Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
File:                     6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa (raw, json)
Hash identifier:          n7vj/wSG1qcja3Md5a9PFpHxf/TRQPhNIcvNSEuN6y4=
Subject key identifier:   5E:DF:B8:AA:8C:E1:37:98:F3:0B:3E:42:60:B3:BE:48:2F:5F:13:BB
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858491D7189D79F0FD2521E846E80
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        68.235.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:89:d7:9f:0f:d2:52:1e:84:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=ca31832a-7774-417b-9d14-5359ea597d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:e6:3d:bb:e2:da:66:ac:f4:5d:f6:52:0a:
                    54:71:7e:a0:71:db:c9:38:bf:23:7b:cc:74:56:19:
                    65:99:4f:8a:e2:b3:1f:b9:e6:e2:7c:fe:c0:9a:3a:
                    69:e7:e9:46:14:39:2a:c0:47:cb:7c:c4:a7:50:3d:
                    06:3b:65:6d:d4:d3:6b:5a:16:3a:4f:56:ef:6e:13:
                    5e:9b:ff:a9:61:9f:0f:9f:1e:b2:ec:a3:95:69:1b:
                    2c:71:9f:b3:3c:9e:78:f4:5d:32:d4:dd:ce:bf:3e:
                    e7:90:b2:62:bb:4a:0d:99:2d:e8:83:f0:24:70:14:
                    70:6a:f7:eb:4f:d9:2c:f9:43:d4:30:4f:50:27:ec:
                    78:33:89:6f:8f:0f:28:18:50:cc:94:f4:84:6d:c9:
                    2c:6a:22:8f:c7:51:61:bc:41:60:7b:69:47:22:bd:
                    a0:d5:7f:de:29:3e:04:6c:b9:f7:7a:1c:cf:fe:50:
                    9e:3f:25:19:da:29:3b:35:9b:bf:6b:66:d3:6b:d0:
                    20:6b:f0:72:f4:cf:e8:df:58:e3:6d:a6:fe:59:33:
                    51:bb:a7:71:f4:b5:47:d1:1e:2e:f0:ef:68:0d:f3:
                    e7:3d:38:eb:00:4e:21:c0:29:9b:87:57:93:f7:a4:
                    41:72:d0:df:e5:0b:a7:b8:4c:ad:71:b0:36:f1:ac:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DF:B8:AA:8C:E1:37:98:F3:0B:3E:42:60:B3:BE:48:2F:5F:13:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:f9:6e:53:64:b2:8f:72:f1:12:b1:17:b0:69:eb:8c:ba:
         86:1c:3c:e5:97:38:e9:74:63:72:19:90:3f:3d:8a:6a:10:77:
         99:cb:29:f3:e6:87:5f:89:24:02:09:9f:c3:64:df:9f:c7:13:
         08:0b:23:9c:72:7c:b9:b9:44:9c:f0:82:5a:c0:61:a4:8b:0b:
         6a:e1:fd:fd:9e:0b:84:5e:13:ed:f0:ef:ad:92:35:37:81:97:
         4a:76:6e:ef:ab:d7:73:40:e7:0f:36:60:c7:b3:4d:e3:f8:a2:
         ec:e6:9e:67:d4:49:88:18:27:2a:f3:4e:7a:87:a1:b3:c3:9d:
         c1:2f:9d:51:14:b9:5e:7f:3b:5f:34:3a:c1:64:e7:b0:0f:1e:
         14:02:d2:7c:ab:07:8f:c1:c5:79:fd:f7:09:02:d3:dc:09:13:
         5d:e4:18:96:41:19:8e:e9:c1:d7:39:36:a2:b6:9b:21:85:f2:
         c6:89:c8:77:2f:1a:9a:79:11:59:7c:d9:19:6e:73:46:8c:91:
         90:8c:14:41:67:57:75:c4:e4:1e:8a:53:1f:0f:49:d3:a2:50:
         44:59:cf:07:5d:f8:f5:78:79:e7:09:0e:43:44:00:cc:e7:bb:
         c7:e7:a3:df:f6:59:46:1d:24:37:2a:e2:4f:26:29:6a:41:c5:
         16:90:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:06:47 2025 by rpki-client