Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa
File:                     b49d7d61-27fc-3ff5-a015-024ded6d891d.roa (raw, json)
Hash identifier:          CCXA6qbmE8c2ywhHQ8XlzQ1qLPqWBMGmlqcyInvC3iI=
Subject key identifier:   A1:12:83:EE:B7:E3:FB:AF:B9:F0:89:F0:CA:F2:0A:05:A1:01:63:B3
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584E5FDF642FFAD8B972EB98C1C0
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     19107
IP address blocks:        68.235.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:64:2f:fa:d8:b9:72:eb:98:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=c1f41c67-aa9a-43f4-81bb-010e4990b861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:fa:3c:fa:93:3f:16:b7:60:19:16:7b:fb:
                    77:7b:e3:5f:6b:28:a0:81:95:0b:8f:b2:2a:bc:80:
                    9e:e6:ec:0f:d6:a5:68:ec:2a:47:77:4b:14:b8:b6:
                    84:92:e3:84:e5:9f:ab:88:c4:44:64:3a:af:af:52:
                    2d:63:fe:1c:c5:47:d5:2c:67:38:04:7a:fb:a4:f3:
                    fd:50:7f:0d:4e:3c:94:cc:2e:57:87:37:a9:ae:57:
                    b3:c6:99:9f:91:e9:66:1f:b0:77:bd:99:a9:23:4b:
                    3d:82:d4:71:fd:e8:19:26:9b:b0:1b:09:7b:72:93:
                    53:d8:d3:5b:8c:6c:3b:f8:1e:52:58:62:5a:f6:73:
                    25:64:96:7d:19:94:60:64:d1:9a:fd:b5:6a:a0:c1:
                    c8:16:9a:26:76:79:58:34:f3:13:5d:b4:dd:03:f5:
                    ad:1c:05:94:5a:dc:68:a8:5e:ae:58:c4:1c:d2:1b:
                    64:73:02:cd:26:6a:18:87:01:fe:8d:ff:63:be:e9:
                    b1:ab:d4:1c:67:98:c3:fe:92:e1:eb:72:1f:11:76:
                    52:07:ba:42:aa:a3:a9:64:b9:1c:bd:ee:d3:8d:fd:
                    4a:d5:1e:30:8e:f5:50:ac:92:33:d7:b5:02:2f:12:
                    dd:13:0b:bd:06:7b:e5:2a:f1:e6:15:b7:37:6f:94:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:83:EE:B7:E3:FB:AF:B9:F0:89:F0:CA:F2:0A:05:A1:01:63:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:87:20:ed:ff:ed:d2:2d:d4:2e:32:b0:86:cd:3f:28:2b:
         7a:00:cb:38:e7:30:14:24:bf:41:a9:82:00:36:49:9a:47:c5:
         64:e2:af:13:41:ff:90:73:23:95:3f:0d:67:8e:49:af:32:a8:
         27:e5:f4:c5:27:bf:f9:bb:41:11:c6:1b:51:d9:6a:be:1c:d9:
         5c:f1:b9:88:d9:86:c4:6e:d1:5d:dd:06:66:27:22:86:ba:59:
         91:2d:d8:02:7e:83:21:7d:f0:12:8c:2d:e9:0c:09:39:bc:4c:
         b8:c9:49:90:d1:00:b1:cd:91:b7:d2:8b:d5:91:60:5c:fc:9b:
         bd:ef:0d:1b:0b:5c:4b:1d:dd:72:c4:9a:3c:e6:0a:1a:b0:55:
         db:4f:3c:46:0a:da:6a:12:6d:c5:99:c3:96:36:0b:8e:2e:f5:
         ba:4c:48:89:79:0f:9d:82:de:b8:44:83:ed:52:49:d3:1c:81:
         a8:7d:be:52:68:b9:ad:47:54:b7:57:6c:c4:b8:b1:07:5c:6a:
         8b:00:ec:9a:0d:11:db:1d:fe:66:36:b5:02:17:70:ba:ff:99:
         37:4c:78:e3:45:a1:f0:9b:ce:1c:b0:19:3c:93:ad:e5:75:9c:
         dc:c7:ec:9f:02:0f:a8:97:d5:ab:50:b5:26:57:46:a2:ab:a3:
         08:f1:48:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:48 2026 by rpki-client