Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa
File:                     c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa (raw, json)
Hash identifier:          mJ1Z+0O/mJzfgI+0pIAWaJIHctktOiHScybz3vwqh48=
Subject key identifier:   26:0C:F7:D3:94:93:3B:D0:8F:BB:4C:09:6D:CB:11:FF:A4:66:71:C6
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858491D718A3AC9B7D629CCDC2F40
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        68.235.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:8a:3a:c9:b7:d6:29:cc:dc:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=acb4e26c-1b1f-4fe8-b8bc-2c4ef8b72cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:17:60:90:3d:6e:ef:4b:96:86:7f:9b:79:a4:
                    ff:de:23:db:6f:4b:6a:78:61:be:0b:c3:0e:94:9b:
                    00:fe:4d:18:f5:02:eb:a7:b8:c3:62:ac:10:12:26:
                    00:11:0b:f7:90:3e:76:5e:a3:65:49:1e:1b:29:e0:
                    6f:b2:51:cd:77:d7:ce:7b:3a:68:f7:3c:fa:ee:82:
                    9f:9c:0d:ed:a5:61:58:de:2c:02:5d:51:ab:3f:69:
                    0e:eb:8f:5d:8e:0a:43:e1:9a:00:e6:51:15:60:21:
                    72:9b:02:ae:8d:ad:7f:35:b8:58:95:72:76:03:fd:
                    91:f6:58:df:62:76:d2:32:51:65:ba:79:b9:61:6b:
                    08:0c:10:ff:8a:be:61:77:5b:f4:45:4c:0a:24:0f:
                    1c:fa:7d:7a:ba:23:15:6f:20:32:6c:54:a9:70:31:
                    d5:f0:4a:8d:7a:74:33:0d:65:06:d0:f6:fb:f9:58:
                    8a:26:66:f1:2d:e9:ae:cb:57:53:22:9c:cd:c9:86:
                    41:91:f0:63:a4:e8:02:1a:bc:42:78:5e:97:38:72:
                    9b:1d:ea:d9:fb:fd:e2:d0:b4:24:76:65:09:17:10:
                    46:34:4e:f7:14:d8:f8:6a:4f:12:3d:85:87:cc:76:
                    f2:0d:20:0e:5d:f2:c6:b6:39:a9:59:8e:fb:dd:6f:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0C:F7:D3:94:93:3B:D0:8F:BB:4C:09:6D:CB:11:FF:A4:66:71:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:37:1a:e8:6b:e1:f5:44:bd:6c:f3:07:8f:4a:7d:ba:28:
         9d:3e:7f:b9:04:74:e9:3a:d8:8c:e6:17:81:71:98:b6:8e:54:
         6a:2e:99:fe:b0:a9:f1:9a:df:13:ff:cb:73:ae:10:b3:9a:51:
         67:a7:fb:cd:d9:e8:93:ec:da:07:bb:1d:57:6d:76:82:9f:46:
         19:8f:57:41:46:ee:33:d4:1c:f7:be:c3:7e:2c:e5:ec:5a:51:
         e6:28:78:87:cc:f0:8e:b9:e3:d9:d4:ff:4c:0f:3f:ac:f4:93:
         c8:ec:43:c1:84:13:16:30:ce:c6:3b:6e:d5:3e:87:d2:aa:56:
         1b:56:e5:39:61:74:36:ae:96:83:3b:70:e0:69:7c:66:f5:22:
         d1:3e:81:7e:d4:72:7c:87:80:4d:d9:a8:47:de:3e:74:4b:5a:
         bf:ff:ac:1e:af:c9:28:e7:78:97:c5:74:2f:7e:17:b7:1b:1c:
         95:1a:29:ef:54:31:4f:e6:00:d4:08:e1:76:b1:5e:c2:13:16:
         7d:68:ff:6d:a4:a0:d5:76:f3:a8:90:1f:c3:43:d2:7f:ff:e3:
         65:17:5f:93:30:79:f2:e9:04:4e:cc:94:53:ca:7d:0d:52:6b:
         af:2a:31:4a:52:24:b6:8e:97:91:87:98:36:65:b7:bb:7f:4e:
         e2:0c:5a:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYo6ybfWKczcL0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YWNiNGUyNmMtMWIxZi00ZmU4LWI4YmMtMmM0ZWY4YjcyY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBdgkD1u70uWhn+beaT/3iPbb0tqeGG+C8MO
lJsA/k0Y9QLrp7jDYqwQEiYAEQv3kD52XqNlSR4bKeBvslHNd9fOezpo9zz67oKf
nA3tpWFY3iwCXVGrP2kO649djgpD4ZoA5lEVYCFymwKuja1/NbhYlXJ2A/2R9ljf
YnbSMlFlunm5YWsIDBD/ir5hd1v0RUwKJA8c+n16uiMVbyAybFSpcDHV8EqNenQz
DWUG0Pb7+ViKJmbxLemuy1dTIpzNyYZBkfBjpOgCGrxCeF6XOHKbHerZ+/3i0LQk
dmUJFxBGNE73FNj4ak8SPYWHzHbyDSAOXfLGtjmpWY773W9OuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYM99OUkzvQj7tMCW3LEf+kZnHGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvYzA4ZGJmMTUtOThkOS0z
Y2M3LThhNDUtNmJjNTAzNDJjNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEflNxroa+H1RL1s8wePSn26KJ0+f7kEdOk62IzmF4FxmLaOVGoumf6w
qfGa3xP/y3OuELOaUWen+83Z6JPs2ge7HVdtdoKfRhmPV0FG7jPUHPe+w34s5exa
UeYoeIfM8I6549nU/0wPP6z0k8jsQ8GEExYwzsY7btU+h9KqVhtW5TlhdDauloM7
cOBpfGb1ItE+gX7UcnyHgE3ZqEfePnRLWr//rB6vySjneJfFdC9+F7cbHJUaKe9U
MU/mANQI4XaxXsITFn1o/22koNV286iQH8ND0n//42UXX5MwefLpBE7MlFPKfQ1S
a68qMUpSJLaOl5GHmDZlt7t/TuIMWlE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:40 2025 by rpki-client