Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
File:                     6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa (raw, json)
Hash identifier:          e+HR2U6SDuiB8L5Sr6z2F6IqY2ytqUQMSC3OLjTG4VI=
Subject key identifier:   B2:A1:42:43:AF:F9:50:B8:B1:5C:B4:83:6A:A5:EA:22:5B:ED:BC:CB
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584E5FDF64193A6599326631DB80
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     19107
IP address blocks:        68.235.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:64:19:3a:65:99:32:66:31:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=321db90d-424b-40e8-ad17-6015fe415b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:f8:64:8b:4a:d2:fb:a1:83:9d:14:8e:fc:
                    36:82:bd:e1:3c:06:5f:ad:b3:94:da:22:59:fe:23:
                    5a:1c:81:46:2a:ba:96:c9:06:39:6f:4e:60:16:cb:
                    e9:b6:fb:88:f8:36:67:7d:0a:c1:b2:68:b1:8c:70:
                    91:b3:e8:e8:89:4e:2b:3a:87:3c:46:19:ea:a1:a6:
                    b6:bc:28:df:0e:e1:f4:93:12:5a:c7:a2:62:e1:d6:
                    27:ac:0e:09:3f:4c:c0:1f:11:e0:8d:e5:cc:12:12:
                    a9:fb:60:36:96:50:64:8b:54:a7:27:aa:97:12:8a:
                    46:69:4e:4e:4c:6b:a7:26:63:62:87:d2:6f:53:d9:
                    de:65:ef:81:b3:7b:38:9e:88:a7:b3:d0:7c:cb:89:
                    be:b6:4b:94:96:06:2b:ef:dd:b2:99:09:3b:dd:65:
                    ba:74:cb:1a:65:b3:a4:ce:9f:d1:39:cd:e3:0d:d0:
                    8a:5e:5d:58:da:47:a3:64:50:d8:e2:94:20:e9:0f:
                    97:4f:88:e2:f5:b5:0d:f7:b5:ca:98:ef:46:9f:9d:
                    d8:a5:91:75:70:16:6b:a4:fe:49:0c:80:95:50:79:
                    c5:e6:aa:78:ce:cf:de:c9:a3:1d:42:ca:27:10:24:
                    ab:dc:a7:99:46:ae:0b:61:e8:12:2d:a4:f6:5b:bd:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A1:42:43:AF:F9:50:B8:B1:5C:B4:83:6A:A5:EA:22:5B:ED:BC:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:95:15:18:28:fd:34:5a:fb:c1:24:b1:f0:3b:18:16:04:e0:
         be:70:92:16:f5:f6:1f:34:2e:07:91:ee:ba:fd:17:26:9d:9d:
         e2:8d:9e:db:1d:1b:be:04:13:82:36:1d:f2:3d:be:04:47:27:
         4b:07:35:bb:8f:43:9d:9d:38:a1:5a:90:11:5e:52:71:1d:0d:
         7b:10:c9:7f:f4:32:69:5b:43:c5:43:16:07:de:71:29:1d:ca:
         6d:91:f7:e5:17:90:8c:5e:da:4a:d1:6a:3f:1c:ce:9e:0b:24:
         69:e9:82:23:3e:fb:40:b8:d1:fe:58:ff:26:c5:5c:90:7e:c7:
         9b:ac:f5:d6:cd:5d:e6:e4:c9:f0:d0:e4:01:94:fd:96:ff:ff:
         35:57:89:d7:f3:02:1d:9d:5e:77:62:bd:fd:65:bc:2c:2f:f4:
         e5:41:be:69:7a:ef:4e:f9:5a:fb:7f:9c:e0:b2:ad:1c:0c:97:
         7c:7c:e1:dd:ed:eb:65:ae:8c:d0:18:36:6a:a1:f8:fb:bf:73:
         f5:99:a0:d6:49:f2:73:1f:27:70:26:c5:42:93:e7:5a:c9:3e:
         96:25:40:18:3a:2e:49:1b:08:f1:63:e2:6e:e0:4f:ad:bb:17:
         b7:b1:22:61:12:53:83:b4:b2:9c:bf:48:21:36:70:f0:15:99:
         50:e6:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:20 2026 by rpki-client