Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3133322e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e3133322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          EwncB0n/KV8zSypmYuYC9ac+Xiw3INpdHuMeuCCfT2k=
Subject key identifier:   C1:06:E7:36:40:C4:03:80:9D:E2:B9:85:B8:03:DF:95:39:5A:49:69
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       63892A6D1A5FAE3E46DD3420DF576A0979BE9536
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3133322e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 15:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:89:2a:6d:1a:5f:ae:3e:46:dd:34:20:df:57:6a:09:79:be:95:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=C106E73640C403809DE2B985B803DF95395A4969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:12:89:1e:e6:64:49:db:94:3b:d4:cd:df:
                    66:77:f9:53:95:18:61:1e:25:3f:57:b2:d6:76:b2:
                    5e:e5:1a:e7:32:9e:88:6b:ca:3e:a4:72:35:3b:0d:
                    3d:e4:8e:a3:68:7a:05:a1:e0:a8:3a:03:a3:f4:c3:
                    a6:ac:17:0b:96:24:d8:12:59:8c:f0:9e:ae:86:c8:
                    a9:2e:68:bf:d7:14:63:56:75:c7:09:ac:65:09:b2:
                    84:1f:26:d5:e1:49:ba:2b:12:a4:18:b7:58:7e:0f:
                    ad:40:7f:89:a1:76:cb:f0:ea:05:53:9a:a9:dc:48:
                    a5:82:63:de:f4:45:ae:cb:e9:12:28:f7:90:d7:40:
                    ba:56:db:4e:76:49:06:cf:42:48:26:a8:f2:19:37:
                    d3:8d:f3:a5:f6:ce:55:99:7e:bb:ea:23:5c:17:66:
                    35:d3:ec:0b:4c:46:f4:a6:17:30:fe:73:00:ff:28:
                    a6:77:02:9c:35:d3:77:44:2b:33:69:5c:ad:4d:5c:
                    fb:ab:e3:92:87:09:9d:32:f9:ab:17:6a:82:dc:8b:
                    b8:69:26:9b:75:36:1c:53:b5:e9:44:12:f9:7b:7d:
                    f3:3c:15:fb:28:8d:25:93:2f:f2:fa:65:8a:7d:8b:
                    11:62:c3:36:8f:c1:64:15:6d:75:0c:4b:47:2f:3d:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:E7:36:40:C4:03:80:9D:E2:B9:85:B8:03:DF:95:39:5A:49:69
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3133322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:10:0b:6a:53:cb:1c:42:7a:3a:af:4f:a0:66:c6:74:88:76:
         70:c6:64:bc:7f:76:a3:b2:30:dd:32:05:0a:3a:d7:7b:05:22:
         f3:06:42:5e:c0:04:37:d9:21:bc:65:1c:a4:98:7a:e4:e6:cb:
         f0:11:f2:6c:03:ba:d6:8f:60:14:c6:c7:b9:f8:bb:a2:6e:03:
         8c:c5:26:d2:d6:75:be:e4:62:73:9e:d4:fa:67:bb:69:41:af:
         63:d8:b6:f2:10:e7:60:28:30:aa:dd:3b:d2:8b:db:6b:d6:88:
         44:a3:8d:29:77:28:24:29:14:51:dd:ff:d2:d5:fa:c0:c3:bc:
         4d:cc:75:1e:f3:56:9a:70:e9:22:18:cf:b3:b8:e4:3f:b5:78:
         5f:36:c7:57:17:fa:54:2b:11:f0:b4:fc:cf:32:9d:73:01:e4:
         ea:0f:5e:69:41:7d:9d:5e:cd:15:a2:cc:6c:2e:3d:a0:1b:44:
         2d:2a:c2:6d:ae:a6:c4:25:cd:ae:96:8c:b1:98:f2:21:f0:e6:
         99:ba:c6:e4:60:a4:c3:e8:5e:eb:b5:fe:7c:d4:2d:06:ed:45:
         4a:0d:98:93:64:ff:f8:98:07:22:f5:92:06:27:8c:c9:7c:ad:
         d7:9c:13:22:a8:40:e2:40:b3:75:bf:24:4f:1c:b0:45:c8:e6:
         05:f2:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:05:27 2026 by rpki-client