Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa
File:                     3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa (raw, json)
Hash identifier:          w/ma0QyCBe0umJqfKhdznB/Uyao9sFR2Mev5xMxitcc=
Subject key identifier:   ED:39:E2:19:46:FE:C4:BB:E3:FE:BF:7D:01:37:FE:70:F3:42:84:89
Certificate issuer:       /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial:       583252F0E75DFB3159301671E08615292932EBE7
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa
Signing time:             Mon 05 Oct 2026 15:00:47 +0000
ROA not before:           Mon 05 Oct 2026 14:55:47 +0000
ROA not after:            Mon 04 Oct 2027 15:00:47 +0000
asID:                     215607
IP address blocks:        209.102.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
                          rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:32:52:f0:e7:5d:fb:31:59:30:16:71:e0:86:15:29:29:32:eb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
        Validity
            Not Before: Oct  5 14:55:47 2026 GMT
            Not After : Oct  4 15:00:47 2027 GMT
        Subject: CN=ED39E21946FEC4BBE3FEBF7D0137FE70F3428489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dc:93:42:41:8f:5b:83:d5:9d:20:4f:14:9a:
                    75:5b:2e:79:87:fe:33:75:a4:06:b6:b6:a5:bf:22:
                    b7:a9:1d:a7:d8:e6:a5:d4:d0:c8:57:23:76:d3:37:
                    31:9a:24:b7:43:22:e6:5e:e1:df:19:ea:dd:47:52:
                    a6:73:15:ce:a2:32:fb:e0:af:7e:f2:a7:00:aa:0a:
                    ef:cf:a0:72:bf:92:e5:04:6c:74:3c:8e:96:0d:87:
                    33:5c:94:8b:d5:9d:63:57:20:d2:9d:6b:fb:69:79:
                    0f:46:2f:e8:d7:ab:dc:2c:e3:34:ff:6f:7e:09:05:
                    8a:85:81:f3:5b:20:59:89:8a:93:04:a9:80:4f:17:
                    84:7a:28:6f:76:47:6d:7f:f3:2a:1b:6b:f2:fd:77:
                    78:98:d3:a3:e5:97:97:f3:e7:a3:de:1e:8f:b2:98:
                    fc:c7:fa:91:f9:86:1f:62:5a:13:bd:6a:53:6a:a8:
                    b3:45:6b:ef:73:db:e8:ca:02:25:8b:34:62:eb:e8:
                    1f:14:16:e0:1e:56:ca:8c:3f:6e:2b:26:2e:1b:88:
                    3e:81:91:6c:c5:2b:2f:bd:df:94:ed:23:55:d1:c2:
                    6b:2b:91:a8:86:d6:61:30:5e:81:c2:06:12:bf:a6:
                    b6:09:85:f7:49:21:26:08:3c:c1:ab:fa:0f:b3:dd:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:39:E2:19:46:FE:C4:BB:E3:FE:BF:7D:01:37:FE:70:F3:42:84:89
            X509v3 Authority Key Identifier:
                keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:04:74:aa:f6:f4:68:95:9a:4e:f1:d6:42:04:76:0d:f5:
         44:72:29:30:ce:09:ec:43:01:30:f3:94:16:7f:77:20:33:66:
