Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3136302e302f32342d3234203d3e20313532373236.roa
File:                     3139392e3233352e3136302e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier:          gk5+00ZK1KKDl7Z6UxmHK/x5JjDOEeUbZE6yfKN8jDE=
Subject key identifier:   CC:0C:2D:74:1F:DC:F6:C6:82:20:9D:A8:86:FF:69:E4:D1:B3:F4:35
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       686CF8D38506C192CCC1DF099ACE1448E3C2AEE2
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3136302e302f32342d3234203d3e20313532373236.roa
Signing time:             Sun 04 Oct 2026 12:53:21 +0000
ROA not before:           Sun 04 Oct 2026 12:48:21 +0000
ROA not after:            Sun 03 Oct 2027 12:53:21 +0000
asID:                     152726
IP address blocks:        199.235.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6c:f8:d3:85:06:c1:92:cc:c1:df:09:9a:ce:14:48:e3:c2:ae:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Oct  4 12:48:21 2026 GMT
            Not After : Oct  3 12:53:21 2027 GMT
        Subject: CN=CC0C2D741FDCF6C682209DA886FF69E4D1B3F435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:6a:76:fd:40:39:46:37:d8:67:be:97:7b:
                    bd:bb:2a:ec:f8:c4:f7:9c:17:63:30:61:de:cb:d6:
                    17:ec:28:b1:fc:19:39:c4:b8:9c:ce:5d:d0:3d:56:
                    f3:b0:fc:93:c9:f3:ba:30:86:1e:0d:e2:cf:a3:b7:
                    f6:83:b7:0f:72:dd:c1:d1:d4:a2:26:18:c9:46:b2:
                    e7:4e:d1:af:87:a0:24:ce:37:77:dd:00:16:cf:fa:
                    b6:fb:ac:05:16:82:74:30:8e:9a:7f:96:c4:14:d8:
                    ea:c8:da:41:3e:2a:d5:78:b8:7a:55:67:72:9e:8a:
                    0e:7a:89:fb:b5:e8:26:57:84:7f:cf:4f:4f:f2:fa:
                    06:a3:be:2f:0a:48:2f:b0:fe:8e:1c:44:5d:18:b6:
                    cb:03:dc:95:30:fa:2d:25:70:a0:ef:16:e8:76:5a:
                    ef:48:1c:e7:07:66:0c:23:d7:92:62:da:5a:2a:37:
                    4a:9d:2e:d0:28:c5:6a:d7:c9:de:d7:86:81:6b:68:
                    7c:13:ce:70:4e:6c:f7:0b:c3:1e:8c:b4:4d:dd:b9:
                    46:37:bb:7d:1d:6a:c8:84:0e:f8:29:02:ba:4b:68:
                    44:0a:e9:1c:c2:20:c4:88:f1:f1:ab:d3:3b:07:4b:
                    ff:65:6c:51:9d:a4:51:cd:9a:79:b1:5f:c7:be:90:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:2D:74:1F:DC:F6:C6:82:20:9D:A8:86:FF:69:E4:D1:B3:F4:35
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3136302e302f32342d3234203d3e20313532373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:5a:75:ab:17:5e:15:f0:23:ae:cf:a6:38:2b:f8:d2:1f:
         97:86:91:de:5d:17:ef:bd:6f:81:90:c9:9a:57:39:02:1f:9c:
         9c:48:35:a7:c3:52:77:12:2d:b7:b9:d1:6a:9d:97:28:20:b4:
         52:96:da:7b:d5:59:33:58:1c:a6:2b:69:61:a5:27:7a:8f:fd:
         eb:e2:4f:b0:d6:7d:df:93:69:3a:f7:13:b3:50:e2:b0:2c:34:
         9e:c7:cf:73:b2:2e:bf:bc:7d:2a:a0:5d:a8:b7:55:a6:d9:35:
         1d:a7:d5:31:7f:a4:bd:c9:5c:48:9e:ae:2e:b2:47:d9:92:78:
         42:38:f1:25:ec:83:0c:18:7f:67:77:bd:bb:90:34:b5:83:86:
         e4:2c:fd:8b:cf:d7:66:22:e7:54:4f:88:32:2f:29:7d:15:4b:
         65:39:28:2e:a9:46:f7:21:26:27:ce:b5:d9:6e:6c:16:01:69:
         55:5d:91:c8:09:20:25:3f:1d:40:65:49:45:e9:f5:4e:f0:b6:
         5e:8b:38:12:c4:ce:db:29:94:2c:cb:90:74:3e:5f:9b:8f:36:
         a1:35:0c:a8:e1:79:07:83:fa:2e:b1:c4:8d:62:61:a1:55:67:
         3e:f6:8b:e5:62:64:8d:52:d2:de:56:20:58:a4:a6:e7:a7:a3:
         fe:06:9b:b6
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUaGz404UGwZLMwd8Jms4USOPCruIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYxMDA0MTI0ODIxWhcNMjcxMDAzMTI1MzIx
WjAzMTEwLwYDVQQDEyhDQzBDMkQ3NDFGRENGNkM2ODIyMDlEQTg4NkZGNjlFNEQx
QjNGNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c1qdv1AOUY3
2Ge+l3u9uyrs+MT3nBdjMGHey9YX7Cix/Bk5xLiczl3QPVbzsPyTyfO6MIYeDeLP
o7f2g7cPct3B0dSiJhjJRrLnTtGvh6Akzjd33QAWz/q2+6wFFoJ0MI6af5bEFNjq
yNpBPirVeLh6VWdynooOeon7tegmV4R/z09P8voGo74vCkgvsP6OHERdGLbLA9yV
MPotJXCg7xbodlrvSBznB2YMI9eSYtpaKjdKnS7QKMVq18ne14aBa2h8E85wTmz3
C8MejLRN3blGN7t9HWrIhA74KQK6S2hECukcwiDEiPHxq9M7B0v/ZWxRnaRRzZp5
sV/HvpBD4wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMwMLXQf3PbGgiCdqIb/aeTR
s/Q1MB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMTM2MzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzNzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH66AwDQYJKoZIhvcN
AQELBQADggEBAFfQWnWrF14V8COuz6Y4K/jSH5eGkd5dF++9b4GQyZpXOQIfnJxI
NafDUncSLbe50WqdlyggtFKW2nvVWTNYHKYraWGlJ3qP/eviT7DWfd+TaTr3E7NQ
4rAsNJ7Hz3OyLr+8fSqgXai3VabZNR2n1TF/pL3JXEieri6yR9mSeEI48SXsgwwY
f2d3vbuQNLWDhuQs/YvP12Yi51RPiDIvKX0VS2U5KC6pRvchJifOtdlubBYBaVVd
kcgJICU/HUBlSUXp9U7wtl6LOBLEztsplCzLkHQ+X5uPNqE1DKjheQeD+i6xxI1i
YaFVZz72i+ViZI1S0t5WIFikpueno/4Gm7Y=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:32 2026 by rpki-client