Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130302e302f32322d3234203d3e20383334.roa
File:                     3139392e3233352e3130302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          oWcX4EgOPt0jxWecDvdGM8hktoUkyGC1AzysUfgeAZA=
Subject key identifier:   F6:52:09:7F:C9:36:6E:8F:49:72:94:C2:31:3B:E6:DD:5E:83:92:D2
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       641512E87684AF6D087CDED4E4C9CCE25E5A611C
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130302e302f32322d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:29 +0000
ROA not before:           Sun 27 Sep 2026 07:28:29 +0000
ROA not after:            Sun 26 Sep 2027 07:33:29 +0000
asID:                     834
IP address blocks:        199.235.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:15:12:e8:76:84:af:6d:08:7c:de:d4:e4:c9:cc:e2:5e:5a:61:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:29 2026 GMT
            Not After : Sep 26 07:33:29 2027 GMT
        Subject: CN=F652097FC9366E8F497294C2313BE6DD5E8392D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:5a:7d:b4:06:65:0c:03:e5:b0:f7:8f:8e:
                    5d:97:61:4b:14:0c:74:58:96:04:d5:df:da:02:3d:
                    79:e3:33:e9:5d:c6:9a:14:b3:2d:da:06:57:73:40:
                    8f:51:a9:74:f7:c3:36:c9:67:e6:75:2d:29:9a:8c:
                    6f:82:1d:06:6f:02:72:3f:83:9b:de:14:c1:83:e1:
                    af:88:30:e1:a2:51:cc:15:72:f3:a7:e7:c0:f6:9f:
                    1c:42:72:28:d1:b1:c1:84:f3:04:57:f3:9a:bb:3a:
                    93:f4:ba:3f:12:34:08:36:20:72:81:7e:64:82:2f:
                    87:c5:cf:aa:6f:72:26:a8:d5:90:4b:36:23:cb:0e:
                    d6:b2:ea:c5:10:03:aa:6d:c6:a0:e1:66:46:53:08:
                    7e:a6:4c:21:b3:6e:13:b9:2a:21:5c:55:16:14:46:
                    a9:0d:ed:0f:e7:bd:d6:75:5a:61:ff:1d:1c:64:39:
                    94:57:01:31:99:36:13:0c:32:45:82:eb:34:d5:59:
                    ff:a3:a5:cc:a5:7f:ec:e3:a5:19:1a:e8:c4:3b:01:
                    ce:d8:f2:63:fd:42:e9:2b:41:69:ff:7b:9b:bc:36:
                    43:e2:fe:ae:4a:a2:57:3b:24:4c:3f:5e:ba:56:98:
                    07:a8:cd:da:6e:ce:06:7b:ac:fe:29:71:db:50:dc:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:09:7F:C9:36:6E:8F:49:72:94:C2:31:3B:E6:DD:5E:83:92:D2
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:ac:50:9c:5f:40:8c:31:e9:87:0a:ce:7e:b2:75:f5:c1:
         49:6b:72:a5:4b:8a:05:4d:1c:e5:85:d9:28:df:7f:35:5e:b9:
         14:c9:a7:f7:12:5f:4b:bb:f3:ec:0f:83:65:12:75:17:ca:23:
         17:96:53:04:fa:98:35:94:3b:48:5b:2c:af:9e:d8:f9:37:27:
         9d:3e:fc:3d:6e:e0:3e:6d:f9:9e:6e:69:13:39:ff:34:94:96:
         bc:51:41:0d:94:8f:ed:72:d7:e5:94:36:1b:a3:ee:bc:94:cb:
         f8:1a:72:d8:a2:1d:64:05:07:6e:3f:20:05:99:04:61:c8:61:
         52:c5:f2:c3:85:4c:73:5a:8b:c2:6a:ca:4f:b7:fb:13:36:15:
         f4:a0:8b:18:e7:39:ab:4c:cb:f4:42:ba:1f:0e:3e:d4:b1:07:
         c2:39:7d:f6:21:c2:a5:27:85:7c:01:42:59:6e:af:46:aa:bd:
         1d:c2:4c:cc:6b:49:fc:05:fb:98:8a:f6:0a:3a:8c:78:69:e0:
         db:8c:a7:a0:fc:89:91:0f:4b:8d:8f:a0:4a:d1:85:13:79:9f:
         fc:34:46:13:ba:32:48:4b:b1:27:93:94:0f:ff:19:cf:21:52:
         e2:a0:2f:ea:22:7a:cd:10:a7:e8:ff:67:94:93:c8:90:33:55:
         7e:86:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:55 2026 by rpki-client