Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
File:                     6bd08fbc-b377-3311-86c8-64fe75264a40.roa (raw, json)
Hash identifier:          RkgsWClf5GFD65B/KdzpQ3DiXTclz/1CH4jaZkCYNvc=
Subject key identifier:   AB:58:8F:C5:51:D9:DA:AE:CD:36:BF:9B:E1:27:89:B0:A7:40:BA:68
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584F02422F0DB8396536B86472C0
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     19107
IP address blocks:        68.235.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2f:0d:b8:39:65:36:b8:64:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=776d5c78-0d85-44d1-94d7-ee3210c00eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:34:56:4c:07:fb:ad:65:e3:0b:65:57:9e:95:
                    f1:57:2c:a4:33:5a:ad:aa:74:4f:77:d0:16:30:3f:
                    b1:5e:c3:9e:0f:df:f6:77:25:88:5d:7d:a7:b1:3b:
                    dd:b4:75:85:44:b5:87:50:c6:c5:61:ba:20:df:59:
                    70:bb:94:6a:25:3d:10:f9:88:bf:1a:44:b3:ca:02:
                    33:cc:53:98:36:dd:19:25:99:dd:df:4d:be:f3:3f:
                    b0:79:4f:d7:80:58:91:0d:31:6e:2b:74:bd:d8:3e:
                    93:36:0c:88:23:05:c9:cb:c5:74:a5:58:28:29:06:
                    e9:e7:72:7f:a8:f8:14:08:25:c2:8d:2d:00:e5:ce:
                    c6:2d:51:5c:67:60:b9:1e:8c:45:56:4f:34:de:08:
                    0e:41:9a:f8:e9:ad:29:95:f4:5d:a7:eb:de:f2:50:
                    b0:2f:a4:ce:fe:fa:83:c6:54:b3:e2:8a:f4:ce:dc:
                    da:3b:91:ea:aa:50:86:33:f3:2e:93:56:47:c6:ae:
                    f0:b4:70:93:4f:ac:28:8c:fa:27:55:a2:79:82:41:
                    36:fb:15:33:3e:45:d2:55:dc:c6:76:34:b2:25:d9:
                    a5:6e:2b:cc:76:96:16:d9:6c:a3:f7:ec:13:80:69:
                    ed:a4:87:32:7f:1c:48:ea:65:0e:58:7a:27:af:5d:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:58:8F:C5:51:D9:DA:AE:CD:36:BF:9B:E1:27:89:B0:A7:40:BA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7e:8d:56:90:6d:c0:d7:0e:42:62:5a:58:2f:31:a3:bc:ba:
         b1:57:77:57:72:4e:4c:60:5f:c6:78:1c:ff:f4:03:98:03:43:
         ca:4f:d5:79:32:43:ba:b8:e0:28:e2:b0:10:04:a8:6e:05:9a:
         be:d7:10:a7:69:cd:86:b6:ac:01:a5:aa:ee:f3:dd:59:8f:56:
         6a:8d:59:b4:ca:4c:24:6e:60:1a:0a:26:6a:d3:51:c1:d1:42:
         63:30:8e:d7:92:52:4c:a3:bc:a8:66:b8:c3:50:2e:f3:40:e0:
         59:3a:09:6c:34:8f:0d:f4:db:bb:5b:f6:b6:e9:97:52:a6:85:
         fa:8a:e9:4f:84:97:a1:f5:7e:9e:8a:84:4c:73:ea:85:2a:2a:
         70:54:58:56:9c:a6:36:cc:9a:c6:70:3d:51:9a:7d:88:cc:16:
         90:96:4e:d8:ba:5f:21:bf:22:82:bc:18:48:a2:be:e9:a0:bd:
         39:6c:45:0c:9f:be:3e:6c:c9:3e:b6:f1:6e:1f:e8:7c:23:f1:
         be:38:1e:3e:2a:16:4b:57:5a:e7:34:38:0f:f9:f1:22:22:30:
         05:d3:58:77:9c:ae:8b:7c:61:75:9b:4e:a2:1a:c5:3f:28:f3:
         23:1c:5b:67:f3:fc:b9:81:e7:fc:fc:5d:ed:64:c7:b5:cf:19:
         49:cf:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:38:06 2026 by rpki-client