Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e322e302f32342d3234203d3e203330303838.roa
File:                     3139392e3233352e322e302f32342d3234203d3e203330303838.roa (raw, json)
Hash identifier:          ri4yzDjQftKONCYXwxmQJOB1KDvxmmX3pzRtwKMb1uE=
Subject key identifier:   74:70:66:6C:51:B4:5F:E7:9D:22:A9:3B:5E:EF:EC:04:03:70:04:D0
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       699BB05982C59C470818C3B2A8C8734AF43182E0
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e322e302f32342d3234203d3e203330303838.roa
Signing time:             Wed 21 Oct 2026 08:17:31 +0000
ROA not before:           Wed 21 Oct 2026 08:12:31 +0000
ROA not after:            Wed 20 Oct 2027 08:17:31 +0000
asID:                     30088
IP address blocks:        199.235.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9b:b0:59:82:c5:9c:47:08:18:c3:b2:a8:c8:73:4a:f4:31:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Oct 21 08:12:31 2026 GMT
            Not After : Oct 20 08:17:31 2027 GMT
        Subject: CN=7470666C51B45FE79D22A93B5EEFEC04037004D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:8a:2a:03:41:ce:bc:7c:d6:4a:15:29:f6:
                    c9:05:9f:11:86:09:49:49:34:d7:25:c4:26:5d:76:
                    b0:0e:fe:e6:44:a0:dd:8f:4a:c1:6d:73:36:a5:4e:
                    4a:1a:3d:d1:4f:45:b7:5e:bb:64:b5:47:2b:10:77:
                    79:ba:93:50:1f:4f:55:1a:1c:c1:da:f2:8e:52:4b:
                    5a:ea:dd:d5:1f:a0:c1:f0:23:f5:62:a4:fb:09:33:
                    a4:ea:8f:db:83:6f:e0:1c:4d:79:a8:58:5e:0e:25:
                    a5:2d:0e:95:82:a7:18:a3:79:a5:90:cd:b7:f8:5b:
                    fc:06:52:62:b4:53:8b:9f:ea:eb:d2:af:73:ab:07:
                    be:e2:48:98:66:be:0b:6d:0d:69:be:28:63:f1:65:
                    9b:5c:3d:cf:ce:d2:92:3d:35:bd:fb:9d:40:0d:e3:
                    ea:3a:dc:4b:38:bb:09:9d:a1:5d:f1:54:25:57:b9:
                    5e:5f:c0:ea:97:26:7f:54:5e:81:97:ab:46:fd:2e:
                    16:2b:19:10:2c:98:ba:26:cb:23:91:f6:7d:e8:cd:
                    12:57:a7:a7:0c:95:dc:92:7d:b6:c1:0e:15:f2:1d:
                    8d:43:eb:e3:8b:ca:da:d4:cc:8d:97:a3:f6:c3:62:
                    a1:67:19:d6:15:28:5f:03:3b:92:5e:40:0d:d8:4b:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:66:6C:51:B4:5F:E7:9D:22:A9:3B:5E:EF:EC:04:03:70:04:D0
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e322e302f32342d3234203d3e203330303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:05:cd:a3:7e:11:a1:53:83:ed:eb:bf:b1:31:93:d1:99:cf:
         95:80:33:f8:bd:6d:e0:5b:5f:4c:b1:aa:ee:0e:96:15:eb:9f:
         e3:33:f3:c0:5a:49:e2:59:97:8e:d7:90:d2:80:0f:92:29:10:
         0e:a9:63:84:3c:e2:c5:17:fa:2b:d6:38:d2:3c:9f:dd:4c:f9:
         dc:2d:38:7d:e5:c2:37:2a:1e:56:59:b9:77:19:96:4f:31:42:
         9a:d8:f0:a7:1c:0b:2f:5b:3e:fe:22:b1:cc:e4:13:59:19:b4:
         df:3c:32:3a:8b:4a:e0:63:95:b1:15:db:6f:f8:ef:36:49:bc:
         4b:5f:54:95:44:6b:9b:d2:9a:9f:73:e9:a2:02:45:45:dc:d7:
         ea:04:b6:06:04:b6:ca:cd:ad:0a:21:6d:ab:0b:dc:77:83:4e:
         a0:f3:a9:38:55:9d:bc:4d:4a:ef:33:82:d8:49:9d:4d:59:57:
         52:e0:f6:04:cb:ec:33:af:6d:3c:a5:90:b9:2d:ad:56:90:86:
         86:7e:51:31:6f:86:2e:f1:42:17:c8:f8:cf:69:da:d7:9f:3c:
         3e:b4:8e:14:92:1b:0b:c7:28:bd:ae:63:0c:8a:be:21:d5:5c:
         64:ce:31:90:dd:a0:6d:9e:79:e6:74:6d:ec:52:b6:3f:5f:39:
         c8:f9:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:49:55 2026 by rpki-client