Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233342e302f32332d3234203d3e20323135323234.roa
File:                     3230392e3130322e3233342e302f32332d3234203d3e20323135323234.roa (raw, json)
Hash identifier:          +FueILNaX5jU2dWvR8DkJP/RQQ85OboIhnKqRVtKbEg=
Subject key identifier:   7C:9C:1F:95:E7:50:05:E7:9C:78:90:14:84:5E:32:C8:D5:61:C8:59
Certificate issuer:       /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial:       0A201302F869F5D41EE50F552BA1107C7E77132A
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233342e302f32332d3234203d3e20323135323234.roa
Signing time:             Fri 16 Oct 2026 08:03:02 +0000
ROA not before:           Fri 16 Oct 2026 07:58:02 +0000
ROA not after:            Fri 15 Oct 2027 08:03:02 +0000
asID:                     215224
IP address blocks:        209.102.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
                          rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 04:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:13:02:f8:69:f5:d4:1e:e5:0f:55:2b:a1:10:7c:7e:77:13:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
        Validity
            Not Before: Oct 16 07:58:02 2026 GMT
            Not After : Oct 15 08:03:02 2027 GMT
        Subject: CN=7C9C1F95E75005E79C789014845E32C8D561C859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:25:02:d3:59:64:f9:ab:a8:90:27:48:85:
                    06:59:df:e1:3c:93:f5:66:44:45:66:5b:db:5c:89:
                    51:9c:d5:06:69:5b:24:f7:62:14:a5:6c:94:b9:6e:
                    1b:3e:b1:8a:d7:17:d9:cc:5a:4c:6b:96:8e:7f:43:
                    81:b5:33:9f:0e:27:da:dc:13:36:46:76:f6:d0:70:
                    99:8b:79:c8:7c:fb:11:1f:3c:8d:f3:57:33:81:1e:
                    60:fb:45:81:f2:b2:55:45:89:51:90:83:ed:70:e3:
                    89:71:a8:58:47:e4:26:f4:49:e2:75:88:e2:31:f5:
                    5a:99:29:cb:a9:a2:a5:fa:05:13:1c:82:69:36:3c:
                    8b:e2:48:c3:58:7c:e3:bf:ac:08:68:34:df:ad:fc:
                    18:6c:ff:c5:8d:e5:dd:3e:c7:d4:8c:3f:07:01:8b:
                    54:7a:3d:ed:ff:b5:24:02:2f:ab:a7:37:a4:61:0f:
                    59:c0:ae:d7:06:c7:61:e7:da:39:2e:4d:a3:ac:66:
                    7b:32:d2:80:68:35:64:86:df:85:54:b1:4c:b6:9f:
                    66:3d:03:ca:2a:33:2c:a8:f7:45:ad:c3:0c:4a:70:
                    9c:ae:c5:de:3b:ac:21:8d:ac:9c:f9:8a:64:ed:10:
                    8d:c3:01:cc:a6:57:32:a8:0b:f5:33:38:5c:99:31:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9C:1F:95:E7:50:05:E7:9C:78:90:14:84:5E:32:C8:D5:61:C8:59
            X509v3 Authority Key Identifier:
                keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233342e302f32332d3234203d3e20323135323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:d0:83:d8:9c:40:78:f1:d7:ed:a8:50:0d:e5:ba:c4:0a:2c:
         07:68:df:29:6e:25:ee:59:6c:3b:20:c6:01:12:7a:0a:1e:89:
         ef:e2:5f:05:42:f4:e3:2a:cd:52:fe:31:55:25:aa:cd:d9:b4:
         31:eb:9c:91:16:ef:1a:42:20:9a:51:6c:da:44:43:0d:9f:59:
         c9:29:d6:87:1e:c1:38:f1:71:71:df:34:72:82:48:cc:52:8b:
         06:11:97:57:ed:fd:b7:09:ec:05:19:2b:86:81:9f:8b:2b:0f:
         49:dd:3a:35:8f:da:70:f7:88:93:54:27:75:86:3d:f6:43:37:
         60:99:e5:b8:40:82:d9:62:4c:bb:46:a9:9f:08:7d:f9:58:4e:
         48:55:2e:86:6a:cc:65:44:4f:d3:01:42:ad:5f:bf:b0:40:f5:
         5d:99:3b:96:af:82:cd:51:c8:8c:e6:94:2a:45:64:5c:24:71:
         3d:62:b1:cf:aa:d1:50:21:33:e5:2d:07:4a:2c:0b:64:87:59:
         38:f9:1b:8f:e8:e0:8d:70:36:bb:7c:f6:5a:c2:b1:6c:d2:9a:
         b6:a6:65:22:22:f9:bf:d6:ff:4c:77:0f:ee:2b:03:a5:70:f0:
         bc:ac:fa:a6:c1:ed:70:e8:86:82:ea:26:c9:3b:f6:a8:12:ce:
         11:29:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:21 2026 by rpki-client