Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/a81259d2-0f43-3554-9b9e-511bf83738bc.roa
File:                     a81259d2-0f43-3554-9b9e-511bf83738bc.roa (raw, json)
Hash identifier:          GUu6grPqgEODRsxFWCwY16sgawTdkSWV0dG2lOmmko4=
Subject key identifier:   0C:61:2E:F5:54:91:C1:45:F3:2E:F9:8D:57:33:C6:9A:7E:02:5B:DE
Certificate issuer:       /CN=265e5c58-c30c-41c5-b814-554320a3f4e3
Certificate serial:       010D0C9F4328584B7857430C0642B94715047180
Authority key identifier: 5A:A8:78:C2:15:2E:F2:94:29:1F:42:21:32:DC:78:28:6E:C5:41:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/a81259d2-0f43-3554-9b9e-511bf83738bc.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     54134
IP address blocks:        2602:f674::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/265e5c58-c30c-41c5-b814-554320a3f4e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/265e5c58-c30c-41c5-b814-554320a3f4e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:43:0c:06:42:b9:47:15:04:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265e5c58-c30c-41c5-b814-554320a3f4e3
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=682cd690-4621-40ab-b67f-56a964f0de5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:9c:21:ab:26:2d:5a:ff:3d:4d:44:d2:89:
                    cf:14:39:90:7e:59:61:27:c1:b4:fa:d8:94:34:b4:
                    06:0d:e9:03:ff:87:be:d8:70:3d:db:d5:8d:9c:36:
                    f6:70:fe:e2:45:c6:33:fd:1a:e1:74:77:bf:ea:f9:
                    48:dc:21:14:a6:a5:1b:ad:bb:74:66:84:59:1c:e8:
                    37:a3:d3:e1:79:ff:6d:56:2a:b4:14:38:86:a2:0b:
                    ef:92:d1:b4:d0:68:3a:dd:29:40:80:bc:bc:7d:e1:
                    5d:a2:cb:6e:23:f5:bf:31:59:a2:08:8a:51:39:9a:
                    66:ee:45:c6:c8:63:ca:de:c9:6a:90:50:3a:ba:1b:
                    7d:eb:9d:cf:6f:ab:9c:7a:88:e6:93:45:47:6a:50:
                    88:6c:88:f3:e9:67:d5:38:72:e4:20:a7:73:b6:5f:
                    13:e9:39:c4:8d:11:ba:06:15:cc:1f:a9:40:45:de:
                    c2:4d:34:ef:9b:40:b5:06:f5:05:6e:f1:96:8d:ab:
                    bc:11:15:2c:a3:22:44:1a:c4:56:36:60:e1:8b:ba:
                    76:b7:08:c7:0b:75:2a:f4:49:af:93:b7:6c:6c:27:
                    b4:d9:f7:9b:5d:fe:53:43:6a:20:8d:3e:37:c6:bd:
                    15:f3:74:19:0c:63:10:41:49:60:d4:da:86:e8:2d:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:61:2E:F5:54:91:C1:45:F3:2E:F9:8D:57:33:C6:9A:7E:02:5B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/a81259d2-0f43-3554-9b9e-511bf83738bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/265e5c58-c30c-41c5-b814-554320a3f4e3.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A8:78:C2:15:2E:F2:94:29:1F:42:21:32:DC:78:28:6E:C5:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f674::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:04:9e:d1:72:90:c5:b3:e7:af:ff:07:da:ef:af:e4:58:7c:
         90:95:6a:a7:4c:fa:5e:8d:a0:c7:f1:c2:41:d3:4b:60:b1:6a:
         c5:63:b5:66:25:62:c0:31:35:0d:30:6f:b0:be:ac:d0:d3:16:
         ea:db:df:93:62:80:6d:e5:0b:8e:6d:12:ea:99:13:0a:e5:49:
         f5:52:0d:de:52:1d:fc:fc:00:93:91:d8:2d:38:02:ac:ac:82:
         9e:84:56:ab:c3:f3:3d:a8:d5:36:2d:55:2d:e9:ac:14:20:4c:
         62:be:3c:27:be:e8:1f:a9:07:31:8b:73:48:3e:e6:71:dd:85:
         cd:ff:f6:43:b1:4f:75:66:3a:18:ef:29:13:49:ab:bd:70:06:
         e1:73:5d:44:4e:82:71:0a:ca:34:77:f3:f1:b8:c4:00:be:ab:
         36:a8:5f:7c:84:57:07:2b:bd:5e:30:85:7d:ba:50:05:94:c1:
         fb:c9:5d:ec:c5:e1:14:55:d1:89:92:2f:12:cd:5a:ff:47:a4:
         d7:80:a9:1c:c9:01:7d:a2:5e:00:8c:4d:50:c5:27:84:eb:a2:
         fa:4b:9a:08:56:c3:9e:d1:22:93:ba:f9:3e:0f:fe:de:1a:d1:
         16:f1:f6:4f:7f:00:e4:d2:f1:81:d6:be:b0:1a:cb:3e:bd:67:
         1c:c3:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:25 2025 by rpki-client