Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0529399-21c5-3acd-9a30-f83cd6214fd1.roa
File:                     b0529399-21c5-3acd-9a30-f83cd6214fd1.roa (raw, json)
Hash identifier:          TE9qSXGjPPqjxmS67lSOKvNZMV2HTbPo01QzLskLjCs=
Subject key identifier:   B2:70:61:7A:F1:CA:4E:DC:B9:43:20:F5:34:05:A2:38:13:B0:AF:D6
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B1D9C26B8FAC80D2D8E00C3A0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0529399-21c5-3acd-9a30-f83cd6214fd1.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     29931
IP address blocks:        208.88.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:26:b8:fa:c8:0d:2d:8e:00:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=fcfe1a69-146c-4c5d-9f1d-697dcfc933f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:77:28:08:c6:a3:be:53:43:4d:c4:ce:55:
                    b1:ae:22:23:f7:a7:16:3c:5b:eb:a1:9a:f8:a2:f1:
                    67:cd:51:06:e7:87:9e:eb:e1:98:90:bc:8a:72:17:
                    e9:35:84:c5:bc:ba:8c:a3:d9:30:8d:60:b8:7c:a6:
                    66:48:6b:fd:32:45:44:ce:0c:3b:4a:42:26:63:60:
                    99:ee:6b:93:99:12:37:cc:2a:d6:1e:9d:6b:e1:d0:
                    d7:87:98:88:e6:a4:fc:cb:4c:f2:41:ed:b1:31:05:
                    89:0f:e3:98:91:1b:a4:13:81:f7:0f:a1:a8:0b:49:
                    f0:7f:d0:5d:18:10:06:e6:e1:81:96:3b:8d:59:ce:
                    82:64:d7:12:33:03:5c:96:d5:e9:fc:25:40:f2:8b:
                    95:eb:4b:83:1d:e4:fc:9a:72:f3:af:83:5c:7f:8a:
                    6a:6c:78:16:27:a8:d7:6d:b6:72:c0:4b:10:9a:d4:
                    bf:45:ec:7c:bd:19:3a:22:96:b9:05:5c:0e:c8:27:
                    fc:93:08:27:67:ee:18:5d:71:4d:89:41:46:86:df:
                    79:23:de:38:58:f7:6a:e8:01:fa:7e:0d:3b:da:7a:
                    e3:c1:34:11:4e:f7:8c:52:c2:6b:d1:d5:09:e3:9f:
                    1e:88:cc:93:d1:01:90:96:10:21:0d:f0:67:e1:e0:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:61:7A:F1:CA:4E:DC:B9:43:20:F5:34:05:A2:38:13:B0:AF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0529399-21c5-3acd-9a30-f83cd6214fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:d2:dc:70:05:f8:39:25:b5:f1:bd:54:01:ac:bf:d4:43:
         3b:38:c4:c9:3b:34:64:90:be:cd:ab:a6:a6:c7:8d:b0:38:c8:
         59:93:06:78:96:af:f6:46:03:0c:87:49:b3:b1:10:ce:f4:5a:
         b7:25:6e:7c:66:18:bd:35:e2:88:84:6b:26:5d:00:11:74:40:
         9a:f2:98:12:1c:b5:70:ee:c4:61:c7:cf:95:11:0e:af:cc:6d:
         a1:60:63:1e:fe:6c:0a:a7:a8:46:d2:e1:a5:41:62:2f:37:31:
         9f:74:c4:45:5d:b6:5e:08:de:69:cc:3d:b6:b5:0c:59:7f:78:
         57:25:32:f6:96:00:de:c9:58:7d:a3:32:db:0b:9f:2f:eb:89:
         37:01:cc:75:07:95:80:de:5e:a4:94:c4:2d:28:4d:8e:b2:c9:
         d5:a8:f4:08:de:8f:3f:87:59:b7:51:dc:b0:c8:7b:b5:d5:17:
         15:43:ed:88:8a:d0:0a:1e:ce:04:66:47:76:ef:04:48:a8:b1:
         05:a7:55:0d:8f:0c:a4:cf:cd:e3:e9:8f:20:bc:b4:e6:f3:26:
         7c:43:19:94:8b:68:57:f8:81:da:a4:3e:e6:3d:39:c9:10:f3:
         a0:3a:57:60:6a:6e:75:d6:6a:e6:6f:8c:5b:11:80:ff:b2:7a:
         49:aa:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:00:21 2025 by rpki-client