Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3232342e302f32302d3234203d3e20383334.roa
File:                     3139392e3233352e3232342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          QmR8eYESwdpIuo9ZBIgEUvVHoFyrnzUvNwsdrzEyxXE=
Subject key identifier:   A2:11:EE:98:84:7E:9A:73:96:56:90:C4:11:BD:73:F8:75:58:8F:4E
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       2DE20FFB319D1178B19396070867F860B72E4A24
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3232342e302f32302d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:29 +0000
ROA not before:           Sun 27 Sep 2026 07:28:29 +0000
ROA not after:            Sun 26 Sep 2027 07:33:29 +0000
asID:                     834
IP address blocks:        199.235.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e2:0f:fb:31:9d:11:78:b1:93:96:07:08:67:f8:60:b7:2e:4a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:29 2026 GMT
            Not After : Sep 26 07:33:29 2027 GMT
        Subject: CN=A211EE98847E9A73965690C411BD73F875588F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f2:8a:5a:fe:70:37:e2:57:86:e7:ab:38:e2:
                    66:83:4b:d8:cb:27:ce:a9:8f:23:8e:18:96:60:3d:
                    19:bd:9e:33:5d:ea:d8:da:08:9e:03:d7:65:59:92:
                    12:b1:9b:05:80:3c:61:10:b7:cc:52:b9:65:a5:0b:
                    54:89:39:4c:0b:93:df:ec:6f:37:8f:09:3c:d7:99:
                    c9:ae:d5:55:6a:79:0e:7b:6a:0b:0c:24:7e:ef:de:
                    88:35:66:d6:ba:34:a4:3d:71:9a:09:e7:81:3b:51:
                    b9:b2:7c:af:a8:6b:c1:f1:1d:d2:44:85:b8:70:8f:
                    4f:f8:5f:28:69:3a:ae:29:98:d7:6a:05:de:85:c4:
                    45:3d:2a:bc:cb:65:57:6c:25:74:0e:a2:0f:03:8d:
                    12:c5:db:ef:c5:90:fb:8d:fb:b9:65:c1:3a:79:e5:
                    8d:f3:e2:d5:e7:31:15:b7:e8:b6:a1:5f:81:98:1f:
                    68:5f:f1:ce:da:e2:ce:cc:22:58:fd:6a:9e:1b:28:
                    2b:0f:48:02:1b:07:d3:8f:9a:ad:e7:53:df:d1:8d:
                    d1:ed:5c:02:44:99:ad:b6:c9:1c:9a:ab:61:6d:17:
                    22:fc:7e:ad:8d:d0:8e:6a:68:62:8b:8d:f2:88:f5:
                    48:33:f6:65:99:8d:67:c4:cc:69:51:5e:33:78:7d:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:11:EE:98:84:7E:9A:73:96:56:90:C4:11:BD:73:F8:75:58:8F:4E
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3232342e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:62:3a:5c:02:49:32:02:a6:4f:0c:69:87:93:dd:0e:e1:
         09:df:fb:c1:d0:8a:8f:d7:c0:ef:8e:c9:a2:0b:8d:7a:54:60:
         76:2a:c5:8e:0f:7e:b9:7d:e6:b6:82:f3:aa:d6:49:4e:54:0d:
         82:d2:39:eb:f9:a6:53:cc:4d:ba:dc:48:41:06:f0:a3:63:bc:
         4b:f0:47:4f:bf:42:22:4d:0a:76:04:78:ff:09:68:a3:af:d9:
         a5:77:74:15:91:07:9d:a6:9a:db:7c:46:b6:84:19:e3:2a:ff:
         7f:09:0f:1d:d2:33:3e:7d:b7:40:71:63:95:8d:9d:04:a7:36:
         b2:ea:55:81:de:a4:20:1d:94:2e:f2:7c:5e:0b:2c:c8:f9:01:
         f7:43:c7:e2:db:e8:b2:ab:3e:62:c5:cc:40:92:0a:56:10:83:
         46:9a:98:93:9a:b8:31:cb:d2:cf:92:46:d7:f1:d5:34:99:dc:
         65:08:75:01:46:44:e3:4c:7a:1e:e5:4f:f3:97:f1:6e:50:32:
         fd:b9:72:b4:74:2f:02:e6:d5:4d:f2:2b:e2:32:4f:4f:a4:4f:
         7e:30:5a:03:e2:0b:d6:fb:24:dc:93:bf:1e:e7:7e:66:5c:ae:
         cb:68:4c:14:1e:95:67:ec:48:72:f9:07:50:80:fd:3f:2b:6a:
         49:de:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:21 2026 by rpki-client