Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/7af024ea-5b78-3ae4-8645-122e485382dd.roa
File:                     7af024ea-5b78-3ae4-8645-122e485382dd.roa (raw, json)
Hash identifier:          h07Txl1ZBH/NYGhSooX30Rt15krYxxPK+bTzUdKXNSE=
Subject key identifier:   93:07:BC:12:C9:5B:E8:73:6C:3A:2A:A2:72:03:EC:41:B2:74:00:95
Certificate issuer:       /CN=25cf742f-4f64-4e51-b004-d972a8dd5948
Certificate serial:       010D0C9F4328584B864CB2370DC358D617EB5280
Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/7af024ea-5b78-3ae4-8645-122e485382dd.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        2602:f84e::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:b2:37:0d:c3:58:d6:17:eb:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=940b2840-3bdb-4513-b154-c4a4067b8962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:9b:07:66:c6:fa:bd:85:dc:70:e0:18:ad:
                    80:e2:9d:76:43:8d:61:f2:24:4d:8c:5c:2e:23:ac:
                    26:a1:97:78:9b:3e:66:fe:a7:c8:be:b3:90:0c:53:
                    07:7e:f8:ef:3e:cf:ed:fb:3c:0c:00:c1:01:db:63:
                    6d:88:c7:c8:ef:77:db:13:59:84:6a:18:98:8c:90:
                    ee:5a:8e:16:ba:05:0e:dd:59:ec:24:f1:fa:17:77:
                    51:fd:21:27:48:3e:80:e8:19:c0:96:4b:33:5f:ca:
                    68:9d:47:3f:35:5f:29:b0:c0:18:21:d9:7a:bf:b7:
                    17:46:b0:05:e8:99:e8:45:96:5d:5d:58:6c:e0:56:
                    ac:57:6d:3c:f4:19:6c:5e:94:c6:03:2e:db:66:44:
                    c9:c3:cd:75:2d:92:8a:de:4c:fc:0f:19:89:52:71:
                    0d:82:7c:e4:ae:d4:83:0a:cf:35:b9:d5:b1:76:54:
                    8a:e0:6a:b0:46:dc:38:d9:9f:3d:5b:51:36:c8:4e:
                    89:a2:23:0b:d2:c9:43:61:3c:02:62:60:41:a4:b0:
                    47:aa:25:07:51:d9:4d:bb:8e:81:e6:c6:da:eb:cf:
                    8e:a8:b1:cd:de:1a:34:01:0a:24:d0:d7:d4:2a:f9:
                    7a:8e:9a:34:a3:f9:af:c8:93:24:c0:cc:ae:35:0d:
                    09:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:07:BC:12:C9:5B:E8:73:6C:3A:2A:A2:72:03:EC:41:B2:74:00:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/7af024ea-5b78-3ae4-8645-122e485382dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl

            X509v3 Authority Key Identifier:
                keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f84e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:3c:8c:b2:f5:b1:01:dc:31:97:fb:62:23:54:61:2e:13:
         f1:49:66:b8:58:6a:84:01:56:bc:2c:46:6b:74:ef:d8:5d:93:
         00:53:74:ce:fd:bd:00:30:ed:30:1c:f9:e0:d9:35:a7:2f:80:
         9b:93:83:c4:c5:aa:c4:a5:65:b3:7f:06:26:b9:7d:a6:98:b2:
         ea:97:cd:48:22:49:b6:00:18:ac:b2:34:f5:0a:2f:58:1f:40:
         6b:8c:a8:ec:df:1d:fb:ad:0e:71:a5:3a:6c:af:e8:f5:67:b6:
         da:9d:b5:64:e7:ff:54:e9:f5:d4:52:15:0b:60:01:39:db:87:
         2b:49:3c:cd:6e:12:35:94:e1:4c:32:9b:23:d5:25:69:85:43:
         db:e7:a9:0a:d2:c0:33:5c:76:a5:7c:13:38:b6:02:e1:a2:fc:
         90:9b:57:05:f9:42:95:95:6d:fb:5f:00:90:bc:75:b9:fa:36:
         3b:5a:14:0f:d5:60:c3:ef:ac:95:61:f0:83:f2:bc:8d:fc:32:
         df:ee:f7:0e:46:b5:63:6f:85:8e:b8:73:8f:68:95:14:42:77:
         66:ff:ab:cd:6c:39:fd:7f:fa:ed:18:ba:f1:7e:79:ae:8a:04:
         0a:b8:42:54:5a:e3:01:28:c6:4a:3e:4b:23:65:ec:34:39:8d:
         6a:89:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:32 2025 by rpki-client