Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa
File:                     b49d7d61-27fc-3ff5-a015-024ded6d891d.roa (raw, json)
Hash identifier:          OrIF9Tf4vzh5rrQUDkuh7ITYZBdjOduzqpfMHPaDrf4=
Subject key identifier:   60:0E:B5:F9:A0:9D:E0:E9:59:13:7C:3A:29:8A:6E:9C:02:7F:BB:E3
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584BBE404501D5657BCA73A7C900
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     19107
IP address blocks:        68.235.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:45:01:d5:65:7b:ca:73:a7:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=7e66d513-863f-451e-9f1e-469f176bf131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:50:bb:d7:41:7a:ef:08:fb:03:0b:99:5a:
                    f2:7f:b0:55:91:b9:82:3b:f6:2e:aa:40:86:13:4e:
                    ac:fc:32:8d:8d:e6:46:89:77:ca:6c:2d:4a:69:eb:
                    b8:72:4e:3a:24:87:0f:bf:77:30:9a:28:e2:8d:34:
                    69:97:53:3e:60:14:f9:77:3f:b9:a0:bd:80:7c:e7:
                    7f:99:ae:31:9c:4c:e0:e2:57:a3:6c:1b:da:d5:27:
                    b6:62:bf:49:f9:08:57:7b:a0:0e:3f:80:32:4d:53:
                    df:c4:2d:ee:db:eb:7b:3f:12:13:89:99:09:bb:19:
                    8c:ed:87:f3:fb:2b:a9:1f:fd:34:70:35:93:ed:cf:
                    1b:e9:85:fb:e1:78:96:ae:03:45:03:af:d2:51:46:
                    ce:d9:02:be:c0:a3:4f:0e:50:55:42:47:3a:7f:25:
                    ab:09:ba:66:3d:36:b4:9a:65:cd:bb:ae:0f:93:3c:
                    99:dd:14:73:a2:f8:c3:aa:a1:94:d4:58:e0:77:24:
                    f7:0f:7b:a2:af:b2:19:c8:37:3a:50:c9:c2:92:0b:
                    ad:2d:27:0e:13:f6:e0:c8:6f:28:22:e8:12:5f:5e:
                    33:3f:b4:a8:37:e6:ca:a0:09:38:9c:2a:49:23:78:
                    ca:a5:1f:57:d2:8b:ca:1a:c1:bd:9f:8e:0a:67:aa:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0E:B5:F9:A0:9D:E0:E9:59:13:7C:3A:29:8A:6E:9C:02:7F:BB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:56:64:b3:8e:f3:26:c5:e0:e9:0f:c2:6d:0c:30:7f:c0:41:
         cc:b7:44:c8:02:c3:9e:1f:9f:1c:4d:c5:b5:bb:6d:e5:d7:63:
         ba:cc:ff:2e:e6:02:97:fb:ed:8e:41:44:ec:42:7c:0f:c4:b8:
         1a:bd:5e:a6:ce:62:c6:6a:85:a0:6a:bd:fc:4f:0b:b5:eb:7a:
         ab:a6:46:a5:0d:2f:f6:64:c5:6a:22:89:e1:31:04:68:d0:87:
         f1:1f:06:90:9b:12:12:06:34:4f:60:74:a8:05:38:3c:b3:6e:
         6b:0a:e1:90:0d:1e:21:47:f2:af:61:b3:bd:52:69:51:ea:35:
         38:2c:aa:ba:a3:87:ea:e7:a9:78:46:51:b1:32:bf:88:8e:75:
         70:39:3c:67:45:69:93:21:b8:d7:42:a5:48:e4:4d:63:b8:9e:
         dc:3e:bf:87:f7:38:8f:09:87:b9:d4:ce:93:73:93:b1:34:b7:
         6a:07:36:60:d5:59:55:4f:21:5e:d0:d5:0c:9b:28:4d:ed:33:
         c5:b6:74:44:e4:5f:ae:e4:6f:f1:4a:c6:98:83:38:2f:bf:7a:
         ab:83:b2:77:9a:4e:e0:60:e5:1d:43:f4:df:ba:9d:80:dd:12:
         58:04:09:3d:67:cd:57:24:98:4d:ce:8c:a0:ae:da:13:9c:da:
         3e:5c:37:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEUB1WV7ynOnyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
N2U2NmQ1MTMtODYzZi00NTFlLTlmMWUtNDY5ZjE3NmJmMTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF9Qu9dBeu8I+wMLmVryf7BVkbmCO/YuqkCG
E06s/DKNjeZGiXfKbC1Kaeu4ck46JIcPv3cwmijijTRpl1M+YBT5dz+5oL2AfOd/
ma4xnEzg4lejbBva1Se2Yr9J+QhXe6AOP4AyTVPfxC3u2+t7PxITiZkJuxmM7Yfz
+yupH/00cDWT7c8b6YX74XiWrgNFA6/SUUbO2QK+wKNPDlBVQkc6fyWrCbpmPTa0
mmXNu64PkzyZ3RRzovjDqqGU1FjgdyT3D3uir7IZyDc6UMnCkgutLScOE/bgyG8o
IugSX14zP7SoN+bKoAk4nCpJI3jKpR9X0ovKGsG9n44KZ6qtUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAOtfmgneDpWRN8OimKbpwCf7vjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvYjQ5ZDdkNjEtMjdmYy0z
ZmY1LWEwMTUtMDI0ZGVkNmQ4OTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlWZLOO8ybF4OkPwm0MMH/AQcy3RMgCw54fnxxNxbW7beXXY7rM/y7m
Apf77Y5BROxCfA/EuBq9XqbOYsZqhaBqvfxPC7XrequmRqUNL/ZkxWoiieExBGjQ
h/EfBpCbEhIGNE9gdKgFODyzbmsK4ZANHiFH8q9hs71SaVHqNTgsqrqjh+rnqXhG
UbEyv4iOdXA5PGdFaZMhuNdCpUjkTWO4ntw+v4f3OI8Jh7nUzpNzk7E0t2oHNmDV
WVVPIV7Q1QybKE3tM8W2dETkX67kb/FKxpiDOC+/equDsneaTuBg5R1D9N+6nYDd
ElgECT1nzVckmE3OjKCu2hOc2j5cN8M=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:00 2025 by rpki-client