Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f8500fae-0211-38c6-a31a-7c0806bb5ddf.roa
File:                     f8500fae-0211-38c6-a31a-7c0806bb5ddf.roa (raw, json)
Hash identifier:          xDgqxjgZbv4RfhKhkOz9P6GnIGtc/swPYMxbGDZTyKo=
Subject key identifier:   CC:70:5B:2C:75:F9:BA:8D:99:62:0A:72:21:9D:95:F7:0E:00:E3:4B
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6258C6AF7A77F14DE74080
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f8500fae-0211-38c6-a31a-7c0806bb5ddf.roa
Signing time:             Thu 30 Jul 2026 18:45:42 +0000
ROA not before:           Thu 30 Jul 2026 18:45:42 +0000
ROA not after:            Wed 28 Oct 2026 18:45:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:23f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:58:c6:af:7a:77:f1:4d:e7:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:42 2026 GMT
            Not After : Oct 28 18:45:42 2026 GMT
        Subject: CN=20ae38e8-99df-454e-9690-402a34de2e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:bc:70:a2:e2:a8:6e:f0:f3:6b:83:9e:18:
                    27:9e:81:3b:1e:6f:3a:72:03:b9:9b:b9:c7:25:4a:
                    62:69:96:21:ef:3c:96:00:ff:b0:d2:a0:4f:1e:61:
                    58:5a:70:5e:90:25:68:ca:9a:f6:ba:94:7c:c6:3c:
                    7f:82:c7:7c:86:ba:23:e5:68:b7:3e:df:f7:10:de:
                    df:1f:5f:fc:00:8e:bb:3f:08:80:4f:76:23:a2:a4:
                    d7:8a:51:ea:32:5d:b4:5e:fc:40:92:c5:bd:cf:b4:
                    67:34:58:0f:f1:be:a2:6a:3c:68:9c:c9:5e:a6:8a:
                    00:40:a3:df:33:e8:71:71:7b:94:2e:9b:2e:35:a2:
                    19:9d:4e:33:6b:eb:59:e2:4a:2e:0f:5f:1e:3b:06:
                    44:ca:81:21:84:fc:31:e0:e1:20:4f:ac:a2:7f:61:
                    27:62:ae:18:ec:64:91:b0:08:48:39:6c:41:c5:55:
                    91:78:af:c1:67:e7:6d:18:7a:85:2a:bd:32:d1:bb:
                    3f:f4:ad:2e:4a:2b:b6:d9:dd:b5:7e:75:b7:e0:0f:
                    f8:65:43:09:2b:69:da:4c:09:ab:d0:a7:8e:f7:97:
                    bd:2e:c0:29:b4:e1:72:bb:b7:6a:bc:7e:64:4b:51:
                    27:ab:c5:7f:16:86:4c:d4:66:ce:f7:b2:fc:68:90:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:70:5B:2C:75:F9:BA:8D:99:62:0A:72:21:9D:95:F7:0E:00:E3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f8500fae-0211-38c6-a31a-7c0806bb5ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:23f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:5c:75:b0:f1:66:fa:26:b3:4d:21:4d:88:92:ba:31:d9:
         ad:d4:b8:e6:c3:14:91:10:23:b2:25:1d:ea:49:a6:e1:50:fd:
         00:79:c3:02:cc:56:e6:af:26:60:35:53:44:46:d2:69:a9:64:
         09:46:65:d2:56:e0:bc:fa:4d:48:85:a4:84:b1:92:76:24:8a:
         3b:f2:ac:f7:50:f1:68:5e:ea:95:06:d4:1a:ed:c0:d0:f3:70:
         76:b3:a4:a3:16:0a:30:0d:47:2e:d3:cd:97:47:58:21:b4:ba:
         1c:66:81:6f:df:ea:07:00:92:0d:04:0c:49:ef:06:27:78:e4:
         ee:94:85:32:7e:e8:4d:d8:d0:9d:04:ab:1d:b7:97:e1:ee:40:
         26:ac:7a:a5:79:c6:93:74:8b:db:4d:3b:0a:15:4e:bf:1d:19:
         81:82:ff:32:9f:2c:f7:bf:6d:20:e9:d1:da:4f:f0:5c:75:0e:
         da:95:d5:5b:3f:8c:4e:3c:84:1d:96:71:d5:19:77:8f:24:9f:
         a1:28:ba:23:74:9b:80:b3:b8:1e:37:bf:7b:0c:5e:34:25:1c:
         03:74:88:89:88:33:52:2a:f2:ff:c0:5d:eb:8b:9a:d2:04:b0:
         c3:02:a5:37:c4:d9:85:6d:60:9f:4c:f5:82:88:9e:3d:62:26:
         39:d0:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:16:19 2026 by rpki-client