Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
File:                     6bd08fbc-b377-3311-86c8-64fe75264a40.roa (raw, json)
Hash identifier:          FDdk/kPsF/NxT8Yu4aKildfD6kieXaHOOouiEorpFHo=
Subject key identifier:   51:6C:F7:13:65:93:61:0F:E3:76:AF:B2:41:4A:0F:89:8F:9A:77:A9
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F43285849FCAA84CF7D7F99FE373BBF80
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19107
IP address blocks:        68.235.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:84:cf:7d:7f:99:fe:37:3b:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=9f171734-0df2-4e7d-9738-b310a717ac74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:05:3e:fc:a8:dd:fe:76:8a:1b:e1:15:9f:
                    24:dd:40:b9:1d:0f:55:77:12:f7:9a:8e:1a:41:8a:
                    cc:1d:a1:7a:bd:d6:df:b1:67:81:c2:7c:3b:cb:14:
                    15:d1:24:78:73:1c:2e:a6:2e:21:2d:76:69:32:f1:
                    83:56:02:8d:ea:93:f2:cd:47:f9:60:c6:d1:07:7a:
                    2d:3d:32:3a:b1:82:28:f8:28:ac:d6:36:f0:d7:ec:
                    56:36:2b:9d:37:b1:f2:03:97:81:8b:f3:5e:b8:c3:
                    1a:35:3c:d5:b4:de:ec:98:5c:7c:81:48:26:d5:35:
                    e2:b2:4e:0a:5c:5f:64:ca:5e:7d:b4:d3:0c:1f:d9:
                    1c:68:b5:9b:e2:c3:fe:8e:3d:16:d8:d5:40:c4:5f:
                    f9:e6:f7:2a:27:4e:bd:f0:90:a3:e1:54:c2:ad:75:
                    d0:4b:55:ee:c6:4a:76:45:34:8e:41:1a:21:3e:ba:
                    12:e7:54:e8:5f:95:0a:06:38:62:fb:d0:89:3d:10:
                    04:41:98:19:d5:60:54:ae:07:6d:04:9c:89:9f:57:
                    8b:32:3c:20:42:4f:8c:d7:cd:16:5a:a3:55:7e:41:
                    35:a5:b6:3f:e1:a8:a1:d7:8d:9c:82:1f:0b:f8:6b:
                    7a:50:66:1b:e1:e9:c2:0f:f4:75:d4:6a:ac:86:42:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6C:F7:13:65:93:61:0F:E3:76:AF:B2:41:4A:0F:89:8F:9A:77:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:cc:9d:ca:99:b2:8e:11:83:c0:ec:8a:40:11:76:36:60:
         9b:df:79:a1:00:23:61:ff:c9:eb:03:cc:28:5f:1c:d8:cf:57:
         78:d6:f1:8a:a0:fa:9a:e2:04:33:2e:53:64:a0:65:f0:43:5b:
         1e:cb:5b:24:b1:2d:b4:18:df:d6:82:47:75:d2:46:78:25:f0:
         05:0d:b3:fd:6e:1b:35:61:17:7f:43:d4:1a:18:10:a5:54:38:
         a5:71:b6:69:ef:58:38:ac:3c:e6:6b:a0:d9:24:2b:32:0c:43:
         f9:f8:93:fe:9a:05:59:27:66:42:6a:39:ee:79:a1:24:93:3a:
         62:45:e4:e7:55:75:d1:b1:99:69:6a:f2:19:e9:06:64:5b:52:
         25:46:7c:76:71:27:36:62:e5:df:8f:d6:12:b1:2b:15:90:4f:
         c7:89:d6:fb:33:63:cf:2e:d7:a6:d2:d3:18:9e:99:f5:ad:4b:
         2c:6d:fd:ff:09:79:ac:5e:e1:f1:aa:15:15:14:1d:49:b2:22:
         42:32:cc:b4:3d:f1:ad:42:52:48:4a:c9:77:5c:88:73:9a:c2:
         17:97:08:bb:2e:df:ff:b0:db:b0:14:c0:f4:55:2a:2b:81:5b:
         26:cf:31:69:46:7a:9d:8b:47:7a:09:22:d3:7b:50:24:46:12:
         20:93:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:27:28 2025 by rpki-client