Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
File:                     6bd08fbc-b377-3311-86c8-64fe75264a40.roa (raw, json)
Hash identifier:          9H0/Msg0pp7bki3kN+4HDpRnTGZvmV+xHZ+dn/AxQwo=
Subject key identifier:   CA:45:47:C5:34:71:C5:89:48:2E:BA:15:10:13:1A:E8:B0:A7:59:2C
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584E5FDF643B5DECD0BE67FD6900
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     19107
IP address blocks:        68.235.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:64:3b:5d:ec:d0:be:67:fd:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=186291aa-c386-4d0f-8075-abe13f88cfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:dd:1b:a5:87:58:e0:5a:1d:21:94:b5:9b:
                    d6:45:f8:08:60:0e:73:d9:03:e5:9d:09:56:20:3d:
                    0e:15:ec:7d:b9:18:6d:72:28:86:80:5a:fb:08:75:
                    09:0d:ed:5d:8c:3d:aa:66:46:90:2e:2a:61:92:47:
                    55:52:cc:42:7f:b7:38:a6:b9:20:fd:24:94:c0:58:
                    61:cd:5e:09:bb:26:dd:e1:6b:ee:da:04:52:07:ce:
                    87:27:d3:75:2e:18:e7:df:77:05:9a:de:13:6b:fc:
                    be:56:9d:07:a3:c4:05:5d:43:be:77:9a:f9:49:68:
                    b6:a6:7f:dc:f7:f4:4c:d8:0e:11:0f:1b:10:22:b2:
                    e0:5e:9a:76:a7:05:61:0f:1b:93:36:d0:b7:5e:05:
                    19:cd:91:4e:05:a4:17:3a:a9:35:74:1f:b7:bb:25:
                    0c:6c:4d:f7:ba:f3:44:74:53:d4:88:d8:4e:b0:2e:
                    22:23:59:dc:de:49:d3:66:1c:a0:02:c7:5f:3d:17:
                    9e:83:9a:6f:2a:66:dd:e7:96:3d:1d:0b:ef:11:69:
                    65:57:32:5d:cf:cb:1d:19:6d:a4:c2:36:ab:96:60:
                    aa:81:4e:d8:a7:3d:b1:80:9c:6a:7d:14:5b:8a:29:
                    54:cf:c5:9a:c6:5e:fd:9e:58:f6:19:6d:50:9f:9d:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:45:47:C5:34:71:C5:89:48:2E:BA:15:10:13:1A:E8:B0:A7:59:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:24:cd:4b:ae:de:77:cd:db:1b:69:a2:3b:7f:a2:ca:90:d3:
         28:98:6b:63:77:51:32:1b:0b:25:74:5f:04:69:24:d0:a7:5c:
         a0:d4:fa:b5:1a:66:98:59:3d:51:a9:5b:96:96:62:17:4b:4e:
         3c:bc:0a:07:39:a9:3f:a0:6a:46:76:9f:8f:0b:75:d3:68:fd:
         2f:0b:db:90:d9:a3:dd:5f:f8:17:65:24:9b:f9:32:72:07:00:
         30:a2:11:05:73:c5:0d:e0:d3:71:5f:98:1a:c9:d2:81:7b:2b:
         44:8d:e3:41:70:36:56:bc:df:fd:7a:3c:5f:7f:94:40:8a:20:
         49:50:03:ad:d7:58:bd:65:b7:58:2e:8f:b9:d3:f6:b5:34:51:
         d0:2f:3f:4c:0c:69:7e:90:20:00:20:cb:d7:ce:92:8c:01:98:
         09:d7:05:a2:81:cd:4a:90:b3:82:21:d7:b4:f8:9d:b8:c0:cb:
         f4:ac:eb:be:fe:92:a7:53:9c:a5:c0:1e:3c:59:18:8c:e6:1d:
         27:1c:69:32:5a:c5:f4:bb:12:5f:b4:95:2c:56:06:bf:5e:8d:
         90:60:a4:87:29:92:e8:07:69:fe:36:0b:3b:d6:a3:13:54:c7:
         f8:21:0f:0a:cc:2a:55:62:38:63:d3:9d:26:47:93:b5:76:2c:
         7a:69:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:10:05 2026 by rpki-client