Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa
File:                     7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa (raw, json)
Hash identifier:          7v2S9nHRdRUHZ+BhJXRhlTFYXVm4ew+NYxZ6QqHQ3BY=
Subject key identifier:   F8:79:20:FC:6B:64:83:0B:A4:C0:D1:C3:49:C4:17:F3:9C:80:CD:03
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584B5DD1EEB05594ACD4080DCC80
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6939
IP address blocks:        208.86.34.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ee:b0:55:94:ac:d4:08:0d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=2b67d3a2-0741-4cbb-9554-5edc3fb0861f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:e7:44:bf:28:f2:05:97:f9:31:ae:d6:85:
                    e8:2f:03:94:2f:0d:b1:4a:ed:a8:f4:05:2c:f1:96:
                    4f:e5:2b:59:3d:11:a1:2c:ac:29:d9:cc:a2:3d:bf:
                    51:20:ea:85:2d:62:85:ee:13:7f:5b:b0:04:14:2f:
                    5b:8d:d6:0d:69:a8:97:91:52:b5:9a:21:ea:f5:33:
                    98:83:36:e9:db:c6:46:95:ef:ce:f7:3a:5d:6c:98:
                    f3:3e:b8:40:cb:33:50:81:71:bd:bc:10:84:2e:30:
                    28:8c:a5:1c:38:96:92:d7:cc:71:71:0b:cc:40:a0:
                    06:de:a6:40:b3:3f:11:a4:40:c8:2d:08:4f:d4:76:
                    c1:d3:19:0c:1d:85:a7:6a:9e:8e:1d:c6:27:4d:e0:
                    1c:84:fc:2e:70:10:62:1a:6a:99:df:b9:b0:bb:5c:
                    4e:73:b7:2b:c0:5b:89:04:aa:ef:43:b8:03:d1:52:
                    e9:72:82:d5:4b:61:39:f1:88:49:e9:22:a3:2d:fc:
                    20:48:9d:8f:d9:6b:68:5c:66:72:56:7e:78:88:9d:
                    0b:fb:f6:3c:8b:e8:6c:74:20:47:aa:f9:47:8a:eb:
                    91:0f:bd:e8:75:f6:b7:bd:d4:06:92:23:5f:2b:a0:
                    36:81:e1:f3:28:25:b3:46:4e:a5:2f:7d:03:6d:03:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:20:FC:6B:64:83:0B:A4:C0:D1:C3:49:C4:17:F3:9C:80:CD:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:de:a8:39:07:27:1c:fb:f0:56:14:f9:06:60:75:01:ea:2c:
         f8:53:e8:be:35:b1:a2:9e:52:9b:86:3b:f4:4f:d2:26:21:06:
         38:45:db:3e:d2:ff:d6:5f:75:9b:c3:f2:ee:85:e5:43:7c:18:
         0c:1c:0b:4e:7b:b8:24:f8:3a:39:de:51:f4:56:10:24:d8:9a:
         69:00:8f:f9:93:3f:ed:a4:cb:67:60:77:6f:20:98:2d:94:51:
         28:25:a5:c5:d0:53:93:f6:eb:c0:92:6e:d9:0f:3c:e2:30:4f:
         29:e0:c0:1e:d8:98:8f:fc:6b:17:74:de:40:a1:2c:50:6e:e9:
         38:d0:7b:5d:3b:f8:86:44:5e:10:ee:2c:2f:bf:9f:06:20:cb:
         bf:cd:4f:21:0b:80:ba:80:fd:b8:61:11:5e:ce:f5:0f:34:35:
         dc:7b:f4:a0:9b:9e:b9:a4:bb:fb:a8:a0:c2:e9:70:80:95:6f:
         be:ea:6a:9b:89:a4:cf:05:52:b6:41:4b:3c:09:ec:a3:cd:09:
         17:78:ce:c9:5e:43:d6:83:f4:e5:da:4a:81:4f:cc:6e:77:b8:
         ce:e2:9c:9b:e0:27:22:58:87:d6:39:70:95:33:87:b1:60:85:
         e7:20:9c:73:84:3d:0d:46:71:4a:7f:08:dc:0c:17:64:2a:af:
         f6:a3:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:15:03 2025 by rpki-client