Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f37b4e76-1ea2-33bf-b8ea-3060a9fa1876.roa
File:                     f37b4e76-1ea2-33bf-b8ea-3060a9fa1876.roa (raw, json)
Hash identifier:          /lviTTbnhriAvXujmovSsw+L3jNZZWR6RN/VjYyPSHE=
Subject key identifier:   B1:4B:48:E3:39:17:B7:08:89:74:C5:7B:A9:E6:FF:6E:19:F3:5A:52
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC626874E75B549AFE1BB3A0
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f37b4e76-1ea2-33bf-b8ea-3060a9fa1876.roa
Signing time:             Thu 30 Jul 2026 18:45:50 +0000
ROA not before:           Thu 30 Jul 2026 18:45:50 +0000
ROA not after:            Wed 28 Oct 2026 18:45:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:329::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:68:74:e7:5b:54:9a:fe:1b:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:50 2026 GMT
            Not After : Oct 28 18:45:50 2026 GMT
        Subject: CN=a2f36ed5-5010-4479-81b6-eaa4ec3dc8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:5a:36:39:aa:0a:67:ae:aa:9b:77:5f:5a:
                    55:dd:80:bf:de:1d:bd:3f:a2:5d:7f:60:a0:e4:33:
                    a3:53:7b:d1:1e:a2:46:fc:43:0f:b5:b2:02:f3:48:
                    53:47:17:6a:a2:09:ed:de:9e:6e:46:5e:2f:17:26:
                    57:72:d0:02:5b:67:bc:d2:20:e9:5d:bb:4a:e4:4a:
                    79:9f:eb:3c:ca:10:f2:f9:74:97:47:ed:a0:0d:04:
                    6a:0c:41:96:55:fe:25:c7:7e:9a:b1:2c:8a:66:e7:
                    d2:82:ee:ed:05:79:85:fd:7f:7d:ae:f5:fb:d7:7a:
                    f8:4c:2c:eb:69:76:1e:4d:42:40:35:3b:2a:bf:55:
                    03:5d:31:c0:15:c9:8c:18:7b:0c:db:4a:a2:7a:85:
                    65:7a:77:d5:df:f8:ce:1f:1b:dd:dc:86:37:0f:49:
                    dd:5d:b5:49:89:4a:ba:e7:fb:b8:41:2a:91:79:2a:
                    e9:8e:f1:54:fb:0d:7b:c0:b8:91:b9:48:ed:7f:6f:
                    12:13:2b:74:8a:6d:05:43:46:11:bd:13:1c:e5:80:
                    11:97:6a:5f:17:2a:91:50:dd:81:de:48:b9:53:04:
                    10:19:d4:53:53:90:00:44:ae:35:18:de:3c:f7:81:
                    60:06:56:10:c4:72:26:09:9d:fe:6d:3b:ed:b3:f1:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:48:E3:39:17:B7:08:89:74:C5:7B:A9:E6:FF:6E:19:F3:5A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f37b4e76-1ea2-33bf-b8ea-3060a9fa1876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:329::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:b1:0d:5b:90:18:08:a0:6a:e8:60:35:31:82:b6:d2:29:
         e9:db:f4:fb:c7:92:d2:52:d5:c1:65:86:2c:81:46:ad:97:ff:
         6e:32:ba:56:b8:32:75:c7:fd:c6:1a:d3:d6:52:b9:15:13:ab:
         18:81:82:aa:e3:ec:4c:50:71:35:70:32:a9:bc:14:f9:c4:4b:
         4f:cf:e3:9d:82:5e:c5:8a:48:87:1c:ee:21:2a:be:bd:16:3d:
         72:76:23:56:0b:1d:7e:05:3f:f7:06:04:da:03:53:a4:30:74:
         cd:a1:fd:b0:bb:76:53:14:ab:69:0a:f7:2b:55:99:27:f5:38:
         1b:2a:04:d7:26:1e:df:49:da:9b:07:f2:5b:3e:20:46:b9:4f:
         3e:ab:f0:c0:de:9a:f3:6c:1f:0f:ec:7c:1b:fb:9c:58:c8:8b:
         52:4d:4e:4f:91:3b:ad:7f:0e:29:f0:12:05:98:07:2d:c5:2a:
         f8:46:52:c0:e1:9b:5d:69:04:ae:1e:a4:be:ed:2a:5d:eb:bc:
         61:2f:38:14:8b:67:d3:04:73:86:0e:ac:01:a5:ee:19:04:49:
         7a:31:d0:72:7e:68:5e:be:79:48:01:e6:ea:76:8a:bc:fe:bd:
         5f:b5:6e:5c:4e:e2:3e:34:35:64:cd:41:20:80:cb:74:45:a4:
         6f:a3:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:12 2026 by rpki-client