Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3234302e302f32312d3234203d3e20383334.roa
File:                     3139392e3233352e3234302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          VBLeUSVibMUTmuyWthyJz7isDroj6BTHZpVZ6ZOEsIs=
Subject key identifier:   73:65:B1:6B:C1:B6:5B:98:08:24:D3:9D:69:EA:62:02:FB:11:8C:5C
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       01D98D57B4F7AB49CB769E911DC50B57C6BA5CAE
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3234302e302f32312d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d9:8d:57:b4:f7:ab:49:cb:76:9e:91:1d:c5:0b:57:c6:ba:5c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=7365B16BC1B65B980824D39D69EA6202FB118C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:b0:e5:d1:c2:7c:c0:37:1f:47:a9:87:3f:
                    0b:3e:b5:4d:78:e5:33:aa:16:fe:bb:12:07:8b:a4:
                    8e:53:d6:5d:be:e3:5b:3a:14:39:bc:17:d7:24:9f:
                    35:6c:70:f0:6d:25:ce:f1:95:08:45:80:db:92:e1:
                    95:83:3d:fa:8b:df:51:d7:b7:ee:4b:cd:e4:0a:94:
                    7d:93:02:1c:d9:80:bb:3f:c0:a6:fe:7e:19:4f:25:
                    9f:4d:09:1f:66:76:19:e8:0c:8a:cc:f2:b9:b2:24:
                    24:14:97:3a:1a:87:23:28:0a:6f:f7:5e:09:17:f2:
                    c8:a3:85:da:ad:94:82:75:c8:38:ea:df:ff:bd:17:
                    f1:f4:4e:37:5e:fe:af:10:a7:75:87:19:16:2b:32:
                    96:a3:05:17:47:ca:73:e4:06:74:43:d4:f7:b1:8e:
                    af:f9:03:3f:33:70:e8:fc:83:bd:6e:e5:70:96:32:
                    74:48:84:c7:d9:c8:97:bd:5e:80:2c:1c:6c:8a:69:
                    6f:60:0f:1d:35:36:ef:cf:e7:26:6d:a9:a9:21:5f:
                    29:2a:d8:4a:29:0f:f3:f1:b6:df:79:8a:0b:ad:88:
                    fe:ad:e5:3c:af:4e:57:14:78:d3:23:20:de:14:2f:
                    8a:52:8a:99:92:b9:21:34:4d:30:0a:95:f3:12:0e:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:65:B1:6B:C1:B6:5B:98:08:24:D3:9D:69:EA:62:02:FB:11:8C:5C
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3234302e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:11:27:1a:d3:f4:34:59:6a:02:de:6e:f9:90:62:ef:2c:
         10:5f:c8:7a:40:ed:86:b9:3e:29:8a:3e:de:e3:36:e5:e4:a9:
         1d:7c:89:a2:b1:2f:29:8d:ea:ea:4a:e8:55:f7:d2:20:5a:23:
         a6:19:dc:7e:8a:d8:2b:75:30:c0:67:33:4e:42:a5:2b:c7:ca:
         99:77:bf:39:97:5b:3e:91:ed:e2:8f:0f:03:56:6f:55:0a:b5:
         3e:29:f7:14:98:7b:2a:5f:ce:7b:75:e7:23:e5:13:a2:0d:12:
         ff:c8:e2:9c:ad:31:67:96:dd:09:d9:26:77:c9:b9:69:fe:dc:
         1e:8f:8f:d1:81:9d:5d:aa:32:e3:36:73:5b:b5:7d:e5:77:68:
         51:9d:ff:77:f5:b1:f7:6d:fb:33:44:2a:5d:a9:ad:bf:a2:e5:
         de:3c:c1:e4:11:98:8c:56:ae:ce:f7:11:86:91:e5:cc:8b:af:
         8b:74:a0:4d:f6:46:68:6e:32:dd:2c:09:23:70:55:fa:5f:ad:
         11:93:68:63:bd:8c:d4:ba:03:73:f7:71:d2:f2:e9:b1:41:30:
         b5:08:54:f3:d8:a7:b6:7f:f6:5d:3f:9a:2b:6b:60:2a:b8:5e:
         41:e8:81:6d:46:67:b9:79:75:18:7a:d0:40:42:15:de:da:39:
         c4:31:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:27 2026 by rpki-client