Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e312e302f32342d3234203d3e203136323736.roa
File:                     3139392e3233352e312e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          AmBdTonHYKDcz0NAYa8MYcPnHr+UuXEE5utWZxnR1O0=
Subject key identifier:   E6:B0:0F:0B:BB:4F:34:44:82:53:F9:6E:56:2F:C2:8B:52:0F:70:1F
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       587BE1C8EC67FD6261F7F0D6DE21AFA87942821F
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e312e302f32342d3234203d3e203136323736.roa
Signing time:             Mon 26 Oct 2026 16:55:07 +0000
ROA not before:           Mon 26 Oct 2026 16:50:07 +0000
ROA not after:            Mon 25 Oct 2027 16:55:07 +0000
asID:                     16276
IP address blocks:        199.235.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7b:e1:c8:ec:67:fd:62:61:f7:f0:d6:de:21:af:a8:79:42:82:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Oct 26 16:50:07 2026 GMT
            Not After : Oct 25 16:55:07 2027 GMT
        Subject: CN=E6B00F0BBB4F34448253F96E562FC28B520F701F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ea:d4:76:58:e1:dc:51:d3:c6:4e:39:83:a7:
                    62:e3:03:d7:28:63:3d:e4:b7:d5:ac:a2:39:50:d2:
                    19:e2:20:7e:21:db:c0:6d:59:19:ec:d9:44:f0:8b:
                    7f:76:35:59:81:25:e8:0c:02:d1:cb:02:2c:a1:fe:
                    dc:67:6f:44:62:44:7b:3d:85:e3:7e:36:82:1c:a1:
                    5e:e2:ec:e9:81:69:cb:74:d3:f0:7b:4d:fe:dc:a1:
                    f4:4e:98:72:92:8e:1a:0b:db:a3:95:f6:82:9e:15:
                    72:9a:23:31:3d:b8:6e:fb:b0:3e:c9:f5:4f:49:4b:
                    75:74:43:5f:e9:9c:12:eb:03:dd:7b:47:6d:bc:d8:
                    fd:5a:91:96:0c:89:96:62:83:bc:c4:88:3f:a7:61:
                    54:da:92:ff:73:d7:99:db:df:ff:c6:d0:50:d0:12:
                    f0:7c:05:dc:c5:b7:1e:a1:77:56:63:02:c9:16:45:
                    7f:68:a6:29:ea:a1:d8:25:a7:33:42:a4:b5:bf:2e:
                    39:f2:58:49:64:06:a0:69:8a:ca:54:cc:2f:14:24:
                    4b:b5:1d:45:8e:62:a4:a0:19:80:0d:29:9c:42:11:
                    d2:79:c2:c2:b1:72:f2:a6:53:b3:51:d3:15:6c:15:
                    bd:5a:c8:a6:10:e4:23:6d:43:9f:f8:e7:5e:ed:86:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:0F:0B:BB:4F:34:44:82:53:F9:6E:56:2F:C2:8B:52:0F:70:1F
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e312e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:72:cf:e4:19:e6:5d:bf:19:af:a7:96:3a:e1:5a:80:5a:
         b2:c2:f1:2e:51:96:6b:51:8a:44:fd:47:09:65:da:e1:3d:13:
         ec:b2:40:98:e0:64:53:4e:98:1c:e4:eb:94:a7:9e:6b:57:37:
         68:45:93:3e:da:82:46:86:48:91:40:7e:c9:ac:17:d6:a1:ec:
         43:d8:b1:ff:f9:c0:42:45:20:fd:65:a6:64:50:d2:b3:ea:3e:
         40:0a:42:5e:92:d1:da:ac:63:7b:c7:00:77:3e:78:13:9b:1f:
         34:cc:b0:29:68:46:2a:29:99:b8:c8:e8:db:4e:7a:69:ab:0f:
         25:4e:c8:cd:0b:21:f7:83:98:0a:a7:74:75:fa:58:18:eb:50:
         0e:3a:3e:0f:45:f2:76:c2:be:d5:a8:3b:09:21:e4:c8:cd:df:
         ce:c3:13:bc:ef:dd:f1:5a:f8:5a:fd:6d:cb:c0:3f:da:18:4c:
         95:1a:e9:f3:28:f0:d3:f2:b8:40:da:cf:ad:f2:a9:87:34:9c:
         f1:e8:ff:fc:77:d3:a3:ad:45:36:b2:22:72:7d:3b:85:ef:30:
         43:e9:29:ea:b1:56:de:23:2e:d5:67:8e:5e:81:65:ee:26:b4:
         a8:2c:55:6a:b1:88:69:bc:a8:2d:8e:65:fe:c2:d2:5d:4d:b8:
         2f:e6:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:02 2026 by rpki-client