Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa
File:                     3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa (raw, json)
Hash identifier:          XXYsxRKpi0jglDGHrPFqG6FuJtfptoxjUzM1ltfFt50=
Subject key identifier:   88:ED:6A:4E:87:DF:B4:AE:E7:3F:6D:B9:EC:3A:11:C6:5A:F8:37:94
Certificate issuer:       /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial:       5A83F6B2F9BF5E2D5902522911BEEC24F49FA812
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa
Signing time:             Sun 04 Oct 2026 15:48:08 +0000
ROA not before:           Sun 04 Oct 2026 15:43:08 +0000
ROA not after:            Sun 03 Oct 2027 15:48:08 +0000
asID:                     402899
IP address blocks:        209.102.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
                          rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:f6:b2:f9:bf:5e:2d:59:02:52:29:11:be:ec:24:f4:9f:a8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
        Validity
            Not Before: Oct  4 15:43:08 2026 GMT
            Not After : Oct  3 15:48:08 2027 GMT
        Subject: CN=88ED6A4E87DFB4AEE73F6DB9EC3A11C65AF83794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:a6:b5:6b:04:7f:6b:5c:2b:25:79:58:8a:
                    d4:f0:db:dd:80:c9:63:e4:e0:3f:85:4e:f2:59:44:
                    16:1c:7b:ee:52:2a:40:e8:8d:31:1a:6b:0a:70:40:
                    0f:a4:2e:48:16:3c:f7:ea:05:13:c4:12:35:0f:7c:
                    4b:2f:d2:a0:c7:21:7f:12:6f:0e:35:e5:86:9b:92:
                    a3:14:af:bb:ed:cd:5a:17:00:5d:d1:a7:c1:1a:30:
                    fc:37:cc:d8:90:9f:09:c6:86:65:c3:ec:16:f4:3c:
                    dc:35:21:11:e9:fb:0b:ea:9d:de:39:af:35:c9:8d:
                    97:33:20:3b:9d:f2:31:c4:ad:16:e7:da:ea:ca:72:
                    ad:5d:8c:18:8c:0b:55:30:6e:fc:c3:f7:d2:53:01:
                    a1:7e:7f:8c:52:18:3d:4e:e8:44:76:e3:21:66:5f:
                    85:8c:ae:ea:54:4b:82:c9:41:8c:8d:04:65:ce:0c:
                    d0:60:14:33:8d:03:0c:b2:3f:4f:f4:ea:9e:ec:7a:
                    fc:c5:37:e8:be:9f:19:09:88:db:11:0b:ef:87:58:
                    cc:f1:95:28:ea:5c:01:95:a6:ab:83:48:80:91:6f:
                    e7:bd:bd:8a:f0:ef:f1:03:ef:5c:30:69:60:87:68:
                    66:ff:42:a5:28:4f:86:eb:a5:f0:83:e4:2f:75:e5:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:ED:6A:4E:87:DF:B4:AE:E7:3F:6D:B9:EC:3A:11:C6:5A:F8:37:94
            X509v3 Authority Key Identifier:
                keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:06:d6:8f:01:2b:f4:8b:f1:b0:f0:f3:a7:3f:bb:f1:1f:
         22:e0:cc:8e:9a:8e:2a:87:40:de:4a:34:ef:48:a1:d3:4f:52:
         29:25:60:32:c3:47:fc:69:0a:45:e1:ca:48:6d:8f:70:56:ef:
         94:0a:b1:1a:c9:47:ea:4a:5d:65:7b:38:b8:68:5f:28:9c:3c:
         4b:e0:e9:a2:fb:52:ae:ae:08:3c:e4:8e:8d:8a:2c:10:45:9f:
         16:c5:f9:4c:a5:34:e3:cb:5e:8f:09:43:b6:63:02:0d:2f:8d:
         6d:4b:cd:c5:51:da:df:0e:6d:c7:b2:62:1f:92:6c:c0:5a:36:
         12:ab:bd:83:89:60:58:32:c0:e2:78:b0:84:4b:2f:74:29:09:
         7b:97:93:d3:97:50:1c:7a:28:9e:d8:12:9f:4a:49:0c:56:c2:
         a9:32:cc:dc:ac:0b:cc:f6:9d:1b:00:40:70:49:75:13:1f:8d:
         17:c9:49:92:96:57:75:fc:cc:a6:b6:b7:4f:5f:dc:3e:cb:65:
         53:b0:d0:87:c1:d8:99:8d:c6:b2:84:a1:69:5c:1b:f7:1c:11:
         77:28:8f:27:c1:96:a7:ed:68:4c:67:90:df:7e:d8:d2:1c:8c:
         60:e9:c4:84:42:cc:5c:3c:70:08:b5:17:81:81:d5:ae:d8:4f:
         0d:18:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:14 2026 by rpki-client