Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e302e302f32332d3234203d3e20383334.roa
File:                     3139392e3233352e302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          x9GoxrL3twPpMe6JWdfMyeUHofFLGRhzAERNey77TmY=
Subject key identifier:   40:5B:F6:D2:AF:41:F1:8D:37:11:E1:D1:75:CD:FF:3A:3B:50:EB:BE
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       38B3C0FFB0AA47C05E301E48D6FD972289B08807
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e302e302f32332d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b3:c0:ff:b0:aa:47:c0:5e:30:1e:48:d6:fd:97:22:89:b0:88:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=405BF6D2AF41F18D3711E1D175CDFF3A3B50EBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:82:5b:aa:de:2b:4a:69:f8:d1:28:57:97:
                    8f:fc:74:e3:af:48:9b:5b:16:58:14:42:19:f8:ba:
                    bc:58:c7:7f:63:8d:35:fe:68:8f:91:73:4c:10:14:
                    ec:0f:c2:56:66:5f:81:4e:9d:d8:ff:6a:25:c4:39:
                    38:62:a3:59:ba:4d:f8:5a:ab:68:61:a0:f4:35:f6:
                    57:4d:ee:f9:88:6e:da:59:9f:2c:11:83:52:9e:39:
                    cd:bf:72:2e:63:0f:7c:0b:f9:51:44:b6:48:84:0d:
                    91:54:f1:83:8a:c7:7d:95:39:9c:ec:ad:ca:35:01:
                    56:51:d4:6f:f2:37:95:95:6d:1c:55:37:e7:98:ba:
                    a7:e1:1e:0a:3e:20:c4:5b:4e:e1:29:ae:5b:5a:ea:
                    95:be:67:72:0f:51:cc:69:94:af:3f:d8:79:5e:58:
                    95:90:87:8e:0c:5e:95:26:a7:43:17:3a:38:eb:00:
                    f7:27:11:5f:10:97:89:33:77:77:52:48:4c:43:d7:
                    f8:ae:9a:cf:d5:f5:9c:a8:b5:63:07:86:41:2e:ff:
                    93:11:b5:e3:be:ce:be:2a:8f:90:9d:58:20:3b:fa:
                    da:34:4a:9b:06:c0:12:f6:6d:89:b8:fc:da:b0:86:
                    d9:9d:9d:4c:0b:17:ff:5a:07:91:b1:97:90:1c:47:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:F6:D2:AF:41:F1:8D:37:11:E1:D1:75:CD:FF:3A:3B:50:EB:BE
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:0b:4b:d2:e7:06:c0:a7:90:e6:6f:08:80:4a:29:88:5d:ab:
         6f:86:c8:d2:b3:76:94:0c:8b:ef:60:44:89:be:3c:50:99:f4:
         26:40:7a:69:72:ec:b4:26:bc:05:64:1e:9c:8c:09:6f:3a:47:
         23:3c:6e:37:ea:00:a0:76:b7:c5:79:08:50:7e:4a:cf:36:78:
         b1:38:ff:b0:cf:c2:89:21:cc:f4:28:a6:15:c4:67:1c:42:ea:
         37:cd:a6:d4:36:fa:73:73:af:a6:57:f4:4f:4f:46:4a:0d:c1:
         02:d4:75:0f:00:2f:13:1e:ba:8c:a9:cd:b9:4a:31:d9:7a:fc:
         8a:2b:79:61:84:e7:35:66:61:1d:37:4b:b6:f8:bf:b1:06:b4:
         69:76:5f:ac:56:df:08:32:8f:ce:1a:ed:6e:6c:56:90:d1:f4:
         2a:a0:0e:2e:33:f5:6f:77:0b:6f:a9:c8:21:e1:dc:31:cb:3c:
         c1:a6:d7:17:b7:16:5c:a4:88:3c:a5:ef:5a:6e:2a:7e:2c:05:
         81:db:5b:4a:4e:52:1b:3d:f6:7f:1d:eb:94:7a:8c:6b:e8:c4:
         ac:b0:9c:ac:bf:ab:c9:ed:d9:22:14:1b:89:5e:db:c7:5e:41:
         9c:39:f4:05:20:3e:3d:a1:49:fa:25:86:7a:bd:18:62:5b:d2:
         2b:f5:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:39:47 2026 by rpki-client