Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
File:                     88e77858-b9ca-3b6c-b230-556e315ebe37.roa (raw, json)
Hash identifier:          0+nKC7hgpbYzrKWgeJzkiJ0Q8Y4c2QWYUXOQ/t+E964=
Subject key identifier:   B6:DF:1B:B3:C5:74:80:AC:B9:75:B5:E1:97:5C:2B:C9:7C:3D:15:87
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584AFEE6A5263F394866C10720A0
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6939
IP address blocks:        208.86.35.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a5:26:3f:39:48:66:c1:07:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=061d1c14-8881-4f0e-a247-1f4c3bb142e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:ed:be:5f:a7:5a:0e:05:ea:36:7f:55:9a:
                    1f:aa:62:c7:64:a2:cc:89:21:bc:4e:d3:67:e9:ae:
                    cc:ad:d7:c4:b9:a0:ce:8f:72:83:c4:89:14:d6:4b:
                    2e:f6:57:d4:db:ee:35:e7:fc:cb:d8:bd:15:44:c8:
                    b7:61:ca:41:f3:be:e4:2c:c8:0e:67:23:c4:b2:4a:
                    0f:64:7c:15:b2:65:ec:e3:ad:ec:2c:c1:9d:ad:3f:
                    11:6a:f8:b1:1b:93:29:e5:f3:1c:14:f6:0b:84:f9:
                    db:47:16:f4:b2:15:6f:d8:2f:d8:c3:b2:e5:ce:98:
                    d0:61:de:50:27:42:41:7a:23:c1:6f:9f:1b:ae:91:
                    b1:49:66:bb:71:b3:d2:f0:4a:6a:57:14:9d:44:c0:
                    87:b3:0a:5e:9e:cf:87:fc:8b:e3:0f:23:82:72:94:
                    af:f6:3a:b3:79:78:d7:3a:0f:de:29:9f:e5:35:2b:
                    f2:f2:56:e4:32:9d:0e:21:e9:78:fe:cf:f5:61:f8:
                    bc:45:1f:47:81:88:ed:89:0a:40:de:35:11:e2:5a:
                    90:e4:85:c6:95:0c:86:9e:30:e2:07:df:ae:d6:8e:
                    3f:f5:b8:f7:2b:bb:42:59:92:0c:69:4e:b0:ee:01:
                    31:43:c1:ab:33:5a:34:79:66:65:97:6b:33:98:83:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:1B:B3:C5:74:80:AC:B9:75:B5:E1:97:5C:2B:C9:7C:3D:15:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:28:b7:6e:ca:4d:01:69:07:d2:e7:96:66:5d:d3:54:a3:
         a3:5b:d2:ec:24:17:92:b6:08:0d:ac:8c:8e:43:90:f9:85:c5:
         94:aa:13:25:10:a8:29:96:d1:c1:bf:76:c6:19:25:40:eb:4c:
         42:35:e9:0b:9c:ee:d9:8f:3f:73:7e:19:4b:ad:3f:a5:17:31:
         77:cb:4e:e6:25:61:12:57:65:13:b6:0d:3f:c7:f3:e7:85:65:
         99:9c:23:03:93:d3:2b:27:ce:d4:eb:c8:65:67:c4:29:6a:66:
         a5:72:7c:ab:df:dc:05:e2:ab:f4:f2:d3:cc:c6:58:44:36:72:
         17:92:b3:4f:ca:d5:4a:6c:a0:cb:dc:ed:62:a1:89:06:91:ef:
         b7:08:65:86:81:0b:82:d2:46:00:36:67:4b:57:5c:bd:7e:7b:
         9b:00:c4:71:15:19:65:1a:ed:bf:81:4d:0c:2b:cd:37:2d:78:
         e0:6a:d5:93:43:16:19:b2:63:04:65:e1:25:fc:8a:45:61:61:
         33:d5:97:f9:be:a0:f5:78:61:72:2f:3f:d1:fd:eb:17:7a:66:
         de:03:c3:f4:10:9f:9e:e0:8d:1a:92:e6:bb:a9:10:fd:37:ad:
         8d:cc:c0:3e:6b:21:9b:ba:dc:f2:e9:0b:c3:b5:36:db:b0:b8:
         33:d8:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:16:56 2025 by rpki-client