Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          Qz6InJtJqjdEMKoYlB8A2EMGtvbD35smig35J3X/ipY=
Subject key identifier:   02:F4:AD:1D:B4:B5:0C:50:DE:10:2F:23:E6:A1:01:C9:FF:B8:BF:34
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       6AB1A0B7748CCBD835076241586641574D1B4065
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
Signing time:             Fri 17 Oct 2025 19:30:39 +0000
ROA not before:           Fri 17 Oct 2025 19:25:39 +0000
ROA not after:            Fri 16 Oct 2026 19:30:39 +0000
asID:                     209242
IP address blocks:        66.225.252.0/24 maxlen: 24
                          204.93.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b1:a0:b7:74:8c:cb:d8:35:07:62:41:58:66:41:57:4d:1b:40:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 17 19:25:39 2025 GMT
            Not After : Oct 16 19:30:39 2026 GMT
        Subject: CN=02F4AD1DB4B50C50DE102F23E6A101C9FFB8BF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ce:32:e9:5b:3a:a0:6c:98:e9:e1:df:07:29:
                    2d:2b:5f:5c:62:58:05:f8:70:0b:45:ea:97:eb:63:
                    c8:a9:1d:d9:19:db:e4:b4:a5:ff:68:62:ca:54:64:
                    82:44:0a:c0:e0:27:e5:3f:ec:b1:61:e4:25:20:bd:
                    98:85:33:fa:fe:82:28:23:73:c1:44:ce:b8:aa:45:
                    07:f1:39:74:ab:65:e5:29:b5:6b:4d:b6:ff:35:51:
                    8b:c6:5f:27:fd:5d:87:b8:5d:33:58:36:d4:f1:3a:
                    91:ff:fe:b7:60:b9:04:ca:6b:ae:06:aa:62:da:cc:
                    2b:ab:c1:67:de:0a:0a:a7:87:88:b5:d6:79:a8:b1:
                    f3:02:81:e7:5c:d7:86:75:0c:22:a5:9a:66:d8:3e:
                    4b:93:da:c7:91:2f:81:83:c4:4d:76:82:d3:0b:68:
                    44:da:25:76:35:a4:2c:22:3b:94:50:37:e5:4a:bf:
                    bf:02:fd:44:a5:8b:36:f9:24:6f:91:31:81:ef:08:
                    e7:b6:ef:14:4a:ed:fb:af:65:4e:f3:1d:a6:d2:78:
                    af:6b:fc:e9:37:f2:9b:82:4e:1e:58:2a:a6:b7:c0:
                    2f:77:45:18:3d:5c:62:96:99:66:10:01:5c:b6:22:
                    82:ab:cb:eb:ed:e4:c5:79:ef:c3:fd:28:98:e5:d3:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F4:AD:1D:B4:B5:0C:50:DE:10:2F:23:E6:A1:01:C9:FF:B8:BF:34
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.252.0/24
                  204.93.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:35:12:9d:a2:df:c9:65:d8:8a:06:a7:b2:2b:f1:af:c7:
         60:02:9f:97:ab:d6:ff:30:ab:2e:7e:52:af:64:91:db:b2:10:
         0d:4d:f5:63:fa:15:a2:10:4e:06:0a:7e:cc:ec:a7:c7:5f:93:
         a8:5f:17:de:53:e7:ab:a4:ea:2d:e1:19:99:a6:e8:5b:b8:ec:
         d9:3e:7a:91:af:3b:df:0e:16:8c:9e:56:c9:1c:26:b7:dd:65:
         85:81:74:3b:18:65:50:4f:74:a9:16:ca:2d:f3:b6:51:85:7f:
         90:24:fa:49:30:97:72:1d:18:ad:05:13:b2:73:41:95:68:56:
         b7:fd:97:a5:d7:2a:98:31:ca:34:05:f1:e9:2f:70:24:99:73:
         6a:7e:53:ce:b6:a3:f9:74:57:95:1f:c7:62:3d:e1:c9:d2:ff:
         57:73:fc:46:9d:ca:9a:4d:53:84:60:58:3d:f7:8d:f8:a4:b8:
         63:6a:55:61:a7:ad:12:bd:6b:c5:35:d1:19:22:ea:4a:7d:c4:
         c1:24:52:0e:92:47:e0:89:86:9f:22:71:52:d2:04:1a:f8:af:
         1e:29:92:77:29:0f:0e:aa:3a:94:41:14:9e:1f:bd:e2:e1:9c:
         e2:cd:68:06:36:c2:85:dc:69:fe:42:28:64:73:3f:94:a5:f6:
         74:6f:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:40 2025 by rpki-client