Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa
File:                     83bed6be-982c-32d3-85e7-7d30a77ee70d.roa (raw, json)
Hash identifier:          O11RTEoRBkogy/J+EV2pUl0egZNiRaj+unkHlNDoNo8=
Subject key identifier:   4A:E4:C9:11:85:17:28:77:0E:4E:73:3B:8D:7B:84:77:DC:3D:96:6D
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F4328584AF5212BD734C8608984707300
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     22379
IP address blocks:        209.127.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2b:d7:34:c8:60:89:84:70:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=bce9f9b2-e62f-484a-8444-3321ac6400da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:f5:74:03:5b:ba:03:46:c2:a6:4b:2e:8e:
                    69:79:d0:bf:e8:ce:56:10:43:29:37:e4:8a:83:c2:
                    e5:f1:d0:b4:ec:98:74:4e:86:95:25:7b:5f:31:fc:
                    88:22:31:6f:82:13:8a:7f:b1:64:15:ee:39:e9:38:
                    25:62:7d:82:0f:38:89:d8:f1:e0:63:0e:76:45:90:
                    5a:09:9f:d4:78:2d:85:7f:f4:df:d2:5e:a4:03:96:
                    fa:d7:65:56:53:99:c1:78:4c:d8:d3:ad:a1:f1:a1:
                    7b:04:6a:04:aa:5b:49:11:1f:67:67:fc:30:49:68:
                    13:8e:d6:12:3f:55:5e:33:79:46:55:3b:d3:94:11:
                    7a:71:f4:9d:ef:8f:ea:53:f8:5d:cf:99:18:1d:60:
                    17:ec:e1:61:ba:f6:79:7f:bd:8d:57:e0:96:ba:8e:
                    66:9b:f1:b8:89:29:3e:a1:16:2f:f3:15:93:c9:ab:
                    a3:18:ac:96:41:ff:ae:97:b5:79:f9:34:81:f7:6f:
                    db:83:9e:f3:fd:f0:be:26:57:0b:76:94:fb:03:38:
                    0e:5a:bb:aa:9f:c6:a0:a6:ba:c8:27:48:44:36:22:
                    fb:49:55:ac:89:a8:57:30:d8:27:53:b2:0d:fe:73:
                    49:e9:6a:40:88:58:35:e7:35:17:ae:89:21:f9:55:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:C9:11:85:17:28:77:0E:4E:73:3B:8D:7B:84:77:DC:3D:96:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:00:e6:23:8c:31:d8:e7:16:6f:6f:e2:ac:cb:de:03:a9:46:
         f2:e2:88:8b:09:42:35:af:84:ea:de:49:2b:34:5a:d5:9b:86:
         ec:34:8d:6b:a0:c1:ea:85:73:f1:ad:30:c3:3d:3c:66:44:e5:
         05:06:ab:10:39:90:7d:32:17:bd:fa:d5:94:6e:e4:dd:b7:8a:
         ee:af:8b:2f:2c:3c:6d:48:b7:ed:41:dd:05:ab:7e:7c:14:06:
         af:78:17:06:c7:ea:f7:ed:1d:85:70:a1:92:52:61:aa:e4:1b:
         c1:61:fb:af:a5:d2:5d:af:9b:5b:38:b6:46:03:51:ee:97:88:
         74:60:20:64:26:ce:e9:37:5b:b4:c1:3b:cb:8d:3c:be:02:99:
         04:92:4b:36:9c:e9:36:c6:6b:ab:c1:f6:3a:78:27:97:04:48:
         e1:d1:c8:c9:d9:d1:5d:8e:36:ae:60:9c:03:40:4b:7d:ef:43:
         89:a2:04:6b:24:07:ab:2d:44:2b:b7:87:f9:5f:af:f8:22:99:
         f0:fe:5c:10:6a:7c:e3:8a:59:46:96:df:97:eb:50:34:5c:3b:
         aa:d0:01:8e:77:3f:58:a4:e9:6f:ac:4f:ea:21:46:f7:a0:07:
         54:8f:a7:ad:37:12:e6:89:de:68:b1:98:64:e8:45:9f:c3:b0:
         8c:d2:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:00:25 2025 by rpki-client