Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
File:                     2505f67b-6fa0-3842-b151-ace4058d830a.roa (raw, json)
Hash identifier:          04aavjuUxRrShu6JraMF8FQAUGVpjnzWHtMZ2S9Mf34=
Subject key identifier:   3B:21:19:DC:8B:12:1F:AA:09:D3:C9:88:C7:0C:21:F0:B7:F9:3F:DB
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F4328584DBA3AE380C10F1B1BB651BA80
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     809
IP address blocks:        2620:13b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e3:80:c1:0f:1b:1b:b6:51:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=f96b5405-a4d6-4cf1-a163-0755500e32a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:db:4c:2e:8d:7d:a9:89:ad:3a:29:5b:20:
                    65:3a:2e:83:c6:f2:24:9e:8f:fe:21:26:92:c3:73:
                    c2:b6:16:4d:f4:30:c7:75:7f:55:17:63:99:33:b0:
                    78:66:10:76:be:34:d2:6c:58:90:9a:39:8e:21:15:
                    7d:d9:7d:1a:6b:d1:30:80:a5:e9:ed:38:ef:13:da:
                    92:24:c7:65:29:5f:9a:eb:f2:f9:5a:b2:19:14:e4:
                    e4:07:aa:c3:8c:bb:22:a2:b7:bf:11:8b:40:9c:26:
                    aa:df:14:91:81:f5:76:d0:36:05:d8:91:93:e4:71:
                    bc:bb:d0:a4:7f:57:bf:26:9d:2d:df:24:5e:6f:73:
                    16:b9:ba:15:74:75:0a:d0:72:62:62:7c:d4:2e:16:
                    af:50:84:5b:ef:53:4e:dc:09:e7:1d:4a:dd:1b:1d:
                    02:99:94:0b:ff:e3:16:39:c2:21:61:24:b7:42:3c:
                    0f:75:b9:ef:1a:6a:14:5b:7e:17:cf:e1:a6:ae:6f:
                    43:f2:30:dc:29:cf:a7:99:6d:bf:be:d0:41:ad:63:
                    5e:8c:fb:85:66:a9:e0:d9:29:f5:e7:d6:c6:68:92:
                    2f:4f:cd:99:2d:3d:ba:be:6f:50:09:3b:97:54:98:
                    d6:20:74:b8:87:4f:67:ff:e3:40:32:bc:ca:c2:18:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:21:19:DC:8B:12:1F:AA:09:D3:C9:88:C7:0C:21:F0:B7:F9:3F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:04:41:00:e3:c6:82:dc:67:33:e0:12:59:46:55:78:f4:b2:
         5e:d5:55:84:37:c5:d9:16:1e:dd:34:0f:c7:82:dc:7a:94:e5:
         3a:70:7a:24:67:c6:dc:15:e2:e2:90:8a:a1:ac:21:18:7a:be:
         7b:2e:9c:eb:6e:f8:7d:2d:26:19:dc:16:fe:77:15:9b:20:89:
         d3:e5:2f:df:c7:64:32:91:cf:03:e2:a6:a2:3d:cd:45:78:e7:
         80:e6:0a:51:78:84:82:8b:a4:08:b2:15:0d:50:e4:56:18:a2:
         3d:82:46:c9:2a:a4:9c:38:b5:35:1c:00:d6:77:43:13:72:58:
         90:b7:99:68:eb:a3:78:17:1e:c2:86:3e:3c:5b:8b:fc:37:ad:
         5a:f5:78:ce:cb:b2:2d:10:29:cb:98:77:46:7e:d2:05:d2:00:
         b3:90:3f:05:89:20:4f:64:7d:4a:2f:0f:e3:98:79:fb:8d:12:
         17:21:16:46:9d:c5:89:5c:0b:6d:bd:26:a9:a0:4c:1a:68:43:
         f1:a1:10:91:f9:3f:57:52:79:69:e6:bb:f9:8d:ee:7f:a8:53:
         fb:3f:56:92:17:07:db:dd:18:1d:89:bd:ed:35:72:b1:41:b0:
         2b:0b:27:db:ee:80:e3:c4:27:3c:b4:c7:1e:3d:eb:06:f1:09:
         a2:7b:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:48:42 2026 by rpki-client