Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
File:                     88e77858-b9ca-3b6c-b230-556e315ebe37.roa (raw, json)
Hash identifier:          T4amV0e8JnA4yw5ud1U3sJeZI3L78MWxtqL/lAhFAGQ=
Subject key identifier:   02:7F:6E:DD:47:2D:E8:C3:6A:C9:6F:AC:FC:5A:5B:1F:6E:A7:BA:33
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584CBF172967414445B478AD4B80
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     6939
IP address blocks:        208.86.35.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:29:67:41:44:45:b4:78:ad:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=2756f2fd-e6ce-40b9-9dbd-2015236d3ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c7:5d:ed:db:f9:77:09:4c:71:cb:9e:45:9f:
                    46:ce:02:d8:86:4f:ba:52:60:3e:36:90:d8:47:96:
                    45:dc:10:b4:3c:50:84:5e:dc:f9:87:e1:60:0e:48:
                    71:a4:eb:36:02:69:92:57:e4:4e:b1:88:0f:1f:75:
                    97:41:84:be:9c:2b:e7:9a:03:f4:0e:76:96:c0:73:
                    10:a9:fc:a2:70:c8:95:74:70:84:2b:ef:77:0f:e2:
                    20:9d:0c:42:34:8b:98:a1:45:48:7c:b0:d3:9a:ad:
                    dc:f8:a9:7d:82:89:ca:7b:bb:cf:bc:79:79:8a:25:
                    09:12:b1:6a:9b:9c:02:e6:cf:26:21:3d:44:21:f8:
                    65:d0:e7:a1:07:ed:af:43:59:f6:5e:1d:24:18:3f:
                    75:8a:1b:ee:2f:f1:72:05:89:ba:a2:8e:a0:67:99:
                    01:e4:1b:fc:a1:29:4c:e6:f4:4b:65:8b:e8:e5:06:
                    07:5b:9d:19:48:e9:a9:83:a5:a6:9e:87:22:33:b0:
                    e6:24:ca:8b:06:92:05:54:d3:24:99:6c:77:4e:cd:
                    87:9a:fd:28:4c:64:b2:d1:b3:6b:38:14:f3:d3:6c:
                    72:01:a1:2d:f9:1b:60:9b:f3:0a:1e:cb:f4:2c:0a:
                    8a:b9:50:e1:20:df:9d:79:2d:37:5e:04:35:50:f9:
                    c2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7F:6E:DD:47:2D:E8:C3:6A:C9:6F:AC:FC:5A:5B:1F:6E:A7:BA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:33:5a:48:df:b7:fa:25:c3:0a:38:8f:25:6f:45:56:4d:99:
         3d:28:89:09:8e:8d:5e:da:74:05:fa:d9:68:6b:1e:a9:a4:17:
         09:e5:39:37:2c:4f:ab:f9:73:4b:cb:98:23:20:70:8d:fd:43:
         d8:3a:d5:f9:85:9a:1b:8a:19:f5:bc:e5:48:47:b9:0a:a0:e2:
         1f:98:7a:49:03:d0:d1:87:de:0d:1b:15:0b:07:3e:20:50:fb:
         1c:65:a6:ec:fe:f8:11:94:ef:33:e3:a0:7f:aa:41:4b:cc:c4:
         99:9d:8d:78:34:5b:cb:ad:d2:d4:31:73:da:21:d4:f5:d5:ae:
         11:70:43:08:7e:07:e0:dd:41:e2:f2:b3:2e:b1:05:95:64:0b:
         44:9b:8a:2e:22:70:22:64:ba:e9:26:91:73:a0:6d:72:2e:57:
         8f:b5:3b:8a:fd:74:97:35:b7:6b:94:e4:98:bf:e9:85:e6:5d:
         2b:e1:d2:23:4f:08:5b:86:41:e7:be:6d:4b:b2:18:d5:a9:90:
         9d:86:63:71:85:7c:06:63:aa:4b:c5:5d:5d:0b:4e:58:47:93:
         dd:80:26:91:b0:df:1e:7d:21:dd:7c:43:b1:53:bb:cb:b0:db:
         a1:7b:30:43:c0:70:36:7f:a8:d2:9c:f3:98:88:41:32:a7:82:
         06:ec:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:56 2026 by rpki-client