Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134302e302f32322d3234203d3e20383334.roa
File:                     3139392e3233352e3134302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          6SX5XNGVWoGHEmr7SHeDmfXXiLWMQBY5gMaV1RrE+Q4=
Subject key identifier:   F7:9C:AC:63:5C:74:62:3F:E5:11:31:7C:BA:E4:6F:8D:D6:96:2A:4A
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       329547BA460DB4B7E0A17162DB86901CA20B1DC8
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134302e302f32322d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:95:47:ba:46:0d:b4:b7:e0:a1:71:62:db:86:90:1c:a2:0b:1d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=F79CAC635C74623FE511317CBAE46F8DD6962A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d6:f8:53:18:dd:83:be:c2:81:fd:7e:3f:35:
                    f2:05:d4:e9:fb:40:9d:a3:68:6c:c1:7a:f2:df:4c:
                    f9:fc:be:2b:2c:33:f4:72:27:29:60:45:92:33:53:
                    12:f2:8d:87:4a:43:34:d1:c6:dc:52:59:77:2d:35:
                    1e:de:80:1f:a6:7d:40:21:60:d5:d3:97:0f:87:1d:
                    bc:70:97:11:e8:88:c8:db:85:eb:71:d3:ce:7a:6f:
                    f0:89:fb:c3:8f:34:30:a7:c9:27:66:9c:78:2b:cb:
                    11:f4:59:17:dd:1d:42:d0:ec:d4:ca:62:9d:1e:71:
                    76:19:73:35:32:d2:a9:81:9e:64:ab:0b:ee:e3:b6:
                    f8:58:a9:ff:1f:fd:e3:03:90:72:99:ce:c6:d1:a3:
                    83:27:94:19:c9:bf:40:6f:88:6c:ec:41:cf:d0:8f:
                    81:61:a5:b0:8a:24:d7:a6:3b:80:49:7d:7c:87:9c:
                    f7:74:87:76:03:36:5f:0e:99:c1:b9:61:33:15:13:
                    84:f0:4c:44:7a:39:53:9e:b5:31:02:d0:d6:48:32:
                    b1:57:41:c3:e0:a2:8b:9f:14:7c:21:5b:63:cd:ac:
                    dc:a3:56:1c:73:95:d7:d0:6f:a9:67:59:e8:5e:e6:
                    dc:67:dd:45:47:0f:61:c3:46:ae:57:89:52:7e:46:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9C:AC:63:5C:74:62:3F:E5:11:31:7C:BA:E4:6F:8D:D6:96:2A:4A
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:37:c8:ab:79:4e:ba:c6:a7:70:ab:c1:4c:a3:06:64:64:f8:
         f6:c1:67:d3:9d:ad:0d:d1:43:29:76:10:98:32:f6:95:70:a3:
         f7:fd:84:b4:a4:8d:5d:26:b9:ca:5d:bc:eb:be:63:50:82:25:
         b7:82:a6:d4:7c:c2:3a:f9:f4:7f:a3:ed:1b:7e:2a:8c:02:6b:
         43:95:dd:8e:49:5e:d8:1b:cd:32:81:0f:1c:78:a0:be:7b:05:
         06:53:dd:44:21:88:af:38:30:31:81:f3:7b:f1:8b:1a:17:72:
         d2:52:a6:48:16:6e:c8:c8:f7:a9:54:85:49:b5:6e:ef:5f:cd:
         f2:6b:b5:91:9b:23:b8:78:0c:d3:64:8a:9e:03:88:bf:51:2e:
         0d:b0:c4:ee:46:c3:c9:8d:50:cb:98:b1:5a:16:f9:42:1a:e0:
         98:9a:ed:d7:9f:11:de:67:a2:9d:9a:16:fc:67:c7:e8:9d:d1:
         66:f8:f6:15:87:65:ff:ff:df:e2:02:89:6e:7a:3f:a0:95:72:
         9e:da:d6:49:75:ad:12:e9:00:25:63:94:d8:0d:0d:84:ed:d6:
         a4:9b:2c:b0:40:54:79:a0:79:12:6c:99:1f:5f:a7:0b:fa:ea:
         ae:99:db:37:fe:cd:85:98:01:78:ec:58:f4:a1:02:29:ad:fa:
         d1:97:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:26 2026 by rpki-client