Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3139322e302f31392d3234203d3e20383334.roa
File:                     3139392e3233352e3139322e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          2XV2q2D7OUN2jh1ZNya1C+5SQRE4ZbxPisYmqZF0E1M=
Subject key identifier:   14:20:F7:60:DD:3C:A5:FE:3D:B4:9C:B4:FC:03:5E:88:9C:03:BE:69
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       551C5ED2524F28DA8753652D2CDC51ED1A2F0964
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3139322e302f31392d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1c:5e:d2:52:4f:28:da:87:53:65:2d:2c:dc:51:ed:1a:2f:09:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=1420F760DD3CA5FE3DB49CB4FC035E889C03BE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:60:74:04:93:e0:62:ad:68:f9:a6:ef:4c:
                    d1:12:76:c2:60:88:7f:a8:b3:1c:ff:42:92:4d:e1:
                    f1:17:06:c7:fe:c1:92:66:d7:f6:78:75:0d:91:df:
                    49:20:22:ee:6d:5b:07:69:6f:18:78:8a:ae:f7:5c:
                    04:f5:78:ef:59:be:d8:f6:4f:95:14:eb:5f:55:74:
                    bd:49:f4:4d:63:18:93:77:35:85:e0:a9:3f:a6:eb:
                    ad:2f:e3:2b:ff:01:79:90:58:72:6e:23:13:c7:da:
                    41:22:60:56:73:52:c3:a2:c6:b5:eb:0b:09:93:b9:
                    e2:8b:3a:40:41:b6:2f:8b:37:c1:b6:bc:72:34:21:
                    1c:8c:3f:31:22:a2:f5:40:ee:70:c9:2f:08:ec:e3:
                    a4:db:ba:4c:bf:7c:bb:12:7a:39:e6:c0:47:4f:93:
                    a2:66:e1:a4:66:a2:05:ed:d3:21:62:20:64:88:b0:
                    f9:04:03:1a:c8:1b:17:63:48:61:0f:a5:a7:c7:de:
                    a4:a1:5a:bc:d6:87:7d:d8:75:27:de:b0:04:24:7b:
                    da:84:b1:41:22:0c:fd:dc:e2:f5:e2:1d:dd:0d:c4:
                    b4:b8:1b:10:86:53:34:da:35:c6:69:89:b8:2b:5b:
                    12:c5:e7:b0:32:85:a3:7e:02:e0:33:8d:24:f5:9a:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:F7:60:DD:3C:A5:FE:3D:B4:9C:B4:FC:03:5E:88:9C:03:BE:69
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3139322e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:a1:e2:a5:cb:3b:d0:ff:a2:15:4b:e1:f5:bc:bf:7d:db:
         70:8a:19:a7:4e:a8:f7:a3:f6:09:57:1c:30:dc:81:8c:8f:b8:
         ed:e0:70:69:03:24:73:4e:e4:46:22:f2:28:a2:2e:18:84:13:
         f4:35:e2:05:b0:29:45:98:34:12:21:bc:06:7b:ea:23:14:86:
         62:de:5a:64:12:8e:84:14:55:56:94:e9:8e:19:a6:ca:26:b0:
         e1:0a:4c:46:ec:7a:45:9e:0e:57:45:3c:db:57:ab:1a:e9:2e:
         d0:5e:01:2c:29:25:19:7c:b1:41:fb:1b:c9:7e:0a:a3:18:0f:
         e4:5e:61:c9:68:7c:44:54:bb:b6:20:99:43:62:f2:c6:ca:0d:
         29:7f:89:3e:8a:00:99:29:c8:c7:4e:e5:85:92:60:3d:b1:59:
         ab:7a:b3:22:03:3b:ea:cb:5e:a6:50:11:6c:3a:b9:e3:0c:db:
         a0:76:90:ef:55:ad:77:70:11:a1:5f:15:28:c2:fa:87:59:8a:
         d8:e7:fc:23:eb:9c:20:fd:a8:15:85:df:98:d0:a4:29:50:8a:
         33:57:85:58:26:77:43:fe:e3:f9:3e:52:72:fb:a0:45:4a:fc:
         a2:90:cb:ba:2f:33:57:43:c8:ab:f7:98:6b:fc:5e:ca:e7:bb:
         07:c4:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:31 2026 by rpki-client