Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa
File:                     3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa (raw, json)
Hash identifier:          1uSapli2MoFE4VyCX/3JVhg2YiUWqiIyOxOcvPBgbxk=
Subject key identifier:   E9:F6:25:5C:5D:A8:AE:6A:C2:A5:0F:F9:12:0F:DA:7F:7D:68:E6:F0
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584F02422F62D836FFF338307D00
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     19107
IP address blocks:        68.235.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2f:62:d8:36:ff:f3:38:30:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=a03c1835-49b4-41fc-a685-f16fe538f725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:7b:c8:4a:1d:8b:d5:ea:7a:8d:85:83:41:
                    7d:d4:83:41:a8:4f:47:d2:83:9d:c7:eb:e2:93:c4:
                    d6:ea:5a:ff:14:a3:20:cd:be:85:85:b9:34:cc:04:
                    12:55:35:f6:d1:42:7b:5c:89:6f:58:d6:1f:b5:c2:
                    86:c7:1e:95:26:b0:6d:06:87:30:b3:2b:88:f3:4d:
                    20:b2:3c:96:b4:1f:24:98:58:b2:29:f6:1e:ae:e6:
                    c6:16:24:8d:7c:9d:f5:e5:58:00:6d:5d:35:48:9d:
                    e5:dc:b2:6f:7c:fd:5c:49:74:82:1d:89:54:47:aa:
                    86:51:13:24:bc:db:4d:29:66:80:c3:e1:29:e9:ce:
                    d3:8b:f4:b2:b2:6a:2a:76:23:94:d5:78:4b:7e:5a:
                    0c:86:30:2d:c2:01:2f:52:5c:8f:6c:1f:2a:72:5e:
                    fc:cc:cc:76:1b:95:28:a3:77:df:95:fb:b5:2d:10:
                    63:63:b9:37:43:c7:76:82:8a:a4:87:42:c3:43:00:
                    b8:bf:aa:5e:1b:d6:8e:12:c6:a6:45:cd:76:22:18:
                    fa:4a:51:1e:94:08:35:8b:6b:5d:71:9c:28:e1:c9:
                    89:0e:e8:a6:d6:26:de:34:fc:a9:62:e8:4b:05:f5:
                    15:ca:86:42:f9:c9:71:92:28:b3:5e:ef:68:5e:b9:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:25:5C:5D:A8:AE:6A:C2:A5:0F:F9:12:0F:DA:7F:7D:68:E6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3b:62:1d:ac:3f:10:6a:d5:8d:80:53:da:ed:d9:f9:63:6d:
         c7:7f:ad:e2:97:4f:db:76:22:86:53:c9:63:37:4c:a6:1c:41:
         83:77:9d:39:5f:72:b6:1b:2b:11:59:f7:3c:af:53:72:30:4b:
         83:d9:ae:2c:a4:0d:67:d6:f7:35:86:21:ea:91:8a:fb:d1:de:
         f3:e3:ec:11:5f:91:1f:f9:15:38:9f:da:ee:be:5b:d5:20:90:
         fd:cd:30:f3:9e:6c:47:51:bb:5c:43:92:e9:92:50:7d:4c:a3:
         9a:ca:0d:e4:aa:a8:a2:09:c3:5c:5d:45:56:b6:31:6b:17:b3:
         7d:fb:19:52:be:62:35:9b:7f:a9:a9:9f:40:2c:be:9c:18:8c:
         70:f7:41:f0:19:d8:cb:79:96:df:d1:b9:6d:5c:c0:a1:fc:5c:
         4c:37:a4:e0:f5:0a:57:9a:21:ee:1b:6f:d2:14:6c:f2:e8:2e:
         42:9c:83:d6:d6:f8:c6:6e:42:ef:24:69:98:69:ca:34:22:34:
         60:e4:50:0e:11:00:fa:b0:b9:79:14:b1:f7:4a:00:8b:03:8e:
         7e:8b:29:cb:59:af:1c:6c:f8:28:a6:fa:40:ab:29:23:21:ea:
         c7:da:ec:a9:38:09:da:12:68:2f:9a:27:47:e9:93:67:16:49:
         fe:ee:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:05:54 2026 by rpki-client