Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa
File:                     83bed6be-982c-32d3-85e7-7d30a77ee70d.roa (raw, json)
Hash identifier:          7352ZyQU1UBli6s6TKwswMG04QzXb/T+Txl4n6plP6I=
Subject key identifier:   66:92:79:B7:ED:83:C5:E2:84:7B:25:F8:A0:35:D2:72:E6:AB:99:D6
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F4328584CB551D3FF7C939D7AD14F1B00
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     22379
IP address blocks:        209.127.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:d3:ff:7c:93:9d:7a:d1:4f:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=fb9c1115-0c5f-41d7-bac2-b1946a22b10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:ff:d4:2c:24:88:cd:f6:b4:23:a3:33:b2:
                    ec:32:13:ea:38:75:d5:02:06:8a:1f:33:63:bb:7d:
                    41:28:79:a2:77:15:14:60:06:62:09:21:c4:9c:e2:
                    57:0c:7d:fe:d8:d4:5a:a7:8d:fd:6d:80:5f:e8:59:
                    ea:f7:57:7c:71:e0:8f:18:21:2a:25:d6:7c:d2:38:
                    e4:4b:64:1e:21:37:3f:2a:94:3f:28:f2:45:b3:4e:
                    80:8d:25:6b:f7:f7:67:f9:1a:90:76:e8:fc:7c:35:
                    b7:83:fc:35:e0:2a:33:88:ec:24:5b:05:72:65:dd:
                    cc:a4:47:ef:0c:35:f9:66:74:c0:8a:83:e8:71:56:
                    96:ed:2d:8b:38:c6:9e:58:4d:d0:77:c0:6b:96:ef:
                    b2:92:dc:f7:dd:6c:21:bc:96:2b:27:69:24:7c:be:
                    5c:e1:0e:4b:60:c3:10:ed:79:27:c4:9d:21:00:8d:
                    ad:d0:69:ce:58:6c:c4:cf:ce:0d:63:93:75:13:6b:
                    0d:0d:6b:50:76:b7:2a:a1:36:fe:2f:6d:ba:64:0d:
                    50:0f:09:58:e9:02:7a:05:51:3c:1a:0d:fb:bc:84:
                    71:3b:e2:ed:1d:3c:73:b4:96:d9:fc:d5:b1:a7:08:
                    08:24:2d:2a:84:ac:61:9e:a5:67:84:33:d5:42:86:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:79:B7:ED:83:C5:E2:84:7B:25:F8:A0:35:D2:72:E6:AB:99:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:c2:55:2d:95:40:3e:6e:c6:fc:bd:7e:36:ca:9f:23:61:
         1c:2f:7a:4e:62:90:d8:5d:f2:51:14:a1:fb:a4:4d:ac:06:38:
         fa:7c:79:3a:27:91:93:50:2e:b1:fb:d9:d4:00:74:ea:0a:21:
         12:c1:4f:a5:8e:e3:a2:e3:51:a5:bf:15:e5:d9:5d:8d:9e:87:
         1a:99:44:0b:46:5b:66:23:25:72:ad:a6:68:4a:10:b8:65:68:
         0d:d1:7f:5d:ac:80:46:d6:2e:ec:b5:2e:b6:da:86:00:1a:b7:
         21:e5:3d:6b:ca:22:c6:a8:98:f4:19:99:49:28:09:35:13:3f:
         d0:1a:93:07:5a:d8:93:c3:eb:29:3f:f9:82:a7:1d:5e:31:9d:
         7f:8e:06:6a:63:f6:59:ff:46:6e:28:37:ba:62:68:da:98:22:
         b1:53:81:31:fb:3f:3a:5c:29:a5:15:7d:23:9d:6b:f2:8a:07:
         fe:e0:88:f1:ad:1b:fa:b4:f1:a4:4a:27:75:13:ce:77:82:be:
         11:76:58:a4:b9:8c:3a:ee:e6:06:b1:6f:6c:bb:f5:d2:a5:3b:
         c6:6a:28:5e:f2:a5:62:1f:b9:9b:ed:22:ad:16:46:e8:c7:c0:
         36:a7:5e:3b:f6:2e:d9:d9:08:f3:d3:20:6c:be:71:63:1a:8f:
         e0:a3:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:26 2026 by rpki-client