Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/326dd7d1-fa71-3ae6-af77-002dfcf07566.roa
File:                     326dd7d1-fa71-3ae6-af77-002dfcf07566.roa (raw, json)
Hash identifier:          mOfMX5rmo/N+GvYx934DClLZ1zMV3OnY9x69/2zarnA=
Subject key identifier:   A3:41:90:AA:22:C7:E3:B6:2D:78:94:6A:C2:BF:B2:BA:7B:99:97:E0
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584D7F9A8FA1CAF9FE43A871DF80
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/326dd7d1-fa71-3ae6-af77-002dfcf07566.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     19107
IP address blocks:        68.235.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8f:a1:ca:f9:fe:43:a8:71:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=741e3629-8c3b-464e-adc2-dad9d01930b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:6e:ff:22:6e:2f:04:14:18:77:e1:5b:66:
                    02:78:c8:76:9c:77:d6:b2:b2:a5:35:3c:d9:35:81:
                    65:65:43:60:8c:01:de:66:1d:a1:65:e4:27:2f:40:
                    14:00:e5:6d:3c:eb:c9:95:3e:88:e2:df:67:06:d9:
                    36:2a:9b:4e:fe:d4:64:60:4d:dd:44:4f:fe:11:93:
                    4c:ae:8c:d8:4e:db:f4:d2:31:2a:f8:01:95:d3:9f:
                    90:1f:5b:63:26:47:2a:0a:20:15:35:21:4f:ba:b1:
                    3c:e4:1b:b3:74:60:0a:ef:ba:ed:ce:38:c0:0a:f3:
                    ea:d2:6b:50:0d:53:3e:f0:90:00:4f:04:a6:cd:39:
                    46:af:8a:97:40:06:10:a6:2f:5e:13:4e:70:04:6e:
                    a7:9d:03:d5:a1:80:e5:1d:9a:b6:a4:e3:59:91:36:
                    77:0c:6b:a8:a8:34:4d:8b:87:aa:6c:f3:a5:71:26:
                    d7:8d:a3:ff:20:36:79:f6:8c:9e:7e:a1:09:6e:a7:
                    0f:c5:b1:02:20:58:54:1c:43:81:f8:5b:2a:37:62:
                    ba:e7:2b:c3:28:ce:7d:c4:e6:01:08:d1:9a:58:e2:
                    23:08:f4:dd:13:e6:6e:53:28:ed:d7:0f:cd:23:24:
                    c2:1b:5f:5e:52:34:1d:c9:d8:eb:18:4c:1a:10:a3:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:90:AA:22:C7:E3:B6:2D:78:94:6A:C2:BF:B2:BA:7B:99:97:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/326dd7d1-fa71-3ae6-af77-002dfcf07566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:87:ad:5a:7a:5f:a6:99:85:fc:b3:5f:40:6e:32:6d:13:42:
         23:8c:21:b5:5f:a5:42:e3:2e:11:b3:1a:7a:99:5e:a1:58:d9:
         72:73:60:e2:43:b5:7d:4a:fc:4d:fd:42:e8:fe:0d:64:f9:cc:
         5b:e5:6d:3f:09:fa:bc:6d:d4:a7:17:d4:aa:af:c6:5e:49:04:
         87:49:01:91:cc:5a:73:78:a7:2b:f4:37:eb:27:e4:61:70:0c:
         28:e5:f3:49:e6:f1:81:5e:96:9d:53:80:4a:a8:c5:2c:0e:65:
         7a:a5:04:78:60:28:e6:c8:34:2e:55:17:fb:25:86:fa:c4:3e:
         e9:51:83:ec:b3:7b:44:5e:5f:90:94:65:c5:0b:e0:e6:e4:22:
         01:66:8e:14:f0:bd:0d:7d:92:8e:64:e6:b2:d6:d5:78:b6:be:
         67:89:9a:7e:a7:55:28:06:20:05:14:70:73:1e:79:78:79:61:
         92:ec:3b:18:dc:2d:63:37:01:38:03:5d:30:6c:44:fb:ab:21:
         e9:0a:a3:91:c0:2b:c2:70:c7:06:7e:ce:a9:66:e9:30:51:68:
         f0:88:95:b6:b7:14:a7:3a:29:31:f0:a8:56:d3:e0:ff:2d:5c:
         f3:0d:ef:8f:8e:70:ca:ad:8d:51:66:ee:50:e7:9a:d5:05:f8:
         29:4b:a6:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo+hyvn+Q6hx34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
NzQxZTM2MjktOGMzYi00NjRlLWFkYzItZGFkOWQwMTkzMGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGlu/yJuLwQUGHfhW2YCeMh2nHfWsrKlNTzZ
NYFlZUNgjAHeZh2hZeQnL0AUAOVtPOvJlT6I4t9nBtk2KptO/tRkYE3dRE/+EZNM
rozYTtv00jEq+AGV05+QH1tjJkcqCiAVNSFPurE85BuzdGAK77rtzjjACvPq0mtQ
DVM+8JAATwSmzTlGr4qXQAYQpi9eE05wBG6nnQPVoYDlHZq2pONZkTZ3DGuoqDRN
i4eqbPOlcSbXjaP/IDZ59oyefqEJbqcPxbECIFhUHEOB+FsqN2K65yvDKM59xOYB
CNGaWOIjCPTdE+ZuUyjt1w/NIyTCG19eUjQdydjrGEwaEKMKbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNBkKoix+O2LXiUasK/srp7mZfgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMzI2ZGQ3ZDEtZmE3MS0z
YWU2LWFmNzctMDAyZGZjZjA3NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGHrVp6X6aZhfyzX0BuMm0TQiOMIbVfpULjLhGzGnqZXqFY2XJzYOJD
tX1K/E39Quj+DWT5zFvlbT8J+rxt1KcX1Kqvxl5JBIdJAZHMWnN4pyv0N+sn5GFw
DCjl80nm8YFelp1TgEqoxSwOZXqlBHhgKObINC5VF/slhvrEPulRg+yze0ReX5CU
ZcUL4ObkIgFmjhTwvQ19ko5k5rLW1Xi2vmeJmn6nVSgGIAUUcHMeeXh5YZLsOxjc
LWM3ATgDXTBsRPurIekKo5HAK8JwxwZ+zqlm6TBRaPCIlba3FKc6KTHwqFbT4P8t
XPMN74+OcMqtjVFm7lDnmtUF+ClLpgs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:02 2026 by rpki-client