Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
File:                     605c5576-b627-374c-935c-c768b229c9e4.roa (raw, json)
Hash identifier:          Kpi1XsrUy8SsPPNZyj3f+cifnkD55PgRUi6sk+CYrLc=
Subject key identifier:   6D:47:76:6F:26:4A:11:87:8D:0C:71:BF:28:2E:47:C6:A5:26:33:C0
Certificate issuer:       /CN=e38fff12-b069-4018-8acc-5d2d1323c6bf
Certificate serial:       010D0C9F4328584F13023F16D00D0A09EE192540
Authority key identifier: 88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     12016
IP address blocks:        2620:db:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:3f:16:d0:0d:0a:09:ee:19:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38fff12-b069-4018-8acc-5d2d1323c6bf
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=6649ad49-e3ad-4da6-96bc-f18481410fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:bc:17:4c:16:ca:6b:b7:28:1c:30:e5:da:
                    09:16:14:88:fd:a5:32:fb:bb:f1:fe:10:b7:a2:16:
                    2f:22:1e:de:b9:48:fc:2e:91:5a:5d:24:3b:63:f3:
                    38:f1:72:80:25:4e:68:04:1c:f0:9c:45:98:78:d3:
                    bb:be:80:1e:19:da:6f:2b:9b:06:b0:ef:7f:a6:9a:
                    6f:3d:1f:fe:8a:d0:d9:6e:19:06:a2:71:3a:1d:0d:
                    da:73:60:8d:5c:30:2c:c3:26:9b:6d:0f:68:ce:58:
                    6f:51:e9:72:7d:75:27:5b:05:83:56:7b:19:93:3c:
                    e8:35:a6:52:33:7b:59:48:04:bb:d3:59:ec:9a:7b:
                    99:92:80:b5:05:f0:e0:a7:50:a6:16:02:65:9b:32:
                    6c:ca:61:f1:8e:d8:79:3b:53:8d:2e:b9:b5:f5:83:
                    72:f3:8b:52:0c:05:f5:ae:6b:2d:31:5a:10:ec:97:
                    e1:19:5b:75:23:4a:d0:78:a1:c2:1f:a0:b2:22:25:
                    ba:33:7f:0f:3b:84:90:f3:74:35:c2:0e:67:e7:16:
                    ab:0b:cb:80:6a:91:d3:cb:e0:c9:bf:fa:8e:f2:0d:
                    fd:4e:f2:ba:d0:74:a0:0d:3d:e5:a3:c2:36:ec:56:
                    ca:4c:de:a4:1f:70:7f:16:39:3d:b6:37:9d:21:fc:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:76:6F:26:4A:11:87:8D:0C:71:BF:28:2E:47:C6:A5:26:33:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl

            X509v3 Authority Key Identifier:
                keyid:88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:db:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:16:8d:8f:4a:0c:03:8b:fa:b6:c3:1b:47:92:5f:91:00:
         3c:ee:01:d8:e1:43:0f:85:d7:b7:b6:9a:43:8c:d3:15:0f:6d:
         4b:d7:18:92:be:34:39:9e:b3:ac:96:b9:7b:03:ba:19:33:bf:
         04:3a:80:8c:98:42:51:42:9c:d6:bd:97:7a:d1:56:87:42:18:
         5b:37:3d:a9:17:48:81:83:28:21:ee:f1:6e:2f:d9:a4:0d:c0:
         c0:e1:dc:6f:6d:24:5c:a6:e3:23:6f:48:e5:6b:a1:63:ce:97:
         4f:66:f2:5f:fc:17:6f:88:8b:9c:c6:3a:ed:bb:d6:68:2d:df:
         65:7b:77:0a:61:5e:45:b7:25:9c:2c:60:cb:7d:0c:73:e5:82:
         db:04:fc:c9:62:d0:46:e9:cb:84:88:50:a3:3a:7b:c3:80:1c:
         9e:88:7f:b8:c7:d3:0e:67:bd:2b:6f:76:9d:db:9e:00:85:80:
         ad:cb:57:3e:f4:77:ac:b4:65:f3:dc:7f:b6:55:88:4e:f5:c9:
         46:de:3c:a1:b0:5a:af:be:cd:09:c2:20:6a:11:69:bd:56:7e:
         5a:eb:5a:5c:d0:f8:57:45:6e:f0:4d:e4:dd:a9:4a:f1:dd:ae:
         7c:bb:c8:5d:de:2a:39:6b:01:15:3b:12:4c:5d:a6:ab:41:13:
         54:f3:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:51:57 2026 by rpki-client