Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235352e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e3235352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          W8znbzPnI/fnQQPCpRrYXgXczmGz/8Ij4a4K37b9ZRw=
Subject key identifier:   EC:51:A1:82:A9:8F:8E:F2:E2:CF:B0:55:27:B5:81:5B:05:E4:6D:83
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       051710FC241A8EC115AF772510FC0FACEE16D3F8
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235352e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:17:10:fc:24:1a:8e:c1:15:af:77:25:10:fc:0f:ac:ee:16:d3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=EC51A182A98F8EF2E2CFB05527B5815B05E46D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ac:d1:5e:d0:2f:02:7f:91:a6:12:14:f9:2b:
                    f7:fb:3e:5c:7c:87:3f:e0:d2:f3:e7:11:aa:ff:6b:
                    6b:34:22:6b:20:a6:b1:d7:b0:70:31:f0:ae:06:58:
                    8a:24:0a:67:fa:ea:33:0d:c2:6a:9f:8a:04:99:88:
                    36:ef:9d:0f:d0:c4:9c:9e:24:f4:d8:18:22:32:dd:
                    6e:9b:0b:b5:f8:a2:a1:a9:49:19:93:af:dd:09:1f:
                    a0:0f:b4:59:06:18:45:d5:9e:f0:dc:6a:e9:b7:9e:
                    1d:1f:91:ae:d9:61:5e:23:c9:11:a1:b8:21:3e:9c:
                    1f:5e:25:70:94:34:78:a5:0b:cb:67:28:ae:d2:b2:
                    b0:f7:e0:8c:f8:47:32:74:92:6f:7c:2a:40:1a:8d:
                    25:27:58:ec:32:45:a2:91:a3:12:4f:ab:5a:5a:d6:
                    49:03:95:14:8f:43:38:c7:66:81:3c:25:72:a2:36:
                    5c:1c:60:a0:ed:22:69:5c:4e:c4:0e:f1:64:71:56:
                    82:ab:22:fe:8b:f0:77:59:2a:c1:23:84:5d:ea:95:
                    9e:56:4f:de:30:8e:14:c0:a5:ef:db:1a:cf:71:e9:
                    e9:a9:f6:28:f4:8b:51:08:fc:fc:cd:54:24:2c:28:
                    56:39:93:6f:fe:c3:10:bb:dd:d3:83:d4:69:7d:f0:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:51:A1:82:A9:8F:8E:F2:E2:CF:B0:55:27:B5:81:5B:05:E4:6D:83
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:57:66:91:55:22:66:a5:a1:66:e2:4f:9f:cc:d8:fb:cb:e9:
         5d:47:0f:09:4d:66:bf:de:23:1d:91:0b:4e:d8:f4:67:9e:0e:
         7e:54:0d:0c:73:48:ca:d0:0d:da:d3:85:13:ef:d2:eb:8a:3b:
         36:52:e6:0c:eb:50:48:0d:c4:b2:6b:b7:ba:cb:43:f2:b7:c5:
         bc:ca:91:a1:58:0d:5d:80:12:5d:0c:d1:c0:13:5f:07:96:43:
         4e:c1:ef:71:82:1c:98:39:67:3d:45:0f:28:b3:d3:e0:2d:54:
         41:d8:b7:38:67:bb:f7:4f:41:81:c3:a0:79:05:4a:42:eb:96:
         91:bd:a0:c4:da:61:75:83:d9:43:ff:57:6b:26:54:9b:a2:4c:
         92:aa:e8:bd:eb:da:31:c6:b4:72:fc:bf:12:24:40:73:ba:6e:
         31:3e:bb:7d:93:30:08:85:cc:11:4f:56:84:e5:29:b3:6f:6b:
         23:10:0d:c5:99:a6:1e:82:92:1a:6b:05:99:d0:f6:09:04:be:
         d6:cc:d3:51:ca:b2:c7:1b:f4:a6:af:5a:1d:e4:e7:37:14:84:
         df:eb:19:73:eb:5d:9e:f2:d2:ab:50:ed:92:0f:19:3e:c4:be:
         21:a8:8f:39:fc:e9:92:c8:4b:3e:0f:fc:3b:73:92:e3:52:91:
         f2:a3:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:25 2026 by rpki-client