Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa
File:                     b49d7d61-27fc-3ff5-a015-024ded6d891d.roa (raw, json)
Hash identifier:          mb6784UwNrin3ibmjep+XSrQxV9Gqqt2ccZ3vbtA+eM=
Subject key identifier:   7F:C7:46:59:D3:86:23:F0:44:CC:0C:75:01:E9:0D:E4:59:39:D0:A2
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F43285849FCAA84BFC4887AED39DA3280
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19107
IP address blocks:        68.235.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:84:bf:c4:88:7a:ed:39:da:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=4207b4d4-3941-427b-8a8d-cfda08029190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:21:70:28:15:ef:8d:f6:18:ad:d4:01:6b:
                    22:27:36:60:34:b7:74:b7:69:af:5c:83:8f:f3:e7:
                    63:f0:70:10:28:2b:d0:05:a7:6b:ac:5d:da:f0:34:
                    6f:11:a1:3a:59:86:c8:00:a7:a3:fd:8e:95:65:de:
                    7a:25:9c:a9:54:b3:7c:37:4d:ab:6d:58:aa:7c:cf:
                    9b:1e:7e:f3:1b:2d:96:c5:dc:73:eb:07:9a:c9:05:
                    48:34:b0:c9:75:9a:81:e4:fe:32:f5:db:8c:80:0d:
                    62:d0:30:45:49:ed:f2:4e:06:0e:3a:cd:e2:9e:21:
                    13:2e:4f:75:60:f9:9a:4b:20:9d:99:8d:71:cb:66:
                    25:2c:26:7f:89:19:d4:62:94:07:54:1f:a9:91:8d:
                    be:dc:68:66:47:01:84:25:d8:63:19:42:fe:39:83:
                    2d:58:04:d8:0c:93:b2:d1:dd:fc:2a:cd:c0:ec:52:
                    da:23:a0:9d:36:ca:b5:15:c8:5a:1c:5c:d5:f6:5f:
                    16:38:48:83:e4:6c:25:16:68:ba:1a:fc:8a:ae:7e:
                    04:d7:5b:89:60:ac:40:6b:5a:3e:17:a9:9a:01:a6:
                    0c:3b:4f:91:c0:33:b1:7c:11:ed:9a:65:62:85:36:
                    9c:02:45:bc:fc:4c:77:b8:ed:ff:54:02:cd:fc:23:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C7:46:59:D3:86:23:F0:44:CC:0C:75:01:E9:0D:E4:59:39:D0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/b49d7d61-27fc-3ff5-a015-024ded6d891d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:52:fc:ae:5b:9c:93:6e:92:69:db:c8:ef:a3:f6:fa:36:75:
         3a:23:a6:f5:fb:9d:35:47:b2:aa:80:bb:1c:2b:14:33:3b:39:
         7a:47:29:a8:f6:7e:67:0b:2a:e1:79:f1:b1:87:17:d5:b5:27:
         01:c6:d7:43:51:db:58:dd:67:0f:39:70:14:95:54:a9:0c:a5:
         f9:13:5a:a1:a0:4d:f6:f0:74:b1:7f:0b:d1:c7:11:e8:91:0f:
         ac:9c:97:8e:f2:f5:8e:17:60:a2:a8:56:90:61:61:76:51:b3:
         39:3e:b2:17:cd:01:67:f2:05:6f:a3:53:e8:dd:3f:d4:58:61:
         35:9d:44:99:6c:27:b0:41:84:c5:8c:09:96:13:64:aa:a5:5d:
         8d:91:a8:f3:64:b3:e7:76:ab:5c:42:0b:a6:e6:40:dd:7d:ee:
         ec:a5:27:c4:7e:45:b9:e5:9f:4d:b3:44:fc:b2:f0:72:71:c1:
         60:f5:e3:c6:82:e9:a0:7e:8a:e3:fd:fe:38:97:49:a2:52:69:
         09:6c:af:a9:25:8b:77:ce:99:ff:25:8c:f0:52:38:0b:d1:15:
         b2:43:aa:16:a7:22:43:39:1e:92:1b:cf:23:99:71:29:ee:85:
         17:de:38:e7:e2:24:d8:ec:38:3e:f9:7f:95:e5:ba:08:9e:07:
         f9:95:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:00:11 2025 by rpki-client