Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
File:                     2505f67b-6fa0-3842-b151-ace4058d830a.roa (raw, json)
Hash identifier:          1+r1GbQEz5rUs+DfRKrRvXjjlUo99OXH/ox2/+4vfHs=
Subject key identifier:   7F:B8:12:A1:57:AF:62:0C:7B:BA:9B:51:7D:29:FC:B3:48:65:58:78
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F4328584B1806C28153044A189869D980
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     809
IP address blocks:        2620:13b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c2:81:53:04:4a:18:98:69:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=6cc51752-7545-4647-af00-e7e70f3b5e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:d9:5c:25:0e:57:8a:a7:7b:4f:97:aa:9c:
                    cc:71:6d:b4:d6:2f:b5:84:ac:8b:1e:68:03:2a:f2:
                    d4:be:c7:c2:7c:ec:b2:d6:0b:2f:06:46:08:3b:5c:
                    52:af:82:10:f5:17:63:9e:63:c9:63:d0:0d:d7:e2:
                    85:a7:12:19:0f:29:10:3d:51:3f:b9:db:bf:0c:4b:
                    0e:30:f7:db:4f:ec:d7:d2:b9:56:7a:77:25:34:28:
                    75:71:59:9b:56:b2:3d:75:89:6b:fd:af:48:86:5b:
                    d7:d8:3b:36:5c:83:2e:02:5c:2b:7f:6d:20:2a:e7:
                    64:81:80:f7:78:34:74:ec:c6:ed:ae:2f:03:ac:13:
                    fd:4b:0d:82:04:6d:ea:b4:6d:7e:60:d6:f4:3e:1e:
                    25:aa:44:06:43:5c:88:66:25:c1:30:33:b0:6b:65:
                    9e:3a:24:2d:57:0f:53:73:97:27:7d:6b:c1:be:ec:
                    92:b0:cb:f7:72:db:93:af:1f:01:39:09:cb:d8:e5:
                    f1:3e:85:9d:de:2d:30:cf:47:85:9c:1b:03:b5:dd:
                    dd:13:6a:b7:76:6c:88:bb:a4:dc:82:7d:86:ee:40:
                    2a:83:74:37:d9:99:b2:aa:5e:8a:99:6e:a9:c5:1d:
                    85:23:64:be:14:1c:b3:32:13:71:0a:ac:fb:16:38:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B8:12:A1:57:AF:62:0C:7B:BA:9B:51:7D:29:FC:B3:48:65:58:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:4e:23:57:e3:d9:e7:75:e2:71:72:c4:9f:e4:69:b5:20:c1:
         27:60:0c:4a:4a:1b:d3:58:9f:00:e8:99:e8:44:8b:cc:94:83:
         81:1c:25:99:84:f7:ea:78:f9:1a:0a:8f:65:ce:95:93:87:4a:
         98:45:9a:a5:bd:da:85:58:dc:82:ad:1f:31:c9:e0:42:7b:50:
         c1:3c:c5:af:bd:af:9e:2e:2b:2a:41:ab:32:0a:15:2f:22:35:
         2e:b0:0c:dd:0c:0d:d7:a9:34:d4:c7:e2:bd:29:1a:90:73:f6:
         7b:17:8f:bf:a9:ea:55:b3:08:09:fe:1d:b7:d6:cf:0e:a3:0d:
         60:78:a8:98:99:60:c9:94:d5:65:96:0f:09:a6:49:ef:38:3d:
         1a:13:66:74:22:c6:3f:94:d0:be:8f:e8:d6:bb:ff:80:40:35:
         4b:60:87:fb:d0:81:2b:41:89:3f:61:f1:75:24:5a:ac:52:19:
         70:05:75:6b:7a:51:c4:78:34:04:cd:62:f8:cb:32:05:6e:b9:
         0c:c5:c8:23:a6:33:2e:7c:26:4d:17:dc:37:04:de:76:48:6b:
         a9:67:65:bb:b3:41:7f:4a:69:cf:f7:3e:41:73:67:5f:6f:7b:
         84:21:22:d2:4d:aa:20:1b:71:fd:40:e6:80:ab:fc:ff:d7:f8:
         df:64:f0:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBsKBUwRKGJhp2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzBkNGE1MTAtMTQ2OC00NmU4LWJlYWYtZTY2ODFhMTE5
MGM1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NmNjNTE3NTItNzU0NS00NjQ3LWFmMDAtZTdlNzBmM2I1ZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxbZXCUOV4qne0+XqpzMcW201i+1hKyLHmgD
KvLUvsfCfOyy1gsvBkYIO1xSr4IQ9RdjnmPJY9AN1+KFpxIZDykQPVE/udu/DEsO
MPfbT+zX0rlWenclNCh1cVmbVrI9dYlr/a9IhlvX2Ds2XIMuAlwrf20gKudkgYD3
eDR07Mbtri8DrBP9Sw2CBG3qtG1+YNb0Ph4lqkQGQ1yIZiXBMDOwa2WeOiQtVw9T
c5cnfWvBvuySsMv3ctuTrx8BOQnL2OXxPoWd3i0wz0eFnBsDtd3dE2q3dmyIu6Tc
gn2G7kAqg3Q32Zmyql6KmW6pxR2FI2S+FByzMhNxCqz7Fjh5CwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH+4EqFXr2IMe7qbUX0p/LNIZVh4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMGQ0
YTUxMC0xNDY4LTQ2ZTgtYmVhZi1lNjY4MWExMTkwYzUvMjUwNWY2N2ItNmZhMC0z
ODQyLWIxNTEtYWNlNDA1OGQ4MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzBkNGE1MTAtMTQ2OC00NmU4LWJl
YWYtZTY2ODFhMTE5MGM1L2MwZDRhNTEwLTE0NjgtNDZlOC1iZWFmLWU2NjgxYTEx
OTBjNS5jcmwwHwYDVR0jBBgwFoAUZ9+WYAuMnyKzgx5Kvt/kHjFCrqowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMGQ0YTUxMC0xNDY4LTQ2ZTgtYmVhZi1lNjY4
MWExMTkwYzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABOwAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKFOI1fj2ed14nFyxJ/kabUgwSdgDEpKG9NYnwDomehEi8yUg4Ec
JZmE9+p4+RoKj2XOlZOHSphFmqW92oVY3IKtHzHJ4EJ7UME8xa+9r54uKypBqzIK
FS8iNS6wDN0MDdepNNTH4r0pGpBz9nsXj7+p6lWzCAn+HbfWzw6jDWB4qJiZYMmU
1WWWDwmmSe84PRoTZnQixj+U0L6P6Na7/4BANUtgh/vQgStBiT9h8XUkWqxSGXAF
dWt6UcR4NATNYvjLMgVuuQzFyCOmMy58Jk0X3DcE3nZIa6lnZbuzQX9Kac/3PkFz
Z19ve4QhItJNqiAbcf1A5oCr/P/X+N9k8NM=
-----END CERTIFICATE-----
Generated at Wed Oct 15 11:22:49 2025 by rpki-client