Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134362e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e3134362e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          Xo8Zk+do73+LXzymTr06pEyCoxSmYifLwBiu8qG6XYA=
Subject key identifier:   B6:DD:63:91:E1:2D:C1:60:76:50:94:FF:91:3F:63:25:12:B7:36:08
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       5C00E0CAE2439FBBB2F2472F7A0786AA8BEF1187
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134362e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:57 +0000
ROA not before:           Sun 27 Sep 2026 07:27:57 +0000
ROA not after:            Sun 26 Sep 2027 07:32:57 +0000
asID:                     812
IP address blocks:        199.235.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:00:e0:ca:e2:43:9f:bb:b2:f2:47:2f:7a:07:86:aa:8b:ef:11:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:57 2026 GMT
            Not After : Sep 26 07:32:57 2027 GMT
        Subject: CN=B6DD6391E12DC160765094FF913F632512B73608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:91:7f:c4:a4:f5:3b:f8:7f:66:32:98:03:
                    33:fd:be:3b:b9:56:dd:91:51:b2:ad:bd:0c:b4:8e:
                    d2:e9:a1:f8:56:ab:81:38:a5:51:d6:6e:8c:44:d0:
                    97:c7:21:37:60:ba:64:ca:a4:89:e7:1a:67:75:f9:
                    38:01:0b:05:e4:bd:81:c7:09:ad:99:7b:33:6c:25:
                    df:4b:c4:7e:9d:42:1d:98:54:a3:36:20:7c:6c:27:
                    c3:14:2b:c5:b3:c3:fe:a8:c3:87:6c:ec:4d:9a:28:
                    80:56:b2:dd:7b:cb:88:04:9e:83:64:bf:56:19:e0:
                    78:41:e1:de:67:72:84:d7:dd:5c:bc:63:f9:88:19:
                    f0:3a:32:d3:c2:06:90:a3:ef:9b:38:3c:a0:19:d3:
                    f9:47:e0:3e:62:e1:6a:b3:97:c5:d6:bb:93:8a:37:
                    51:90:17:7b:2e:42:da:42:95:e7:5f:c0:7f:da:d1:
                    5d:9f:bf:a4:00:4d:31:9a:3d:f4:47:cf:d1:9f:75:
                    ba:c5:13:b9:26:b1:5c:cf:e5:72:eb:42:cd:f5:e6:
                    bd:a1:a3:0c:4f:2f:af:c7:e6:d1:40:77:9e:01:1b:
                    1e:3a:0e:65:74:4b:ed:92:9c:ba:2c:c6:54:ea:c0:
                    5c:01:f8:e1:d1:26:f8:c8:d6:7d:03:05:e2:72:d5:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:63:91:E1:2D:C1:60:76:50:94:FF:91:3F:63:25:12:B7:36:08
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134362e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:d8:3b:6a:ae:fc:61:9a:17:92:97:85:19:75:ce:d0:04:
         b0:f8:a7:04:e3:51:e1:bb:e5:2d:ee:3e:ca:f6:51:27:45:13:
         59:59:e0:55:e4:63:b2:eb:f3:3d:7e:ad:eb:41:85:c8:4c:61:
         44:43:e5:52:21:b2:4c:25:3a:ed:e9:b7:f5:d5:16:ca:b6:61:
         e8:0f:0f:92:5a:ab:f0:c5:8b:d5:fb:45:97:77:97:be:04:45:
         20:b7:e1:08:a2:47:1b:ac:44:93:0b:72:3e:3b:d8:ac:a8:ff:
         26:5e:9e:47:cf:e3:d0:75:53:26:16:f8:18:6d:95:21:a7:10:
         fb:0b:ff:8a:55:50:b2:13:96:ca:d5:c0:71:c4:7d:30:ed:b8:
         72:12:f0:a1:8c:5a:d0:42:be:c5:4f:da:3e:c3:d0:9a:76:07:
         a3:07:90:1f:3d:45:a3:43:e6:06:a9:3c:9d:12:2b:2d:6f:46:
         d0:a6:5b:70:5e:32:65:0d:7e:8f:6d:38:3e:ec:c9:ab:b0:5a:
         74:2b:1a:74:02:c9:ff:78:04:d9:4f:20:31:c4:f3:70:14:80:
         f4:a9:66:0e:3b:ae:08:e8:c5:0c:71:09:72:56:a0:5f:1b:28:
         02:54:72:f5:3b:ed:b9:25:a9:4d:60:83:f0:7f:0c:83:a7:d4:
         dc:07:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:44:23 2026 by rpki-client