Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa
File:                     4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa (raw, json)
Hash identifier:          /vqPEIu5Q9moXoZZZr1+0S0f/zSV27xBtlllFAH7bfs=
Subject key identifier:   13:C2:CE:D7:32:82:7E:D6:30:3B:3A:47:70:E3:CB:2B:1C:E9:F2:B7
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F43285849FCAA84ABAF448392910E0900
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19107
IP address blocks:        68.235.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:84:ab:af:44:83:92:91:0e:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=eded21e8-c09f-4eda-a9cf-db0da34b5c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:71:02:c3:a3:9c:2e:e7:13:8f:ac:92:48:
                    43:aa:42:22:e7:d1:d5:93:df:99:5a:6f:e5:39:db:
                    23:83:81:8f:64:34:59:1c:72:fa:ea:3c:45:a1:00:
                    54:1f:44:c7:b6:3a:9b:e7:5d:5f:a6:64:bc:62:9a:
                    08:e7:86:ad:76:7a:de:1c:b6:d2:33:1c:6c:cb:47:
                    44:a4:70:03:12:c3:9a:40:bf:60:c4:31:03:43:4b:
                    5c:08:c6:78:b6:40:72:4a:05:33:8b:14:10:99:e6:
                    0b:95:2b:6b:d4:ef:bb:51:10:b5:d6:43:51:d0:04:
                    a4:0b:ad:93:b5:2b:14:3c:14:08:45:4f:54:07:c1:
                    57:0e:12:67:8b:7c:fc:37:83:9d:38:49:f0:91:db:
                    cb:86:b7:03:4b:e4:03:ef:6c:54:38:43:9b:11:41:
                    d1:cb:98:33:34:b5:67:c3:f6:41:0a:56:e7:04:f3:
                    9f:94:6a:11:6e:67:22:d3:4d:a1:93:0d:7e:67:87:
                    94:36:eb:a9:34:8f:c5:e1:0f:98:d0:a1:52:72:65:
                    d2:34:5f:e6:3f:71:be:74:28:dd:70:43:1e:36:68:
                    c1:42:16:d1:1a:e6:88:cb:02:45:a6:3a:aa:e8:45:
                    30:76:6c:02:37:57:c3:dd:e4:61:cc:ea:98:28:c5:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:CE:D7:32:82:7E:D6:30:3B:3A:47:70:E3:CB:2B:1C:E9:F2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:b2:3c:fb:c2:99:c0:b9:79:75:23:cb:53:b6:6e:d8:e0:83:
         12:7e:db:f1:9b:51:c7:c7:fe:57:41:85:08:89:48:2b:cc:11:
         e7:38:dc:af:7f:49:62:ab:a3:10:4f:7c:ae:fa:89:2c:28:b2:
         94:75:27:c7:a1:82:8b:6b:e4:a4:78:47:f0:48:2e:48:da:2c:
         6c:d9:43:f6:ea:a5:64:f1:8f:6b:29:19:96:60:3d:38:39:bc:
         c2:16:32:c2:4c:f8:c3:c2:0b:ba:97:91:b3:4d:d9:52:2b:0c:
         bf:62:0b:b1:22:d3:c6:a4:a8:b0:ba:49:97:26:5a:16:ee:8c:
         5a:64:b4:f5:08:5d:d3:08:c8:23:b3:05:f9:ea:c3:3f:47:88:
         2c:07:bd:18:b8:1d:c9:42:0f:47:83:8c:86:70:7f:22:43:27:
         cf:0c:28:15:fa:84:0f:21:c8:a6:4d:b5:dc:56:ab:06:33:fa:
         0e:b0:7e:a3:c6:38:20:08:3f:dc:1b:c0:22:e8:be:17:72:a9:
         d0:ac:29:32:57:e4:63:1d:c8:20:30:71:7e:5c:4e:09:d1:29:
         b6:33:f1:b4:28:9c:4c:19:22:3a:7e:46:d9:cf:b9:ff:23:87:
         08:87:e7:e7:41:a5:79:95:11:9a:e9:6c:c4:eb:5f:fe:cc:61:
         16:9a:12:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:00:16 2025 by rpki-client