Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34302e302f32322d3234203d3e20383334.roa
File:                     3139392e3233352e34302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          FFtfHmC3uQJSJymgZ0ycJGJP1kaUTQahxeG5RIc6DX4=
Subject key identifier:   F5:DA:53:C2:8F:93:9B:6E:B4:BD:A4:E9:4E:C3:83:A4:A0:80:FF:44
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       5DA6157A9A2059A42FB0E84B46B5940AAC38A6C7
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34302e302f32322d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:15:7a:9a:20:59:a4:2f:b0:e8:4b:46:b5:94:0a:ac:38:a6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=F5DA53C28F939B6EB4BDA4E94EC383A4A080FF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:14:9d:ca:39:d8:81:df:c2:79:13:bb:16:
                    af:8e:6d:43:f4:69:a3:1d:b1:d5:0f:4b:ed:d1:d7:
                    7c:d2:5d:fd:8e:ed:05:3c:22:36:46:9c:1a:94:f2:
                    46:ea:18:31:a7:34:5d:2d:93:98:2d:14:99:4c:c8:
                    8e:00:26:9c:05:b1:9f:c2:4a:9f:db:89:29:22:a8:
                    bc:bf:9e:72:40:a4:ab:84:6a:fd:09:50:79:50:4c:
                    09:05:e9:f4:3c:d6:ba:17:c1:8c:e3:1b:ec:9c:68:
                    cf:80:76:33:35:b2:70:ac:e1:77:75:51:5e:c8:e5:
                    b4:df:6c:a5:79:91:a8:b8:05:ba:b4:76:a2:bb:a3:
                    e3:12:08:7b:ef:ec:72:47:6a:4b:61:66:ef:56:6f:
                    0d:f4:8b:16:4e:f4:81:20:7b:16:ce:e7:d8:c0:77:
                    ce:fe:a7:97:93:94:07:59:b1:c7:0b:ce:96:e8:e5:
                    14:a0:e3:8d:0b:6b:ab:38:42:40:dc:29:e9:15:ca:
                    57:d4:c8:9d:c4:eb:50:71:a6:a9:a6:35:55:67:11:
                    7b:1f:92:bd:ee:16:5d:4e:c2:c1:e0:74:37:32:68:
                    0b:74:85:c9:e1:f2:b4:f9:da:46:b2:95:1e:4b:51:
                    40:89:8c:0d:ba:60:e9:b1:08:c4:f2:11:fe:f4:e1:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:53:C2:8F:93:9B:6E:B4:BD:A4:E9:4E:C3:83:A4:A0:80:FF:44
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:e0:39:57:96:ed:bc:f7:20:dd:99:f9:c9:e6:c1:61:37:55:
         52:ec:96:aa:64:0f:c8:6e:89:25:3f:f3:18:3d:69:6b:c7:4a:
         ee:f3:bd:3e:ab:f1:25:8d:04:3f:48:42:10:7d:4d:61:5a:d7:
         5a:35:c7:d2:95:d0:a0:36:e5:e1:92:4d:10:35:fc:f3:1d:9a:
         ca:46:66:3d:26:0f:69:5e:9c:dc:42:d2:cd:47:b7:cb:0e:9b:
         3e:27:cb:61:65:26:70:8b:82:12:78:60:6a:32:b3:8a:7a:69:
         32:43:b9:34:83:3b:bb:f0:4e:a5:be:73:59:f4:8d:0e:96:12:
         70:f8:34:d1:77:ce:9c:d6:2f:72:c8:2e:44:4d:be:15:33:12:
         c7:85:aa:57:60:22:06:eb:07:76:ce:ce:b0:1c:2c:01:5f:bb:
         61:f8:82:86:90:ed:79:c6:71:10:e7:34:23:0a:60:66:13:95:
         69:df:31:18:14:27:4e:6a:a3:00:46:3a:51:9b:38:ed:a6:5a:
         2e:e2:6d:41:e2:c7:98:ed:62:1e:11:e5:d4:76:b7:f8:cd:79:
         59:f7:de:90:d2:2a:fd:9b:cf:22:a9:f1:41:a3:02:a2:81:75:
         a5:fe:56:d1:21:16:7d:08:ef:67:42:bc:51:31:7f:ec:06:48:
         39:39:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:17 2026 by rpki-client