Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34362e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e34362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          nImih9ABR7qfYVSYw8fIQf1qkMRWV4d+/HDox4yB6aM=
Subject key identifier:   0C:BB:03:F6:EA:CA:B1:E9:80:55:A7:A3:0A:86:DB:1C:C6:A3:69:FF
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       4F4AD16E8135DE4112569CA4E48DB67AFC68B6EE
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34362e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4a:d1:6e:81:35:de:41:12:56:9c:a4:e4:8d:b6:7a:fc:68:b6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=0CBB03F6EACAB1E98055A7A30A86DB1CC6A369FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:73:4d:c6:8a:bc:2a:db:9c:05:8b:95:9f:
                    58:83:6f:b3:71:67:3e:20:e8:6a:14:42:92:e1:ee:
                    66:a7:7b:be:6f:a2:dc:13:fd:80:82:9a:fd:ca:f9:
                    bc:ac:28:1c:5c:af:09:c2:d5:bd:f1:eb:16:24:a1:
                    db:4d:7f:28:93:da:3f:d6:a8:70:b4:cc:27:9e:e5:
                    6d:41:16:c3:86:39:c0:e4:a0:dc:a3:3d:1c:54:0a:
                    d3:7f:c6:05:95:93:e6:92:af:87:10:ba:f5:5e:5d:
                    93:11:cc:00:c4:4d:7d:d8:95:21:68:31:08:d9:0b:
                    2b:00:f0:62:ba:92:28:a0:a6:f5:9d:fc:39:f0:4a:
                    ed:0d:51:2f:8b:81:76:a0:b7:d5:16:e9:39:77:8f:
                    f5:8e:4d:01:59:34:34:43:f7:54:79:83:0c:95:3d:
                    67:0f:e4:97:61:cf:a1:e8:c8:25:1e:a6:cc:2b:59:
                    4c:30:82:b5:dd:3d:9c:f8:f1:85:87:b4:1f:03:fe:
                    77:5a:4d:fd:6e:54:72:88:9f:0c:36:06:b1:cf:2b:
                    6c:60:a0:db:ae:e1:ba:fe:6d:07:82:14:fd:63:ec:
                    53:2d:15:23:8f:28:e3:0a:4a:d1:31:54:bc:1a:0e:
                    40:9a:fb:b4:41:ac:0a:81:24:f0:cf:5a:0b:40:21:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BB:03:F6:EA:CA:B1:E9:80:55:A7:A3:0A:86:DB:1C:C6:A3:69:FF
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:47:ff:74:e0:03:80:db:20:ab:af:a3:1d:fd:db:c3:32:de:
         47:71:e3:6d:b9:e0:29:15:6d:6c:b7:3e:dc:1e:f0:4f:8c:a6:
         98:96:bb:00:7c:4e:5b:fb:62:d2:dd:e9:e4:e1:7d:02:dc:0e:
         d7:40:55:bd:b4:cd:9b:4c:b4:67:d7:ca:64:c2:59:98:c1:dc:
         79:e5:c9:dd:bc:57:ff:56:7e:5a:9b:aa:4f:63:85:77:85:e1:
         b5:2e:83:21:7e:27:72:5a:c2:b0:3d:bb:ef:71:4c:30:d5:5d:
         77:44:75:d2:70:86:5b:2f:cf:6d:c3:34:f9:e0:17:b6:89:db:
         a2:2c:69:83:aa:ff:2e:06:9c:c2:2e:c3:02:b9:17:cc:83:68:
         25:d7:10:11:a9:fd:85:90:5f:2a:8d:04:84:08:41:d2:06:ba:
         4e:d3:a5:3d:62:b9:a4:cb:b3:31:17:9e:18:fb:d6:28:62:b2:
         ca:e7:a5:33:63:4a:f3:0c:dd:ef:c6:58:a8:06:ee:52:7b:cd:
         ed:0f:5d:53:09:32:1e:90:9c:e6:b5:55:64:fe:ea:c6:1c:ba:
         3a:72:43:27:75:df:ee:1d:d0:00:0c:42:54:b4:b7:0e:73:4b:
         94:bb:16:71:b3:9e:2b:f3:97:fb:93:80:95:19:96:61:27:76:
         1d:81:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:08 2026 by rpki-client