Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
File:                     6bd08fbc-b377-3311-86c8-64fe75264a40.roa (raw, json)
Hash identifier:          3Bfk+V9NHpii8I7jBNfK5QsAjAOQBKpm3je6ORNvb5w=
Subject key identifier:   D2:8F:77:92:89:A5:2F:0A:F5:5A:ED:F8:85:6E:9C:C9:1D:24:45:ED
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584D7F9A8F89EF11A696AC053B40
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     19107
IP address blocks:        68.235.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8f:89:ef:11:a6:96:ac:05:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=05a9588d-f61b-4f7e-ab4a-8102157d18a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:ea:f5:83:76:33:89:be:3e:fb:3a:b8:8c:
                    9a:20:e8:f7:96:d5:22:01:aa:37:ef:e3:5d:55:7c:
                    15:83:27:bb:33:e0:92:d3:bd:82:04:90:9e:93:69:
                    f2:3d:af:b9:19:21:9d:85:99:cd:ce:ba:63:16:90:
                    e6:75:ac:c4:6b:20:7b:a4:bf:79:08:71:cc:d2:62:
                    85:f6:20:6d:2d:88:d4:1d:2d:27:4a:4b:b6:a3:2b:
                    d4:8a:41:db:2d:a5:10:b6:9d:ee:64:c4:94:d4:c8:
                    04:61:b3:d7:4b:e8:07:32:9b:24:88:a3:81:d5:20:
                    e5:15:c0:0e:3e:e1:d0:01:26:80:c9:52:1b:6f:ef:
                    40:51:c3:22:6a:59:23:b5:7b:a2:b0:3a:ea:07:9a:
                    a7:a7:6f:1e:82:7a:82:ec:41:08:f8:a2:10:39:94:
                    ff:6c:2b:87:11:10:37:b6:b3:4a:41:48:67:bd:e7:
                    43:6d:d5:b9:48:ec:27:ab:e1:75:7d:73:d6:3d:db:
                    f0:d6:1a:a3:d1:fb:48:80:e0:96:36:e3:24:f4:1a:
                    d0:11:3f:99:07:9d:5f:b7:a9:9b:a2:42:54:9e:33:
                    51:5a:f8:ea:8f:05:ae:89:e8:2c:1e:13:d6:5a:9a:
                    33:79:ef:2d:e7:7c:67:c7:a7:5d:71:a4:18:a0:4d:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8F:77:92:89:A5:2F:0A:F5:5A:ED:F8:85:6E:9C:C9:1D:24:45:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:47:a4:1e:f0:10:8a:33:78:53:b6:5e:4b:05:b7:ff:8d:
         82:34:0f:29:49:b3:e4:15:f3:02:b0:76:f2:20:7b:8b:0d:81:
         c3:58:5e:52:7a:bb:78:65:44:a5:36:61:1f:d9:31:6e:a2:32:
         a8:6b:ee:f7:62:e6:6d:23:99:ab:79:93:3b:69:dc:cd:89:30:
         c5:a4:4d:7d:29:56:82:25:97:38:9d:b3:ac:c9:c4:f2:2f:cf:
         d2:fa:46:ae:e7:1a:5f:81:be:95:00:b5:2b:02:c9:bb:41:68:
         9f:21:99:b0:2a:19:41:ab:54:99:fe:b8:ec:5f:8b:0f:86:a6:
         4c:b6:87:50:74:09:96:71:bc:4a:17:12:c7:40:5a:4e:6e:33:
         77:b2:e4:f9:3b:08:b6:cc:b1:5b:50:bf:68:b1:00:9b:40:ac:
         cf:80:ff:b2:68:77:57:e4:7e:4d:cd:2f:5b:46:9b:b6:f9:63:
         33:83:f2:2c:65:48:3e:7a:ae:81:36:eb:55:35:83:b9:b0:dc:
         df:2b:86:6f:e7:15:47:dd:f7:da:7a:3a:9f:c6:d3:70:2b:f4:
         f5:29:c6:9a:73:0c:8b:06:4d:43:9f:58:0b:9d:57:01:b2:aa:
         b6:cd:06:69:f6:d3:94:02:26:3c:03:a6:18:27:6c:21:f6:cf:
         f0:a2:f0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:44 2026 by rpki-client