Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
File:                     2505f67b-6fa0-3842-b151-ace4058d830a.roa (raw, json)
Hash identifier:          XnQ+UGt+Isoka7gOgo0JuvwXc/vFKZrGddM+zbcuNoA=
Subject key identifier:   4E:5E:FD:C2:20:C1:AC:18:2B:34:91:1B:C6:15:A5:BE:76:60:12:0C
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F4328584F3CE28570B1CE877F1C6212C0
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     809
IP address blocks:        2620:13b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:85:70:b1:ce:87:7f:1c:62:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=3b702613-6573-4b94-8b06-1386f355e770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f3:66:fa:c4:2d:4a:b8:8f:7e:92:42:4f:a5:
                    4c:51:05:53:2f:77:3f:7d:ff:61:65:ee:82:9a:29:
                    15:98:5d:cf:61:d9:52:73:5a:6b:62:ff:02:33:da:
                    34:23:97:d9:5c:82:a9:33:15:48:5b:fa:fa:02:e9:
                    04:2c:c0:33:a4:73:27:54:f5:a5:fe:36:86:0b:05:
                    33:2b:3d:9a:c7:79:19:e0:ff:73:f7:77:bc:ec:24:
                    48:01:86:ec:af:d9:89:8b:fe:9c:53:e5:b2:b3:20:
                    af:f2:98:15:46:aa:55:3d:d3:69:98:73:f5:15:d6:
                    05:38:c9:21:76:af:e6:c8:a6:6c:f2:5d:ca:12:0f:
                    bb:ac:40:11:b6:26:ff:37:6d:aa:ad:12:1f:dd:5e:
                    b9:16:45:01:10:64:7f:54:05:4d:30:2d:b8:68:e9:
                    8d:fb:06:7d:50:ad:69:cc:b3:89:94:b6:bd:8d:bc:
                    ea:f0:59:a5:32:bd:48:9f:4b:e4:39:67:39:7b:64:
                    26:99:68:df:20:a3:ff:01:13:d6:d9:7a:4b:41:89:
                    50:0c:a8:d7:b8:d7:fc:5b:4b:11:df:f8:22:f7:04:
                    01:a4:7f:08:f3:dd:b6:6d:5d:c5:7f:44:67:82:a9:
                    52:96:85:e5:46:ac:24:51:60:9c:90:c0:13:d6:a4:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5E:FD:C2:20:C1:AC:18:2B:34:91:1B:C6:15:A5:BE:76:60:12:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:74:96:3f:53:45:d2:22:ca:70:8c:d1:2f:c4:2a:f0:4e:
         83:fe:f1:2b:ab:81:91:21:34:3f:7d:ed:e5:c2:31:9c:7d:42:
         86:21:d3:52:4c:6c:88:7d:a5:e1:a8:42:78:f4:c9:f6:10:87:
         65:54:9d:30:b4:22:f0:92:5e:bf:df:1a:15:78:81:47:15:89:
         69:35:6f:36:21:32:d9:5f:b9:0a:17:4f:24:29:4a:fa:e1:36:
         3c:23:de:b9:e9:a8:b5:9c:93:9c:65:0f:d3:5d:99:09:93:bc:
         86:a8:8d:9b:3f:7f:67:5b:81:54:c8:5f:b8:a6:fd:b4:20:ea:
         5f:0c:97:d9:f6:d0:d5:5f:15:77:43:50:db:57:00:de:c9:48:
         0c:19:6a:2e:59:68:31:59:8a:bc:04:8c:7b:33:61:8e:9d:b0:
         e1:8d:e7:99:ef:66:8f:0f:2e:21:09:5d:15:17:1f:da:d6:7b:
         67:89:65:e4:50:06:d8:20:ed:88:ff:31:02:3f:47:81:e6:92:
         98:1c:b1:91:9d:9a:b5:ed:ee:9d:f0:d9:76:b7:a6:50:50:01:
         e3:db:c5:32:24:8b:26:6c:0c:6c:73:53:fc:4f:2d:f4:09:0a:
         f7:61:ea:b0:9c:b5:df:b3:65:c0:09:2f:02:5e:d5:cc:82:4e:
         5f:6d:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:12:08 2026 by rpki-client