Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232352e302f32342d3234203d3e20383334.roa
File:                     3230392e3130322e3232352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          LFhmsc3LFcmM/QJpvhkuNHOpnsIkPK+rdOmXvmnWRrE=
Subject key identifier:   83:51:E0:63:FC:56:A1:B3:05:DD:6D:D3:40:3E:4D:20:00:F4:34:C8
Certificate issuer:       /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial:       0955CFCA37559F00B18B58680141E22BDEA9C20E
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232352e302f32342d3234203d3e20383334.roa
Signing time:             Sun 04 Oct 2026 15:49:12 +0000
ROA not before:           Sun 04 Oct 2026 15:44:12 +0000
ROA not after:            Sun 03 Oct 2027 15:49:12 +0000
asID:                     834
IP address blocks:        209.102.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
                          rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:cf:ca:37:55:9f:00:b1:8b:58:68:01:41:e2:2b:de:a9:c2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
        Validity
            Not Before: Oct  4 15:44:12 2026 GMT
            Not After : Oct  3 15:49:12 2027 GMT
        Subject: CN=8351E063FC56A1B305DD6DD3403E4D2000F434C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:57:3d:61:64:74:ec:e7:5e:10:12:c4:9f:
                    b7:2a:f4:38:69:e4:c0:d8:ab:36:f2:cf:5a:83:1e:
                    40:54:47:86:8e:4c:af:e8:4c:12:52:99:57:0e:23:
                    e8:83:cc:f4:b2:17:87:65:70:a3:30:79:81:3c:b0:
                    d3:7a:53:54:d2:8e:88:31:54:97:c9:38:b0:f8:64:
                    d0:38:69:de:6c:eb:db:1e:12:6f:b9:09:d8:64:07:
                    a9:04:cc:18:b1:1b:d6:fa:e7:a8:4d:b7:d5:63:31:
                    05:17:50:94:fb:3b:c0:4e:74:e6:3c:34:63:18:d9:
                    9b:89:17:91:c7:18:83:3e:01:64:f0:57:6a:5f:a3:
                    b1:49:f4:69:93:57:66:dc:37:75:a5:b1:e9:a0:e8:
                    97:c7:39:14:a0:79:b5:a6:af:da:da:9a:ac:dd:32:
                    f7:96:74:05:db:17:41:86:6a:97:94:a7:90:b2:56:
                    f5:f8:2b:05:78:27:08:35:26:d2:03:43:d9:16:3e:
                    1a:b3:9c:51:a7:4b:4c:04:91:c3:7e:ac:fd:f3:28:
                    50:b1:ed:60:3f:c1:86:62:2b:8f:93:4f:63:8a:5e:
                    19:8b:43:13:8f:09:04:20:f9:63:c3:65:37:69:a6:
                    37:8b:99:e8:d1:cf:39:bf:00:55:96:5c:e4:e3:d8:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:51:E0:63:FC:56:A1:B3:05:DD:6D:D3:40:3E:4D:20:00:F4:34:C8
            X509v3 Authority Key Identifier:
                keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:48:5c:28:83:3e:cd:3e:80:5b:db:a5:3b:96:50:a9:62:26:
         4e:11:30:8e:63:a9:c1:3f:fc:b1:19:d9:d8:c3:97:94:d6:ef:
         2f:73:f7:39:7f:1d:6a:09:bc:dd:5d:7b:43:ac:88:30:d4:d6:
         32:d6:19:37:ec:65:16:c6:0c:54:22:f8:cf:a0:ef:ca:48:15:
         a8:8c:24:4f:5e:1a:f4:92:95:f2:7e:9c:3a:0b:44:0c:e6:b3:
         da:9b:eb:2d:44:f5:b5:0f:ac:e4:d5:9a:6a:c6:c2:69:e2:c7:
         6f:a5:4a:bd:76:4e:34:14:32:46:8f:87:a2:50:2b:e2:fd:5b:
         85:70:37:33:e5:69:96:ad:67:0c:b4:11:2d:e6:b8:04:7e:ab:
         0d:be:fe:37:5c:47:57:6a:0f:a0:fe:94:c0:84:c3:4a:cd:ad:
         33:7a:62:4d:d8:4b:29:8d:f4:d6:f9:f2:a1:20:57:a3:23:37:
         b2:35:1b:f8:be:f8:7c:32:01:45:72:d1:0e:19:cf:37:eb:3e:
         9d:94:b0:9f:da:2d:9a:21:bf:25:92:98:16:07:92:dd:3b:69:
         63:2b:85:4b:1a:3a:63:b9:9c:12:50:9e:95:48:7a:33:f7:08:
         9e:06:c9:39:a6:cd:7c:4d:b4:f1:12:f8:58:b1:fb:55:05:a9:
         14:f5:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:52 2026 by rpki-client