Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f93ec550-aa17-3581-9486-ddcc11f23898.roa
File:                     f93ec550-aa17-3581-9486-ddcc11f23898.roa (raw, json)
Hash identifier:          MhOKpDj5+Z6CHCw+z/aC14s6eikmLOeRHGFZCJ2GpIU=
Subject key identifier:   85:DA:93:14:FE:BA:F9:23:22:4F:7F:C6:C7:FF:8C:F6:E1:EF:4E:74
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625B61FF05A24150E79000
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f93ec550-aa17-3581-9486-ddcc11f23898.roa
Signing time:             Thu 30 Jul 2026 18:45:44 +0000
ROA not before:           Thu 30 Jul 2026 18:45:44 +0000
ROA not after:            Wed 28 Oct 2026 18:45:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:268::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:5b:61:ff:05:a2:41:50:e7:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:44 2026 GMT
            Not After : Oct 28 18:45:44 2026 GMT
        Subject: CN=bfabc1b6-4833-4ccd-9dd2-93049106021c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:62:fa:ba:99:ad:a6:d7:bc:35:cd:a1:aa:
                    b6:96:05:89:4d:44:a5:fe:ad:9a:29:db:91:1d:f3:
                    d5:c2:5d:b8:b0:4d:6f:49:fa:fb:ab:d1:4b:e8:af:
                    88:47:31:a7:aa:5a:9b:a6:d5:2c:f0:01:df:70:bf:
                    03:de:83:42:0e:a6:5e:d5:58:1f:11:c1:8e:ef:36:
                    2c:6e:7a:4c:b2:57:66:93:7f:af:c8:61:f9:fa:52:
                    fa:27:c4:90:15:7d:14:67:92:d0:20:00:8e:68:26:
                    6f:51:fd:d8:b8:54:0a:ec:1d:54:42:e4:bf:15:ce:
                    b1:1e:3c:55:3f:1d:a5:0e:6c:2c:34:03:70:45:77:
                    da:04:ed:98:ee:de:d8:52:71:87:e0:89:c8:fa:aa:
                    d0:41:0d:ec:e9:be:94:20:eb:6c:85:ec:59:61:14:
                    f8:4d:4b:ab:cf:65:07:4f:7f:73:0b:b8:b6:e1:92:
                    6d:85:c1:11:85:54:6a:82:df:e0:9c:55:02:96:87:
                    7b:e4:ed:01:5b:7b:d2:98:08:db:a0:b3:ea:81:f6:
                    27:39:38:f4:33:cf:e0:80:59:9f:76:0a:ee:2e:b4:
                    c9:06:59:11:5c:37:cf:59:c9:bd:7a:7b:b2:42:ed:
                    c0:ca:c3:72:d5:bb:a5:69:51:de:b2:2e:88:e8:e4:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:93:14:FE:BA:F9:23:22:4F:7F:C6:C7:FF:8C:F6:E1:EF:4E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f93ec550-aa17-3581-9486-ddcc11f23898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:268::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:be:bd:e1:37:b2:3d:88:f1:8f:8b:d7:91:9d:d9:5f:ef:
         93:cc:99:dc:91:a9:3b:1f:62:92:44:a5:dd:3c:14:ad:cc:c2:
         a2:3e:ae:6c:6b:0d:f4:e7:ce:81:3a:1d:f1:68:16:2f:f5:83:
         66:9b:31:4b:18:68:56:da:c7:e9:67:86:14:b6:54:14:85:7e:
         65:e2:58:16:6e:38:66:70:0a:d3:94:38:c0:0b:1d:74:54:66:
         10:f5:00:f3:3a:e0:6d:cf:79:72:77:a8:e5:3a:c7:ba:39:d2:
         82:49:f6:f5:4b:c4:ed:79:29:11:5b:53:26:44:29:ad:5c:30:
         dd:ac:09:5b:eb:d2:f7:90:64:35:a9:c4:42:2b:6d:53:5d:cb:
         9d:9b:59:1f:5d:23:f1:cf:c3:12:15:fa:c0:01:ed:79:f4:ba:
         35:5a:bc:aa:50:d3:81:63:10:59:ec:74:84:37:bf:fd:fa:18:
         ad:b2:4f:39:c5:78:9a:be:38:9b:4a:5e:04:3c:9b:06:01:3d:
         af:dd:a2:e0:87:2e:1e:d5:13:d1:65:cd:5e:6c:e6:74:93:3a:
         62:82:7c:23:25:03:c8:b6:5d:e9:fe:fc:ba:90:fb:d7:f9:c3:
         34:43:b3:6c:75:1f:2d:cd:b4:f4:75:90:38:3e:d9:94:fb:36:
         6b:d2:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:26 2026 by rpki-client