Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
File:                     6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa (raw, json)
Hash identifier:          MPGtSeGigNoRMIbTKl6/HEWvr88cxqTCk2D1QDjrkMM=
Subject key identifier:   03:F2:C9:F2:88:C2:00:94:95:BD:F8:8A:A1:C9:BD:18:6E:98:D7:0A
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584BBE4044DE03083293860ABAE8
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     19107
IP address blocks:        68.235.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:44:de:03:08:32:93:86:0a:ba:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=18da8f97-f73e-4900-9363-d4c299dbad52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:66:fc:bb:d7:49:8c:8e:bf:10:09:e1:f8:
                    10:fa:dd:c7:47:3c:e5:de:fa:f1:4d:60:66:eb:fd:
                    5a:40:01:9e:2c:3c:75:03:e6:44:6b:e9:8c:71:27:
                    88:7f:0b:ad:6c:19:bd:8a:69:71:1d:19:45:f5:48:
                    f6:99:a4:19:1f:2d:3d:cb:ee:5a:ac:20:f9:c5:ac:
                    76:26:d0:f9:cd:58:81:f9:81:25:df:98:5b:ff:8f:
                    5b:89:a6:36:77:fe:71:55:d0:38:94:c2:12:2f:a9:
                    70:ca:68:cc:57:9e:90:d8:44:91:42:40:40:a8:fb:
                    5a:fd:cb:1c:a8:8d:d0:7d:59:77:0a:e8:5c:de:c7:
                    2e:77:bb:79:9e:82:41:e0:27:9f:b3:a4:29:de:b6:
                    fb:a8:f1:42:e1:e1:91:7a:0f:88:57:3c:21:9d:28:
                    2a:e7:be:91:02:59:bd:08:18:48:b8:77:28:ed:de:
                    13:1c:62:da:96:9c:b8:f7:d9:a6:df:b4:11:c6:1e:
                    3f:62:6e:c9:e2:07:e8:6b:ed:c1:34:10:97:49:47:
                    2a:c5:e2:c8:2d:7b:56:05:d7:29:2f:0a:f2:5b:a4:
                    37:8e:d5:de:47:d6:7d:b5:f9:aa:c9:fc:ad:2e:fd:
                    ff:fc:4f:8e:a4:d6:11:fb:30:1c:3c:17:43:7d:c5:
                    3a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:C9:F2:88:C2:00:94:95:BD:F8:8A:A1:C9:BD:18:6E:98:D7:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:96:5c:e8:ec:b3:69:d3:68:82:d3:2d:4e:e1:38:60:89:87:
         69:4d:3c:e4:a6:1b:52:24:1c:79:2d:9d:85:60:5c:e1:e4:ae:
         5e:5d:b5:cf:6f:28:e6:fa:7e:ae:33:3f:90:4a:6a:ac:b8:63:
         17:f3:4d:8e:83:60:a0:3c:f5:8b:d1:53:cb:e7:52:61:18:62:
         ae:31:c4:07:44:36:35:93:99:01:cf:c5:d3:27:24:e0:62:b0:
         59:1d:7e:06:58:e8:fe:33:5b:15:d4:9b:28:c1:73:5c:6a:d9:
         07:5e:07:d8:44:5b:56:e1:92:a4:c9:e9:2b:48:94:f2:22:48:
         58:83:75:17:ae:82:9c:6e:e7:4f:84:91:71:32:99:81:6d:db:
         82:46:f8:c8:25:92:c9:1f:0e:1e:dc:f1:f8:2b:d9:f1:b4:fe:
         51:56:09:7c:f6:3a:5c:f4:6f:3c:10:47:b7:33:6d:57:7e:f6:
         67:b8:c0:99:84:40:02:dc:08:3e:fa:d0:ce:3a:1c:01:ef:e9:
         33:34:83:05:2a:19:27:78:ed:b8:23:5c:47:d6:3f:25:5d:f5:
         a7:bb:ca:09:80:af:07:e8:9b:31:46:3f:ef:f6:79:71:6b:0d:
         f2:3f:aa:4c:74:05:a5:9e:88:6b:e5:ec:2d:19:82:47:a9:60:
         c8:96:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:01:01 2025 by rpki-client