d0:dc:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:18:46 2026 by rpki-client