Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233302e302f32332d3234203d3e20383334.roa
File:                     3230392e3130322e3233302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          p1XdhQS969uedIQJ8x0u64yXtckBGndRyrer9ygqKCY=
Subject key identifier:   5F:03:D3:94:6B:21:D9:8C:BD:C8:79:57:D2:F3:DF:2B:7D:82:91:FD
Certificate issuer:       /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial:       8AB46A903DB805EC370700B8B23CB5C7185658
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233302e302f32332d3234203d3e20383334.roa
Signing time:             Mon 05 Oct 2026 15:01:22 +0000
ROA not before:           Mon 05 Oct 2026 14:56:22 +0000
ROA not after:            Mon 04 Oct 2027 15:01:22 +0000
asID:                     834
IP address blocks:        209.102.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
                          rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8a:b4:6a:90:3d:b8:05:ec:37:07:00:b8:b2:3c:b5:c7:18:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
        Validity
            Not Before: Oct  5 14:56:22 2026 GMT
            Not After : Oct  4 15:01:22 2027 GMT
        Subject: CN=5F03D3946B21D98CBDC87957D2F3DF2B7D8291FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:c6:1a:13:a9:cb:90:f0:93:b0:2b:1e:ee:
                    8f:d8:6b:2e:cf:45:be:6f:d7:d1:6f:80:61:d5:1e:
                    d4:67:3e:29:90:21:61:47:78:71:02:24:3a:2c:81:
                    33:18:84:c8:1c:ed:17:1b:ed:75:06:83:5c:d3:34:
                    07:01:1c:a8:2c:4f:05:58:82:56:4e:df:8c:c6:ae:
                    ef:8d:e0:b0:93:96:53:60:cb:fe:16:a9:de:56:ea:
                    ea:cc:3c:53:26:39:70:12:58:97:33:ab:d4:b7:c4:
                    e0:8a:79:1b:9a:16:79:9f:64:89:d0:c8:8d:90:32:
                    16:28:7c:a7:7d:1b:c9:66:b5:6d:b4:4c:a9:42:b5:
                    19:10:42:7c:02:75:d5:26:67:65:7d:4e:5b:d3:80:
                    42:fe:d2:24:81:2e:bc:05:63:5b:1c:44:55:40:74:
                    50:47:49:9d:ac:c0:f4:e9:4d:6c:99:c2:a6:09:3d:
                    90:70:30:52:85:36:9f:e9:55:1b:ff:9b:e7:84:cd:
                    fa:3d:de:fb:74:9a:83:28:4e:46:3e:3d:36:bc:7b:
                    5a:d1:bf:a5:81:fe:ac:10:3b:33:be:27:17:03:37:
                    21:85:2b:73:ec:97:17:9e:6d:44:6d:49:46:d3:0c:
                    a1:4d:b3:21:9d:80:c0:9c:27:66:9c:94:ee:ec:96:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:03:D3:94:6B:21:D9:8C:BD:C8:79:57:D2:F3:DF:2B:7D:82:91:FD
            X509v3 Authority Key Identifier:
                keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:95:e6:cb:a6:b3:f0:c5:ee:df:c7:a8:0f:1c:22:2a:28:7c:
         77:8d:dd:75:a7:2f:93:ad:2b:d3:01:e8:33:5d:a9:bf:f0:07:
         be:97:b4:96:ed:f2:8e:49:e1:47:44:4e:a0:4b:a0:f8:ad:30:
         0c:f5:1a:09:a2:d4:17:38:35:af:02:0b:9d:b9:e5:ab:fc:12:
         ad:56:9d:a9:0e:a0:88:12:60:2c:6a:14:5f:55:04:d5:93:02:
         76:c0:01:9f:9b:74:02:49:f2:9c:cd:65:eb:d5:e4:fb:77:00:
         6a:96:90:65:30:59:67:c4:4f:8e:0b:8c:52:30:aa:63:d9:26:
         cf:09:63:97:22:43:8a:c0:97:fb:47:b5:fa:08:e5:9d:86:0e:
         63:36:bb:e3:48:8b:f9:5a:8e:7d:45:3d:08:da:47:1c:75:da:
         d4:6e:27:3c:76:d9:14:e1:62:19:ee:25:c4:83:ff:06:a7:a9:
         a6:30:9e:cc:39:86:9a:e9:c3:d8:0b:47:3e:c1:4a:01:a6:8b:
         3e:76:a9:42:00:68:dc:84:e1:f1:98:3b:0c:8d:72:b2:07:e8:
         b4:5d:df:4d:56:c1:30:c6:42:ce:70:52:cf:1b:f6:6a:ff:af:
         6e:90:00:9c:9c:1a:52:53:7e:63:97:98:54:2d:6d:4e:c3:90:
         80:6f:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:39 2026 by rpki-client