Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35312e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e35312e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          HU7nWhEsADoEPyLapwZHTQtUGDIIACDIz8XGYj+YwMw=
Subject key identifier:   96:81:5A:79:3D:23:DA:8C:02:24:82:D9:0E:78:93:18:9F:E5:44:B9
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       0C24BC330B5E8623EC28C8F3BA6A4B4814827015
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35312e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:55 +0000
ROA not before:           Sun 27 Sep 2026 07:27:55 +0000
ROA not after:            Sun 26 Sep 2027 07:32:55 +0000
asID:                     812
IP address blocks:        199.235.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:24:bc:33:0b:5e:86:23:ec:28:c8:f3:ba:6a:4b:48:14:82:70:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:55 2026 GMT
            Not After : Sep 26 07:32:55 2027 GMT
        Subject: CN=96815A793D23DA8C022482D90E7893189FE544B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a4:8b:2c:00:e8:a8:3e:a9:45:0f:12:1d:7e:
                    3e:17:43:2a:c7:4d:ee:03:09:69:52:a3:6c:b8:a7:
                    33:b3:a9:33:25:eb:43:93:13:c5:ae:96:c9:e0:78:
                    ff:48:91:9b:35:98:1a:a7:3f:67:e9:b7:d7:da:42:
                    dd:24:32:e0:ee:4f:9d:f6:19:d3:ba:c9:9a:88:82:
                    25:4e:32:4c:10:db:c8:74:17:0e:f7:8d:e3:85:c0:
                    83:60:51:d1:09:c7:54:c3:0d:9b:9c:9b:71:d9:ff:
                    42:0e:f3:15:0a:f0:e3:8c:43:f4:38:f4:95:06:26:
                    aa:80:ab:6c:3e:16:65:81:e7:32:48:86:a7:39:c0:
                    00:1e:af:86:78:c0:38:05:55:ac:9f:c1:93:f3:56:
                    2f:3e:ec:35:0b:d1:b8:95:62:99:2e:74:4e:56:02:
                    91:8a:12:4b:09:0f:64:4d:e1:a7:ae:32:03:f3:b3:
                    30:57:6b:23:36:90:91:b8:1e:1e:35:52:d6:33:9f:
                    87:2e:7f:bc:45:e4:3c:68:1b:d9:2f:00:cc:cd:53:
                    e6:83:3a:49:7d:4d:f2:60:f5:6e:89:22:31:cf:51:
                    ec:96:ec:be:8b:c7:7d:ad:9d:43:c9:4d:22:19:71:
                    67:75:a7:e3:9c:dc:ba:d6:ea:91:80:d8:64:73:a8:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:5A:79:3D:23:DA:8C:02:24:82:D9:0E:78:93:18:9F:E5:44:B9
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35312e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:11:be:43:15:97:5e:6e:86:2a:49:83:35:e6:4f:77:e5:67:
         9c:cd:5d:4f:a1:8b:20:f0:c4:32:cc:e2:33:9c:1c:5d:83:e6:
         b0:81:74:d3:fb:c3:48:0a:65:6f:cd:47:9c:94:44:f2:20:a2:
         51:f6:fc:c9:68:50:f8:6f:c1:d9:89:8e:00:23:94:c0:ad:5b:
         9d:3d:10:63:5e:60:f9:01:24:d0:2b:06:5b:5f:c7:f2:79:b3:
         59:74:74:78:e2:f0:bf:36:86:ca:a0:68:8c:82:1a:d4:52:69:
         c6:bb:cf:81:85:c4:f7:38:30:43:6c:0f:db:fc:5b:82:c7:cb:
         9b:41:b0:31:12:6a:37:c0:3f:55:60:86:25:5d:8c:e9:79:97:
         6d:d5:ba:0b:7d:d0:1b:fb:0a:b0:db:14:a7:51:2e:1a:17:cb:
         cc:0e:99:f8:45:05:ed:e5:13:27:bb:a4:9a:80:96:e2:fa:3c:
         b8:8f:36:c7:d0:6b:fb:97:4a:a3:69:74:8d:59:3e:cd:a8:53:
         8a:45:19:1f:59:ac:a3:6c:ef:e4:5e:31:9b:5a:67:76:59:b8:
         42:c4:6a:4e:e4:a4:f0:86:f4:fc:c5:de:e0:c8:5a:aa:af:f3:
         14:03:d2:35:73:cf:ec:6f:71:af:02:19:9f:19:3f:07:f5:ba:
         61:de:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:57:32 2026 by rpki-client