Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa
File:                     83bed6be-982c-32d3-85e7-7d30a77ee70d.roa (raw, json)
Hash identifier:          kp/PE7TkMy6jHb3a8GtWZPHZa3HiuuPa0UPl3MJAUug=
Subject key identifier:   06:28:23:63:42:FB:C4:C6:4C:72:B0:0B:79:8C:12:4B:A9:C6:00:B7
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F4328584F189795AD8283728BFD797240
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     22379
IP address blocks:        209.127.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:95:ad:82:83:72:8b:fd:79:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=49c3ddf7-d1b0-4d40-8687-313b95620495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:ad:0b:fd:75:7c:7e:6c:32:61:4c:da:35:
                    90:4f:6d:ff:0c:17:30:f3:13:05:b2:0e:16:3d:6b:
                    56:6c:8e:6c:66:dd:60:04:04:21:21:65:21:fb:ef:
                    9c:4b:4b:9a:b9:e7:13:cf:d9:cf:73:4b:c5:33:51:
                    11:1b:05:97:a3:19:ad:74:51:9d:22:c3:63:40:8f:
                    3d:f3:37:62:f5:c8:34:0f:60:7e:53:7c:34:8d:38:
                    3b:10:6a:b0:7c:8c:2a:0e:a4:73:e9:2d:80:09:57:
                    bb:79:18:84:86:97:1e:6a:d4:db:2b:36:44:5d:63:
                    be:69:a6:e7:62:48:a1:df:27:e6:fb:d1:67:f2:3e:
                    8d:58:81:2c:8f:c3:07:a1:f0:9d:6a:68:00:c7:70:
                    20:c7:ed:9d:e1:37:e6:bd:04:2e:82:5c:37:61:86:
                    f0:9f:54:a1:9a:a3:1c:0f:63:78:d2:cf:0e:ec:56:
                    b2:b5:8c:84:2c:6e:be:97:6a:d6:c9:82:06:08:d7:
                    5e:24:a9:4d:36:c3:6c:61:51:f5:0e:82:66:93:cf:
                    f6:47:72:24:ff:52:f2:ed:94:c0:b3:6b:e4:33:8b:
                    ef:a2:0e:6a:1a:4d:d7:6c:cf:ce:06:18:e2:72:dc:
                    42:80:f9:87:7a:1e:80:1f:4f:95:54:e5:f1:35:0e:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:28:23:63:42:FB:C4:C6:4C:72:B0:0B:79:8C:12:4B:A9:C6:00:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:21:bd:08:47:e2:d1:97:b3:6c:85:cc:ad:65:61:56:1b:14:
         8c:ca:b6:42:9b:11:eb:c0:3d:6d:75:e0:f5:ed:e8:dc:45:d7:
         0e:b1:38:f6:af:14:0b:35:73:b3:ee:58:4d:13:0a:9a:6e:dc:
         02:29:86:21:b6:c1:04:f6:3b:bd:c2:c4:9f:ed:f5:c5:9c:01:
         46:45:f6:c8:9f:e6:93:65:d3:ff:95:7b:aa:80:d7:46:80:11:
         3b:85:fd:cf:0e:19:b6:62:ba:57:9d:25:fe:b3:0b:29:b1:03:
         8e:8e:61:f2:13:1e:ad:84:58:27:d9:da:5d:d3:75:ea:5f:6b:
         6b:0e:ad:a0:55:e4:13:33:0d:46:08:ef:48:a3:ad:b7:1d:b9:
         64:e7:03:6a:cc:86:48:8e:99:3a:50:bc:ab:e0:a4:d9:91:88:
         ea:69:d9:fa:b8:0f:51:ef:9b:80:0e:88:b7:b9:df:33:62:5e:
         13:45:a7:fc:a9:f7:1c:6c:d0:7f:ee:76:42:01:4a:84:cd:75:
         7c:d3:49:d5:cf:b1:81:cd:f1:bc:c8:d2:8f:ab:4b:1a:28:55:
         85:c4:b6:03:82:1b:68:5e:17:f7:3a:5d:b3:c1:db:0b:e7:a3:
         38:b1:df:df:c3:30:e9:18:1e:33:e4:3e:d6:e7:3f:54:47:a3:
         44:a4:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:00:23 2026 by rpki-client