Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233362e302f32322d3234203d3e20383334.roa
File:                     3230392e3130322e3233362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          TSpphCwvxN0PdNz1kpjKyMMCg4A3v0V8176E2QGmUOg=
Subject key identifier:   79:58:52:71:85:22:35:4D:AA:3D:7F:89:FD:F5:95:11:D6:AE:51:D2
Certificate issuer:       /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial:       4E687ABD9BCC5A463D57BBD204DF7CBD064CEF2C
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233362e302f32322d3234203d3e20383334.roa
Signing time:             Sun 08 Nov 2026 09:42:24 +0000
ROA not before:           Sun 08 Nov 2026 09:37:24 +0000
ROA not after:            Sun 07 Nov 2027 09:42:24 +0000
asID:                     834
IP address blocks:        209.102.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
                          rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:68:7a:bd:9b:cc:5a:46:3d:57:bb:d2:04:df:7c:bd:06:4c:ef:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
        Validity
            Not Before: Nov  8 09:37:24 2026 GMT
            Not After : Nov  7 09:42:24 2027 GMT
        Subject: CN=795852718522354DAA3D7F89FDF59511D6AE51D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:f0:5a:e3:c7:f9:e8:1c:8c:9e:84:0b:d2:
                    88:01:37:34:54:a5:3e:75:ed:b0:e6:7e:e0:4a:27:
                    05:a4:27:ea:aa:4c:29:da:37:56:62:8e:32:a5:3b:
                    e9:79:d6:25:5f:93:93:78:f4:84:b3:6a:fc:2e:b6:
                    36:8e:4f:2c:0d:78:72:51:ca:12:ce:86:a3:78:9b:
                    87:e5:ae:8c:64:d0:72:8e:04:8c:64:e8:92:d0:1a:
                    43:62:75:de:15:6f:5a:24:e1:f8:ec:00:56:be:c3:
                    a9:16:e8:48:93:8a:27:9e:ab:9e:6d:fb:5a:67:c3:
                    f8:af:5d:cb:72:76:a7:e1:99:70:29:9d:42:ea:d3:
                    f7:ff:4e:f4:10:5c:32:66:ff:b8:00:71:40:5a:f3:
                    95:ef:d4:8c:94:5e:ae:57:46:63:21:cd:a8:66:7a:
                    64:d5:2b:ad:18:81:0c:56:a6:7f:62:e3:41:ff:d9:
                    d8:31:f7:19:30:d3:96:97:b3:50:2e:ee:02:ca:7d:
                    02:56:86:c9:07:9c:ed:e9:85:36:99:70:d1:67:30:
                    ad:de:a2:4f:75:ac:c5:bc:8e:32:b2:64:69:9b:60:
                    f1:df:71:37:f3:1c:e8:92:07:56:9c:7c:c2:1e:3f:
                    0a:4d:17:40:55:3a:4d:c8:bc:ca:13:d2:69:eb:e7:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:52:71:85:22:35:4D:AA:3D:7F:89:FD:F5:95:11:D6:AE:51:D2
            X509v3 Authority Key Identifier:
                keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233362e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:a3:36:87:7b:dd:38:ce:90:f6:4b:d0:a3:61:8c:17:d4:
