Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32332d3234203d3e20383334.roa
File:                     3230392e3130322e3232342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          TlRkdvX8fNOKRWAJd0o/Zgl7VJnTXHnSjrYGw2dMvCI=
Subject key identifier:   1D:C0:FD:97:B6:E4:03:62:0D:95:02:CE:79:6C:FC:19:5E:90:3B:A0
Certificate issuer:       /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial:       6E76A5F2356E6C327DF3F48073D2FF564E63266B
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32332d3234203d3e20383334.roa
Signing time:             Wed 04 Nov 2026 15:47:48 +0000
ROA not before:           Wed 04 Nov 2026 15:42:48 +0000
ROA not after:            Wed 03 Nov 2027 15:47:48 +0000
asID:                     834
IP address blocks:        209.102.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
                          rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:76:a5:f2:35:6e:6c:32:7d:f3:f4:80:73:d2:ff:56:4e:63:26:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
        Validity
            Not Before: Nov  4 15:42:48 2026 GMT
            Not After : Nov  3 15:47:48 2027 GMT
        Subject: CN=1DC0FD97B6E403620D9502CE796CFC195E903BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:2e:e5:f6:26:e3:c4:e3:1d:41:af:67:bb:
                    2c:9d:84:ce:a5:3c:74:fa:1f:a1:d0:60:f7:d8:eb:
                    46:6c:6f:44:21:c0:1d:8b:a0:8e:0b:f9:b0:28:86:
                    7e:77:61:d9:b2:2a:ce:1f:bb:94:b3:58:90:d9:a7:
                    61:b7:22:30:42:92:83:b4:10:6f:cd:ef:61:a3:65:
                    67:7d:fc:05:3d:76:ab:95:23:c1:ce:81:fb:bf:92:
                    cd:dd:12:b9:ed:6e:0e:14:61:4b:e7:3c:2c:66:b3:
                    ca:e5:8d:44:6f:fb:f1:2b:08:9c:85:b1:6f:72:62:
                    27:47:0c:88:77:b4:f4:b9:9d:4f:0d:aa:48:c1:8b:
                    46:cf:a5:77:9d:9d:c6:66:2d:9c:50:1d:29:41:5c:
                    8e:d9:46:25:31:bd:fb:e5:0b:5a:ca:5b:0a:6e:f2:
                    68:6c:71:cc:9e:8b:55:2b:13:87:23:90:5a:48:ff:
                    9c:08:d9:e2:34:37:12:2f:85:f4:40:7a:e9:9c:2c:
                    a8:4e:90:82:85:86:d0:ae:ef:dc:e0:15:df:f7:75:
                    51:88:71:b2:7c:4c:f1:7c:68:d7:81:a0:da:4d:9c:
                    d4:64:44:d1:a0:9b:87:99:77:bf:16:43:cb:db:d1:
                    aa:ff:c1:ba:32:8a:9f:95:d4:2f:75:5e:27:c5:9f:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C0:FD:97:B6:E4:03:62:0D:95:02:CE:79:6C:FC:19:5E:90:3B:A0
            X509v3 Authority Key Identifier:
                keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:86:0f:bd:27:0b:43:4f:3f:20:ae:99:54:47:30:f5:61:
         2a:1e:d8:1e:d4:3f:dc:6b:d7:d2:01:3c:13:32:b8:36:04:2b:
         b4:13:88:bd:73:a3:65:5a:30:5a:49:df:34:95:7a:db:0e:9c:
         83:e5:51:7c:05:e2:39:db:d1:67:3a:13:45:85:28:99:ab:7f:
         1d:ca:1e:03:2a:de:f9:03:8b:45:f0:b2:2e:3b:75:24:c2:1e:
         fc:1e:4b:b7:a3:2c:2a:e0:2c:09:09:23:10:7d:ac:ce:8d:30:
         9e:3f:c3:f7:81:48:c2:08:98:67:74:26:48:06:64:9a:be:de:
         a3:28:7f:2e:08:10:10:d3:18:1c:07:24:a5:03:09:2b:b4:a6:
         6b:cc:7e:51:6b:cc:cc:ee:a6:82:c9:cd:55:9c:d2:e7:a5:42:
         cb:bb:bb:0d:61:00:d9:04:6d:e8:51:75:86:c7:77:1d:58:f2:
         e7:a8:44:79:f5:4c:26:ed:8e:c8:3a:34:4a:74:9f:15:dd:11:
         51:b2:1f:7c:15:e8:ed:4d:c5:86:d9:bb:ae:6f:00:8a:ad:45:
         92:43:43:b3:21:bb:d8:0d:cc:38:0b:90:80:a5:17:59:b1:1c:
         ea:9a:5b:4e:e7:5e:96:4b:b1:ac:f4:18:0a:8d:0b:53:cb:80:
         8e:25:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:33:56 2026 by rpki-client