Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
File:                     2505f67b-6fa0-3842-b151-ace4058d830a.roa (raw, json)
Hash identifier:          wLoJVPQA3hKhM+7DSUbEiUYbFC6VJqQn/tlIkdVMLAs=
Subject key identifier:   81:9B:21:86:A9:8E:C8:51:89:8E:88:8B:F4:90:03:A6:E9:A9:E9:A0
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F4328584CD99CBF0088DB6454248AC6C0
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     809
IP address blocks:        2620:13b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:bf:00:88:db:64:54:24:8a:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=681f9b29-ac10-4bc5-a6b6-2394eea901a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:4f:84:d3:e7:2a:36:32:e0:d2:e9:c4:9e:
                    ce:0e:b1:2c:17:fd:d9:82:2d:15:25:ff:af:38:36:
                    6a:66:1f:71:ee:ab:83:73:4d:0b:86:a6:9f:92:24:
                    4e:ce:4f:48:20:a3:01:d3:88:4f:35:4f:f4:1c:26:
                    08:56:d4:28:e6:dc:14:5a:27:c0:e2:f9:2d:5d:9a:
                    af:5e:5e:39:91:d0:cc:ef:36:61:6c:e1:ac:2a:f2:
                    4c:ca:dd:a5:5c:92:c1:12:42:40:4a:47:c1:6a:1e:
                    6d:bf:e5:7a:16:1b:6b:b3:e6:af:a9:9c:d3:4e:78:
                    f5:de:4b:ab:e8:f0:c3:69:dc:c4:6d:dd:5f:0e:f2:
                    d1:75:73:35:b0:73:1a:f8:d5:62:de:55:88:b5:70:
                    78:55:66:31:7f:e7:74:0f:34:c8:8b:a4:3d:94:30:
                    b4:59:64:20:fa:5f:9d:dd:21:0d:18:56:3c:a2:26:
                    0a:40:75:a9:f6:cc:50:09:2d:cb:b3:9f:be:20:91:
                    fc:04:72:c8:64:cd:25:8d:ad:8c:22:aa:11:d1:40:
                    5a:7e:23:3e:aa:57:fd:3f:7f:45:a6:d1:94:31:02:
                    35:f5:a5:35:ef:56:dd:bf:2b:da:59:d2:61:fa:4f:
                    36:58:ac:03:3f:00:1f:a8:3c:03:bd:66:e7:e6:a7:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9B:21:86:A9:8E:C8:51:89:8E:88:8B:F4:90:03:A6:E9:A9:E9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:59:aa:09:32:89:65:96:45:1b:a8:30:a7:a8:f9:8e:eb:e4:
         70:24:59:1c:cd:a2:84:61:4b:1b:ae:c2:4b:15:b3:b7:95:8b:
         cd:73:8d:96:6a:36:55:53:cc:2f:09:5e:6d:b4:b6:2c:29:4e:
         5f:b3:7a:46:db:ab:34:35:b6:f0:42:33:bf:bd:11:44:63:5e:
         62:73:11:94:c9:3d:d9:32:2b:2b:a6:c9:92:d3:2b:49:41:c4:
         59:6e:0c:7d:fb:31:cc:32:31:2e:e2:34:18:c4:3c:bc:68:64:
         d4:cc:21:71:a4:12:c5:a8:09:48:22:ee:f8:28:3f:3c:5f:4d:
         2b:e7:dd:ba:37:95:9c:66:e6:bc:bb:98:bf:37:4a:79:88:76:
         66:46:22:ab:29:87:ec:c1:f4:04:0f:d2:c0:6b:33:fe:d5:e4:
         18:21:e8:cf:e5:37:ef:d9:f8:11:3a:f0:dd:54:97:fd:98:4e:
         61:9a:f8:93:15:9d:d4:4f:11:33:eb:09:f8:36:6c:90:9f:f6:
         94:58:c9:27:8e:79:ca:27:12:99:09:88:14:bd:4f:64:da:c0:
         62:c0:4d:da:12:15:c9:5d:76:42:cd:95:78:e8:a6:1f:cd:c6:
         0b:e2:63:fc:6c:86:fb:9e:4f:83:ce:fa:68:fb:a5:9d:c5:ed:
         5c:26:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:25 2026 by rpki-client