         db:f3:04:52:d1:fc:34:49:ec:c4:4a:77:7c:65:c6:8b:ac:8a:
         73:7b:e9:24:62:84:ab:ff:83:b2:26:5c:d0:18:17:7d:bc:8d:
         97:64:fa:b1:e1:a4:44:d1:7a:bd:20:dc:cc:46:38:ad:e3:cd:
         dd:fa:9d:54:b1:42:d5:ee:35:e1:9a:a8:d6:80:db:e7:74:e4:
         eb:69:7c:70:21:18:93:dc:8b:78:f7:48:c8:8b:7b:a1:f3:79:
         9a:1a:8b:32:fd:36:2d:f9:92:ce:6e:4f:ca:b7:1e:d7:19:d9:
         4a:b1:d5:a1:8e:ae:d5:d3:42:63:a9:39:53:e6:e9:c9:4f:0a:
         d2:e4:76:c7:a6:07:29:3b:b7:95:27:18:f1:b2:e6:c7:9f:82:
         00:6f:ff:f8:96:7f:1e:75:ee:a4:9f:ce:a4:4b:02:1a:1a:cb:
         ec:80:37:3e:77:35:87:c6:4d:89:8f:eb:d8:46:b7:47:dd:f5:
         9c:44:d6:6b:ef:00:db:6c:e3:5b:6a:70:3c:72:f6:ee:7d:fe:
         bc:a5:f7:c6:cb:fe:4b:5d:0c:15:68:2b:9c:3f:6c:c3:e0:d7:
         85:74:db:be:93:72:46:7a:2c:a1:51:d4:f3:e6:1a:e2:6d:5a:
         f0:f1:7c:9b
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUTmh6vZvMWkY9V7vSBN98vQZM7ywwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjQxZGM4MGFjNDMwNWM0ZWJkMTMxZGE3MTk2ZGUxNTYw
YjU5ZTFhMmZmNjM0OWRlODMwHhcNMjYxMTA4MDkzNzI0WhcNMjcxMTA3MDk0MjI0
WjAzMTEwLwYDVQQDEyg3OTU4NTI3MTg1MjIzNTREQUEzRDdGODlGREY1OTUxMUQ2
QUU1MUQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw3wWuPH+egc
jJ6EC9KIATc0VKU+de2w5n7gSicFpCfqqkwp2jdWYo4ypTvpedYlX5OTePSEs2r8
LrY2jk8sDXhyUcoSzoajeJuH5a6MZNByjgSMZOiS0BpDYnXeFW9aJOH47ABWvsOp
FuhIk4onnquebftaZ8P4r13Lcnan4ZlwKZ1C6tP3/070EFwyZv+4AHFAWvOV79SM
lF6uV0ZjIc2oZnpk1SutGIEMVqZ/YuNB/9nYMfcZMNOWl7NQLu4Cyn0CVobJB5zt
6YU2mXDRZzCt3qJPdazFvI4ysmRpm2Dx33E38xzokgdWnHzCHj8KTRdAVTpNyLzK
E9Jp6+dmDQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHlYUnGFIjVNqj1/if31lRHW
rlHSMB8GA1UdIwQYMBaAFC5pLDfOKCN9QreUS8ey/adgyDbkMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhNzA1ZDkwOWVkMTQxYmM5OGYxNjA3MDY3N2QzYjQzLzAv
MkU2OTJDMzdDRTI4MjM3RDQyQjc5NDRCQzdCMkZEQTc2MEM4MzZFNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzlmNjZiMWY1LWJiMTYtNDlkNS1iNjdiLWIzZjI3ZjhkNTZjOC82NDFk
YzgwYWM0MzA1YzRlYmQxMzFkYTcxOTZkZTE1NjBiNTllMWEyZmY2MzQ5ZGU4My5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTcwNWQ5MDllZDE0MWJjOThmMTYw
NzA2NzdkM2I0My8wLzMyMzAzOTJlMzEzMDMyMmUzMjMzMzYyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALRZuwwDQYJKoZIhvcNAQELBQAD
ggEBAGrEozaHe904zpD2S9CjYYwX1NvzBFLR/DRJ7MRKd3xlxousinN76SRihKv/
g7ImXNAYF328jZdk+rHhpETRer0g3MxGOK3jzd36nVSxQtXuNeGaqNaA2+d05Otp
fHAhGJPci3j3SMiLe6HzeZoaizL9Ni35ks5uT8q3HtcZ2Uqx1aGOrtXTQmOpOVPm
6clPCtLkdsemByk7t5UnGPGy5sefggBv//iWfx517qSfzqRLAhoay+yANz53NYfG
TYmP69hGt0fd9ZxE1mvvANts41tqcDxy9u59/ryl98bL/ktdDBVoK5w/bMPg14V0
276TckZ6LKFR1PPmGuJtWvDxfJs=
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:34 2026 by rpki-client