         80:a5:54:92:fd:c7:0c:33:26:fb:f7:83:63:d8:37:d6:cd:e1:
         d6:db:d7:70:7b:3f:6d:1d:55:12:b7:30:e9:a6:32:d2:aa:b2:
         4d:b8:62:de:b3:9a:8b:8e:ef:16:62:fb:5d:c5:d0:90:3b:07:
         ad:d6:cc:02:01:ee:9e:3c:f2:9a:50:a1:51:e7:6e:78:46:87:
         24:b1:66:23:c4:ef:a4:f1:8b:49:4b:6b:ad:36:76:bb:67:a7:
         9b:24:23:92:40:86:ca:0c:e1:3d:c7:2b:1a:4a:e2:e1:4e:ab:
         69:0e:60:24:e0:ee:7c:32:6a:16:28:ff:a1:0c:54:05:87:32:
         68:2d:35:f0:d4:28:7e:aa:0e:ac:37:3f:af:a3:91:8c:e5:a0:
         5c:19:36:c6:35:1a:27:96:2b:4a:88:b5:2a:34:12:de:ce:da:
         4d:76:fa:aa:c5:37:27:b4:85:e2:fb:82:9c:d8:68:55:19:66:
         bb:ee:0f:50:ec:80:3c:64:d1:51:6b:fb:f2:40:27:37:56:3e:
         27:3d:69:ae:40:a2:46:cb:d9:53:aa:1d:73:a7:c6:1c:cd:5a:
         0c:13:6f:c0
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUWDJS8Odd+zFZMBZx4IYVKSky6+cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjQxZGM4MGFjNDMwNWM0ZWJkMTMxZGE3MTk2ZGUxNTYw
YjU5ZTFhMmZmNjM0OWRlODMwHhcNMjYxMDA1MTQ1NTQ3WhcNMjcxMDA0MTUwMDQ3
WjAzMTEwLwYDVQQDEyhFRDM5RTIxOTQ2RkVDNEJCRTNGRUJGN0QwMTM3RkU3MEYz
NDI4NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9yTQkGPW4PV
nSBPFJp1Wy55h/4zdaQGtralvyK3qR2n2Oal1NDIVyN20zcxmiS3QyLmXuHfGerd
R1KmcxXOojL74K9+8qcAqgrvz6Byv5LlBGx0PI6WDYczXJSL1Z1jVyDSnWv7aXkP
Ri/o16vcLOM0/29+CQWKhYHzWyBZiYqTBKmATxeEeihvdkdtf/MqG2vy/Xd4mNOj
5ZeX8+ej3h6Pspj8x/qR+YYfYloTvWpTaqizRWvvc9voygIlizRi6+gfFBbgHlbK
jD9uKyYuG4g+gZFsxSsvvd+U7SNV0cJrK5GohtZhMF6BwgYSv6a2CYX3SSEmCDzB
q/oPs92DSwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFO054hlG/sS74/6/fQE3/nDz
QoSJMB8GA1UdIwQYMBaAFC5pLDfOKCN9QreUS8ey/adgyDbkMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhNzA1ZDkwOWVkMTQxYmM5OGYxNjA3MDY3N2QzYjQzLzAv
MkU2OTJDMzdDRTI4MjM3RDQyQjc5NDRCQzdCMkZEQTc2MEM4MzZFNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzlmNjZiMWY1LWJiMTYtNDlkNS1iNjdiLWIzZjI3ZjhkNTZjOC82NDFk
YzgwYWM0MzA1YzRlYmQxMzFkYTcxOTZkZTE1NjBiNTllMWEyZmY2MzQ5ZGU4My5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTcwNWQ5MDllZDE0MWJjOThmMTYw
NzA2NzdkM2I0My8wLzMyMzAzOTJlMzEzMDMyMmUzMjMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzUzNjMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRZuQwDQYJKoZIhvcN
AQELBQADggEBABpbBHSq9vRolZpO8dZCBHYN9URyKTDOCexDATDzlBZ/dyAzZoCl
VJL9xwwzJvv3g2PYN9bN4dbb13B7P20dVRK3MOmmMtKqsk24Yt6zmouO7xZi+13F
0JA7B63WzAIB7p488ppQoVHnbnhGhySxZiPE76Txi0lLa602drtnp5skI5JAhsoM
4T3HKxpK4uFOq2kOYCTg7nwyahYo/6EMVAWHMmgtNfDUKH6qDqw3P6+jkYzloFwZ
NsY1GieWK0qItSo0Et7O2k12+qrFNye0heL7gpzYaFUZZrvuD1DsgDxk0VFr+/JA
JzdWPic9aa5AokbL2VOqHXOnxhzNWgwTb8A=
-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:25 2026 by rpki-client