Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25a3be1c-7f97-361b-9b1a-c05728b97a6b.roa
File:                     25a3be1c-7f97-361b-9b1a-c05728b97a6b.roa (raw, json)
Hash identifier:          u4Zt1vHEhSINnp9Oax4JhoLKa4PfRLYjJOhw43cOVTU=
Subject key identifier:   72:A8:6E:F0:B3:9C:B8:F4:15:5F:38:92:BD:14:43:B8:D6:61:3D:82
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584BD71EB26E7957C44A78B68EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25a3be1c-7f97-361b-9b1a-c05728b97a6b.roa
Signing time:             Wed 12 Nov 2025 23:48:21 +0000
ROA not before:           Wed 12 Nov 2025 23:48:21 +0000
ROA not after:            Tue 10 Feb 2026 23:48:21 +0000
asID:                     20115
IP address blocks:        2602:102:1012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d7:1e:b2:6e:79:57:c4:4a:78:b6:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 12 23:48:21 2025 GMT
            Not After : Feb 10 23:48:21 2026 GMT
        Subject: CN=2ac6a7de-2848-4c71-98b8-4ac9d53050bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:4e:9f:de:af:2f:cf:3a:2f:df:7f:23:72:
                    f7:7d:36:11:2d:13:17:fc:71:11:b1:ee:ea:e0:98:
                    63:19:02:1d:4a:da:76:f8:97:2a:73:f8:bd:48:27:
                    b5:ef:32:33:fc:d2:4c:d4:4f:36:2c:12:d9:7a:d8:
                    89:d3:e7:87:00:61:5b:a1:9e:4c:ca:e8:95:fc:3b:
                    09:36:ee:6f:2d:19:23:56:bd:d9:81:e8:ae:85:86:
                    80:cb:b9:0f:52:d8:bb:89:8d:38:66:76:c3:13:e0:
                    e8:d1:fb:e9:7c:19:d5:64:e0:f7:a3:ef:8c:b3:c8:
                    73:ac:9e:af:53:77:77:8e:d0:b4:30:c8:1b:3d:56:
                    06:ac:68:94:c6:17:92:f0:1a:79:e5:8a:19:42:88:
                    19:ba:56:bb:a5:0e:9e:b2:30:e0:6b:67:b0:96:97:
                    bf:f2:61:c5:21:5d:e6:8e:b1:9b:82:26:d0:85:3d:
                    72:0f:88:ab:20:dc:76:e2:82:1a:08:8a:d7:c2:80:
                    71:de:c5:e3:58:b0:ec:c9:bc:b6:1a:5d:fc:14:2f:
                    95:60:e7:01:74:94:a2:cc:17:fb:08:28:88:ab:23:
                    ca:90:77:d8:18:05:42:fd:37:d6:97:af:b9:9c:05:
                    47:5c:f3:be:74:45:f0:e1:64:81:b3:2e:48:fd:67:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A8:6E:F0:B3:9C:B8:F4:15:5F:38:92:BD:14:43:B8:D6:61:3D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25a3be1c-7f97-361b-9b1a-c05728b97a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:102:1012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:11:41:14:95:64:44:76:82:ec:b2:1f:36:1c:30:a8:b8:
         ce:fb:81:f0:fc:02:7d:24:70:92:1a:34:d3:c9:e8:97:cd:90:
         a9:7c:1d:78:b9:e1:99:a8:a2:a5:a5:1b:96:51:1c:d4:46:f9:
         e5:a6:fa:24:d3:5d:99:ab:96:aa:5a:e8:2a:ee:c0:97:b7:09:
         59:5c:0e:d2:c2:f4:59:c9:69:1a:ff:6f:d9:ee:e7:db:5b:ca:
         11:d2:ca:d3:15:50:0e:40:fe:9f:78:1a:8f:d9:96:90:1d:e2:
         95:89:21:ff:9c:61:00:79:fc:20:11:6a:b8:23:b4:69:bf:57:
         b2:fa:7c:ba:2f:b0:77:2e:80:bb:50:33:85:48:74:cf:17:34:
         d6:1f:ec:8c:2e:59:aa:e6:ff:62:b0:d1:53:55:e9:7a:2d:bf:
         df:d1:5f:98:3c:7e:39:c5:54:38:7c:f8:0d:4a:eb:de:96:91:
         36:96:e2:bc:08:52:34:3a:e8:ac:a2:fc:a4:10:f0:08:55:6c:
         5d:c9:8f:83:22:fd:53:8c:31:ce:f1:45:ac:fc:2a:5b:30:1d:
         41:db:f2:5f:d8:bf:25:be:c9:18:69:bf:9c:05:49:97:6b:a3:
         ec:f9:f2:54:df:f8:41:51:43:fb:1b:61:c3:60:70:23:c3:08:
         32:d0:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 03:10:04 2025 by rpki-client