Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
File:                     88e77858-b9ca-3b6c-b230-556e315ebe37.roa (raw, json)
Hash identifier:          bCHzVtFD2oDc4MhRL9YvQGeMH7pgAPov+vvEHBt8sl8=
Subject key identifier:   3A:7F:BD:B3:0A:3B:39:53:A4:04:43:4B:02:9D:E3:A5:2A:B8:2B:D4
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F43285845C013943AC1B8C289EF54FACC
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     6939
IP address blocks:        208.86.35.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:94:3a:c1:b8:c2:89:ef:54:fa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=e380c87a-8165-421d-b9ce-235ff22156fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:e2:7b:e4:2d:56:42:da:b3:f7:30:38:97:
                    20:a1:f1:72:51:77:7e:18:41:8d:97:f5:bc:36:73:
                    c2:e9:ea:09:5a:7d:c5:0f:5e:17:62:d7:2f:3d:10:
                    23:fa:97:a9:96:d0:d2:98:3c:9b:26:59:1e:bb:75:
                    b8:85:8c:44:aa:5c:f1:05:ec:cd:5b:38:b9:ba:8b:
                    5e:5e:13:4c:58:e6:8f:4c:54:61:3a:e6:89:21:b6:
                    13:b4:36:33:a7:66:ff:6b:6d:f3:09:15:6a:80:36:
                    aa:b2:6a:1e:70:53:69:46:5a:5d:d6:bc:de:85:c8:
                    30:49:33:fe:eb:fb:d1:d6:45:c8:ca:8a:97:6f:a2:
                    a3:94:12:e5:ab:79:e8:cb:e9:05:f7:d0:ab:ee:03:
                    9f:bd:c7:43:c4:6e:6f:8b:23:cd:c6:6c:5f:4b:8f:
                    8d:49:18:72:63:d2:48:a1:6b:d5:8f:71:41:e8:28:
                    e5:fe:df:73:bd:0d:f4:9c:5e:f8:95:e5:b9:7d:dd:
                    c2:42:f4:5f:c0:be:b0:4f:e0:4a:95:3d:af:73:c0:
                    f2:1f:1f:98:07:9f:75:9c:38:d7:5b:ca:b4:dd:05:
                    45:44:05:0d:cb:02:32:9b:93:02:b6:73:c1:ae:32:
                    a2:fe:ea:91:5d:c3:1b:f0:ef:b2:6e:da:f1:11:a1:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:BD:B3:0A:3B:39:53:A4:04:43:4B:02:9D:E3:A5:2A:B8:2B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:82:32:b9:db:5d:33:e1:31:16:1b:f8:58:d7:60:53:e9:
         9f:cc:b7:d7:51:e3:a2:97:11:85:89:c6:39:2c:10:7b:0a:e3:
         27:7a:d6:ab:81:40:23:ec:42:08:de:98:7a:9b:08:c7:1b:01:
         2c:8b:26:5a:37:1d:90:9c:02:06:0a:a8:eb:99:54:1b:ba:57:
         4f:28:a9:f8:98:e8:d1:df:89:7f:5d:38:2e:54:80:57:9e:ae:
         ff:a1:6a:4f:b0:c4:3f:41:83:54:6c:f5:fa:07:66:00:9b:34:
         8c:fd:8e:8a:bb:65:05:c4:36:ea:49:98:ff:c7:a7:54:c0:aa:
         8f:2b:c0:2a:35:83:e4:7c:8f:1d:00:12:e9:c7:9f:f6:30:cd:
         e4:8d:13:17:f2:49:b3:e7:71:30:58:5f:9a:37:dc:45:66:db:
         5e:f2:cc:dd:3a:01:2c:16:f9:4b:11:d9:45:28:33:71:30:13:
         fd:33:94:a9:f2:98:4c:6d:7d:a6:14:5f:b7:67:fa:b0:cc:0e:
         54:59:0b:cb:e7:6f:b4:37:3e:85:b1:a7:e2:2b:53:71:91:f6:
         44:77:40:30:3b:b1:f8:3a:8b:28:3b:1a:93:b5:7d:19:84:96:
         2d:0d:8a:3f:a4:fa:3a:6d:f1:df:18:91:10:05:9b:c9:86:a2:
         4b:71:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:28 2024 by rpki-client on console-ams.rpki-client.org