Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3131322e302f32302d3234203d3e20383334.roa
File:                     3139392e3233352e3131322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          pA2btBn6pjvH4+pWbKAcx3togSkObDXIzJMYlkirK6A=
Subject key identifier:   32:EC:21:D7:8C:27:95:53:3F:7E:A2:A3:C0:62:F3:15:D1:EC:E9:89
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       2D948D3DF61F55610C01F6CECAE60FDE90C62281
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3131322e302f32302d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:94:8d:3d:f6:1f:55:61:0c:01:f6:ce:ca:e6:0f:de:90:c6:22:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=32EC21D78C2795533F7EA2A3C062F315D1ECE989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:0d:1d:ff:cb:9f:55:72:10:d2:3d:8a:a5:
                    4a:33:96:7c:1a:88:bd:ff:1d:12:dd:ab:7c:e3:53:
                    9e:76:7a:a3:c1:dd:13:59:66:e1:20:f9:bf:c1:cd:
                    7d:4d:6e:50:f2:8c:46:3e:36:52:46:f5:8d:7f:f3:
                    0b:18:7f:c4:c2:ce:fe:e1:61:05:2a:9a:81:27:7e:
                    c0:e1:4e:a9:09:7d:4e:ab:e6:24:f4:8e:85:7e:23:
                    9d:ab:e1:c4:7e:77:83:f3:29:8f:9f:65:6d:cb:c5:
                    4c:6b:73:87:51:65:31:f6:2f:ea:63:e2:e4:7d:9c:
                    a8:5a:c2:cb:7c:e0:a2:e5:bd:7f:90:9d:6c:34:48:
                    4f:9a:a3:86:ee:03:b4:6d:a5:2e:3e:29:09:66:c5:
                    8d:ce:5d:5c:cc:02:8b:7c:d4:dc:4b:39:41:6b:ef:
                    3d:94:83:78:37:d2:50:73:3b:74:19:7d:04:6d:b6:
                    64:66:5b:4d:8a:0d:3d:a5:19:2c:7d:c4:fb:b5:8e:
                    78:86:05:21:bd:aa:ed:6e:08:39:d4:d3:fb:45:45:
                    de:6f:11:e9:25:a7:43:47:b7:69:0c:e3:7e:c8:aa:
                    3b:a4:0a:22:53:aa:c7:48:ee:f8:a2:0e:35:52:57:
                    98:95:c4:8a:3c:2d:49:1d:cf:e9:40:96:5d:18:23:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EC:21:D7:8C:27:95:53:3F:7E:A2:A3:C0:62:F3:15:D1:EC:E9:89
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3131322e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:b7:d3:76:01:c6:19:d7:55:f9:b8:d7:76:cf:9f:f6:3b:
         a3:ca:83:8f:71:6a:0c:51:58:9e:e9:3c:a7:ea:d3:5d:ed:db:
         18:86:0e:42:e3:12:c2:74:27:29:1d:f2:0a:98:ce:c5:5b:02:
         2d:f1:cd:23:df:23:7c:89:e7:8d:83:15:40:d7:77:4a:74:87:
         b4:27:4b:21:19:90:3f:7d:c3:7f:df:8a:02:35:4f:33:fb:56:
         35:0f:32:c1:8c:f7:67:63:f6:e0:bd:0b:d8:bf:9b:89:9b:74:
         9f:8f:bd:f9:45:7e:00:69:0b:f9:f4:03:82:1f:7a:7f:94:c2:
         fa:37:fa:3c:18:75:dd:16:be:af:f2:86:40:58:77:75:4c:8d:
         70:62:96:6a:d3:30:69:64:d1:47:44:96:cc:45:6f:dc:63:4a:
         b8:98:98:96:aa:ac:17:67:d3:ee:c9:3f:bb:23:f8:c9:77:bd:
         a8:92:cb:02:76:e2:31:34:3f:2b:01:d0:cb:31:3a:dd:b1:2d:
         e0:fd:c9:a7:03:72:ca:ae:92:07:8e:01:17:06:72:54:a2:e3:
         32:c0:51:04:50:7c:68:49:75:a1:ae:4a:80:33:ea:3d:c5:55:
         f7:44:30:ca:59:81:c5:02:66:9a:09:4f:5d:d6:f4:29:eb:ce:
         d7:8d:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:22 2026 by rpki-client