Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e31362e302f32302d3234203d3e20383334.roa
File:                     3139392e3233352e31362e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          ynTi+DPxIdqSuYGsd0qXsCAWvosgC8w9JI6MpSePw6U=
Subject key identifier:   A5:C0:2F:30:A1:7A:E2:BF:72:AC:FB:12:B0:18:4D:56:FC:CD:71:6B
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       18276CE4B7C8271B143916A534AF86A4577112E9
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e31362e302f32302d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:27:6c:e4:b7:c8:27:1b:14:39:16:a5:34:af:86:a4:57:71:12:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=A5C02F30A17AE2BF72ACFB12B0184D56FCCD716B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:b4:b1:60:03:c7:53:e3:6a:0b:1f:87:21:
                    2c:91:59:ee:9b:7d:bf:c4:4e:cf:dd:f1:a5:63:4a:
                    7d:03:b1:6c:1a:22:a9:6c:2b:ed:2b:52:f8:1b:b0:
                    64:79:7c:fb:87:ff:50:3d:9e:69:f3:2a:66:2a:ef:
                    6e:32:3f:f7:32:90:43:a1:07:c7:44:3c:3a:f6:8b:
                    c3:d3:42:e4:54:71:5f:33:da:4c:18:59:b6:af:f8:
                    d6:9a:6c:88:12:15:75:d6:9a:7a:d8:dc:aa:1e:3c:
                    3d:0c:22:42:5e:16:c0:dd:49:f1:c3:cb:94:95:65:
                    1e:e0:26:5b:e7:76:cf:e8:f1:35:f1:6a:d1:0b:21:
                    65:e0:3e:9b:1a:f4:ed:c6:19:b1:57:19:cf:bc:80:
                    4c:7f:81:ae:bb:1a:16:cb:7f:5a:fc:1b:9a:ca:0f:
                    e4:c8:24:a6:33:f5:07:64:77:31:bd:36:9d:ba:ea:
                    f5:1e:5e:f1:7b:e1:15:ea:65:d2:00:2b:96:86:32:
                    52:cf:c5:3d:b8:5c:c7:40:a1:8a:35:be:52:3c:52:
                    f5:02:b8:9d:3e:c7:be:04:eb:40:60:ba:c1:d0:85:
                    d7:28:5b:7b:d8:68:30:bc:e7:5f:c6:5e:fb:36:d5:
                    c4:eb:71:1f:10:bb:af:b9:dd:fb:1e:cf:7c:6f:c3:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:2F:30:A1:7A:E2:BF:72:AC:FB:12:B0:18:4D:56:FC:CD:71:6B
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e31362e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:83:e4:8d:59:9c:2c:bc:87:c8:6f:b6:ea:70:23:fc:54:
         d8:a8:5a:3f:ae:49:47:be:36:56:46:fe:13:58:74:b4:d5:c1:
         70:2b:fb:23:a0:0e:fd:91:6b:26:08:7e:73:bb:5d:d1:b6:e2:
         f8:32:3c:7f:df:43:e0:7e:bd:0e:a2:83:1b:02:09:b8:b2:49:
         38:5f:97:54:9d:5a:6e:7d:e4:17:f3:65:3b:b9:c2:33:2f:fc:
         82:f7:6b:c2:e2:06:50:02:36:99:cb:0f:65:83:9f:43:03:5d:
         3e:e9:45:45:1a:7b:7c:8b:fd:56:34:45:11:ed:a2:af:c4:d8:
         91:81:cc:9c:71:11:46:46:83:dd:6e:63:4f:42:77:6d:07:2a:
         3e:68:1b:d7:a6:7d:20:4c:80:18:95:6a:73:aa:48:9c:9c:95:
         8c:39:07:73:35:77:0b:c5:68:17:84:5c:c2:6e:23:0d:38:95:
         86:49:36:2c:40:f8:0a:f1:f5:19:91:f4:8c:06:43:c8:fd:50:
         c7:12:0f:64:1c:9b:dd:80:76:91:15:67:85:ef:d9:52:da:a0:
         29:61:25:ae:ec:1b:d5:79:9f:d1:8e:75:83:1d:74:2a:1f:fd:
         70:79:d1:e9:8b:4d:98:07:fa:72:25:f6:14:56:23:55:41:19:
         dc:76:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 03:47:53 2026 by rpki-client