Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/fa28ed53-dd2b-3c19-bbcd-2d1d17a877f4.roa
File:                     fa28ed53-dd2b-3c19-bbcd-2d1d17a877f4.roa (raw, json)
Hash identifier:          vABT1o9lbkabNlvuil/9Af16lVseFRuep+DxrKzEBpA=
Subject key identifier:   5C:8B:96:49:E7:3C:F0:41:FC:90:89:66:BD:3E:2D:1C:1F:2F:B3:36
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC625817087F7930D43EA780
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/fa28ed53-dd2b-3c19-bbcd-2d1d17a877f4.roa
Signing time:             Thu 30 Jul 2026 18:45:42 +0000
ROA not before:           Thu 30 Jul 2026 18:45:42 +0000
ROA not after:            Wed 28 Oct 2026 18:45:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:234::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:58:17:08:7f:79:30:d4:3e:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:42 2026 GMT
            Not After : Oct 28 18:45:42 2026 GMT
        Subject: CN=9b52c673-ec52-4bcb-8281-82214d4a6704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:ce:19:ca:77:7e:f0:55:c9:3f:c4:57:be:
                    18:07:b2:d9:14:26:4d:28:48:2c:f4:95:04:c6:96:
                    b1:8e:c8:d5:2b:b9:70:26:23:87:b9:4f:0d:18:df:
                    f3:ce:cb:6d:2f:d5:bc:2f:fd:e6:10:a7:ea:c0:ba:
                    20:54:0b:54:fb:d6:e6:55:b6:3d:61:24:ea:21:97:
                    88:20:4b:32:5a:48:c5:a5:90:f8:a6:1b:a9:23:54:
                    27:c8:47:bb:f6:0d:c2:b9:a2:08:c6:f7:fa:30:ad:
                    53:21:81:3c:32:33:d2:a9:48:e1:91:bf:77:f7:64:
                    48:29:37:9c:c9:3e:93:99:a0:20:01:76:1a:90:20:
                    b3:af:0a:ab:57:9c:0a:20:fb:23:1a:0a:f6:01:6d:
                    c1:23:de:a5:a1:54:6c:cb:42:1a:88:55:e5:b3:93:
                    73:72:b6:1b:ca:76:7c:be:59:dd:72:99:01:f9:50:
                    3e:a1:18:09:c5:4d:ee:ae:53:8f:cb:78:bf:43:04:
                    02:b1:d9:5c:6d:6a:82:a9:33:70:85:e9:d6:45:be:
                    02:2d:3f:f7:fa:ee:38:7d:cb:4f:c8:c6:f6:04:6d:
                    23:36:39:a3:d0:60:9b:dd:fa:9e:71:78:78:89:8e:
                    87:9f:44:8d:a2:88:d7:f8:c2:f1:50:ea:67:99:75:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:96:49:E7:3C:F0:41:FC:90:89:66:BD:3E:2D:1C:1F:2F:B3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/fa28ed53-dd2b-3c19-bbcd-2d1d17a877f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:234::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:13:0c:63:71:de:59:97:ea:c9:2c:21:f0:88:9d:95:ce:
         a2:15:ee:32:6d:78:4e:57:b1:5e:cb:45:62:71:db:75:cf:7c:
         66:a5:57:70:99:31:4d:65:87:70:1c:86:09:34:f4:d5:ff:20:
         15:2b:c6:b5:c5:95:c0:44:35:ed:8f:b6:b0:8f:16:34:52:d5:
         db:12:92:ef:17:63:f0:f6:9f:f2:52:57:64:5e:25:1a:c8:55:
         08:3c:c3:12:a8:0c:f9:7a:8d:12:d9:84:2a:11:aa:d1:ea:e9:
         66:7b:a9:b8:13:fc:8e:be:93:57:de:54:3f:30:fc:14:5d:55:
         db:f2:f9:8c:70:f3:30:e9:2c:39:35:f6:ab:4a:01:6e:bd:1a:
         a5:93:a5:b9:eb:1a:b5:90:a8:a5:7a:17:bd:7c:03:52:d6:07:
         2c:39:2e:17:39:07:36:79:a2:a5:c2:fe:61:da:f9:bb:f2:1e:
         36:f3:af:57:e3:32:9e:88:b6:00:b1:43:2d:14:02:8c:4e:9e:
         3a:35:99:18:45:56:cf:39:4e:22:7c:eb:bc:c4:97:2f:58:11:
         25:d7:30:a0:8d:e7:14:08:72:61:34:8b:b3:0e:30:68:a3:8c:
         5b:ed:3c:97:a2:4b:b8:ff:6a:7e:c8:00:16:ae:69:77:df:1d:
         62:1d:49:9d
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYlgXCH95MNQ+p4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDU0MloXDTI2MTAyODE4NDU0MlowLzEtMCsGA1UEAxMk
OWI1MmM2NzMtZWM1Mi00YmNiLTgyODEtODIyMTRkNGE2NzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyfOGcp3fvBVyT/EV74YB7LZFCZNKEgs9JUE
xpaxjsjVK7lwJiOHuU8NGN/zzsttL9W8L/3mEKfqwLogVAtU+9bmVbY9YSTqIZeI
IEsyWkjFpZD4phupI1QnyEe79g3CuaIIxvf6MK1TIYE8MjPSqUjhkb9392RIKTec
yT6TmaAgAXYakCCzrwqrV5wKIPsjGgr2AW3BI96loVRsy0IaiFXls5NzcrYbynZ8
vlndcpkB+VA+oRgJxU3urlOPy3i/QwQCsdlcbWqCqTNwhenWRb4CLT/3+u44fctP
yMb2BG0jNjmj0GCb3fqecXh4iY6Hn0SNoojX+MLxUOpnmXWIjQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFyLlknnPPBB/JCJZr0+LRwfL7M2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvZmEyOGVkNTMtZGQyYi0z
YzE5LWJiY2QtMmQxZDE3YTg3N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AjQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAGcQTDGNx3lmX6sksIfCInZXOohXuMm14TlexXstFYnHbdc98
ZqVXcJkxTWWHcByGCTT01f8gFSvGtcWVwEQ17Y+2sI8WNFLV2xKS7xdj8Paf8lJX
ZF4lGshVCDzDEqgM+XqNEtmEKhGq0erpZnupuBP8jr6TV95UPzD8FF1V2/L5jHDz
MOksOTX2q0oBbr0apZOluesatZCopXoXvXwDUtYHLDkuFzkHNnmipcL+Ydr5u/Ie
NvOvV+Mynoi2ALFDLRQCjE6eOjWZGEVWzzlOInzrvMSXL1gRJdcwoI3nFAhyYTSL
sw4waKOMW+08l6JLuP9qfsgAFq5pd98dYh1JnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:11 2026 by rpki-client