Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa
File:                     22ce9333-f4e1-3463-b3d9-608137f7b619.roa (raw, json)
Hash identifier:          aXJWFrrNNyOVZ+UQDZ5xc7htzrqn/N/10Ub0Hn/cDOU=
Subject key identifier:   DD:CA:3D:95:00:DC:F4:7F:87:7A:42:B6:83:B8:66:58:55:BD:66:F4
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584D7F9A8FAE411AC27845846CB0
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     19107
IP address blocks:        68.235.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8f:ae:41:1a:c2:78:45:84:6c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=de01e2a9-379a-4751-92b9-d35e5969fc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:2a:17:61:4f:03:b9:c0:e0:99:97:39:30:
                    de:b1:d9:3d:02:22:9b:1e:fb:39:24:ed:ea:45:aa:
                    a5:bc:8d:ee:03:ac:a2:c7:4f:aa:39:cd:00:f5:23:
                    92:16:59:79:e6:59:8e:56:ab:26:f1:ef:3d:e5:48:
                    d0:18:bc:d6:a1:68:32:f2:16:b9:35:66:34:38:94:
                    0c:ef:31:6e:14:64:8b:e4:2e:e8:ac:67:88:48:61:
                    cf:78:23:c8:13:ec:21:40:e6:e2:b9:df:6a:08:00:
                    da:99:ec:e9:ab:e3:8f:5e:26:cb:ea:c3:90:1c:55:
                    bd:7a:11:df:d7:b5:07:bd:c3:bd:e3:e5:a3:c2:76:
                    d5:c8:b4:c7:cd:39:63:72:44:ec:95:f8:f4:4c:df:
                    9f:b6:a2:48:8a:a0:64:ee:6c:56:15:05:d2:da:94:
                    ad:b4:e4:10:dd:15:90:29:12:a8:4d:80:37:7f:00:
                    35:4a:ec:cf:2a:d3:e0:ec:95:89:67:5f:6a:08:a7:
                    05:f3:ce:54:0c:69:10:4e:3d:02:23:65:9c:16:26:
                    69:09:11:a6:57:8e:a1:94:e9:e5:34:ba:17:ce:a6:
                    7f:9e:cc:a4:42:12:32:44:e8:dc:87:8a:a5:75:da:
                    97:d8:6e:db:8f:80:39:2e:f9:4f:96:9b:71:f1:a9:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CA:3D:95:00:DC:F4:7F:87:7A:42:B6:83:B8:66:58:55:BD:66:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:3f:98:82:d6:93:fc:4e:52:01:b7:49:bf:ae:e0:5a:32:
         49:28:30:6e:b3:6b:2d:19:cd:cd:89:58:f8:5e:a6:26:35:14:
         cd:f0:3e:58:cc:f2:d0:e2:a0:bd:cb:ca:fa:64:79:57:96:f4:
         c4:37:d7:4c:25:9e:55:20:97:1c:22:d2:9b:c1:cb:65:06:0b:
         1b:8c:8d:ef:1f:9d:47:ce:9b:c1:1e:35:35:c1:0d:7f:42:ad:
         6c:b3:6d:56:9f:09:81:f4:1a:d3:a3:37:ef:7f:0c:8f:ce:1b:
         14:a2:d9:63:3b:d1:3d:ee:7b:3f:ea:3a:4c:99:c0:95:f7:32:
         10:ba:1e:6a:83:5a:f2:72:79:96:05:aa:a1:54:a2:24:07:b6:
         e6:1c:f8:6e:9e:7c:ca:8b:8f:83:25:0f:8c:cd:c5:f0:94:84:
         86:2a:e9:69:55:8b:60:4e:0a:a5:88:1b:3c:3d:ab:5b:ec:2b:
         8f:f2:6d:b0:3a:7c:ce:44:1e:de:00:90:70:25:79:89:73:27:
         8e:0c:4a:d0:a8:44:2a:55:8d:43:91:93:78:0b:4f:b2:12:a5:
         76:8b:d1:ef:5b:77:51:0d:cc:52:02:1c:ad:62:a6:ae:5b:c1:
         ec:44:49:ee:9c:f0:07:f6:49:9e:89:e1:84:30:12:b7:88:7e:
         e4:7a:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:31 2026 by rpki-client