Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35342e302f32332d3234203d3e20383334.roa
File:                     3139392e3233352e35342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          ZcZMxkGoeVcIKAWC5KI+ABhxvujUyAh4lugsHQ1S/Q0=
Subject key identifier:   87:EC:E6:2D:15:9A:41:5A:99:DF:AD:27:7A:3C:FD:18:02:6A:20:35
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       559435FD78CA403CCA96748E3D456439A3816531
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35342e302f32332d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:94:35:fd:78:ca:40:3c:ca:96:74:8e:3d:45:64:39:a3:81:65:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=87ECE62D159A415A99DFAD277A3CFD18026A2035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:9b:1a:90:61:2e:e0:8e:a2:48:41:e1:5f:
                    a0:17:b2:65:0b:9e:40:29:39:d3:47:8e:8b:45:d2:
                    45:e5:ed:d3:a9:3c:6a:76:72:50:29:7a:f7:d9:e7:
                    31:cc:43:20:25:4f:6b:a2:dd:c8:11:43:f0:6f:c0:
                    69:4f:29:76:65:15:0b:cd:e2:bc:57:9a:9b:4f:8b:
                    9e:b8:94:9a:56:5c:56:29:b2:5b:72:cb:76:d1:50:
                    e0:f4:a8:04:af:de:a9:12:0a:26:58:d1:ef:04:8c:
                    f7:9d:5c:8c:93:b5:6e:2e:28:c9:29:37:33:60:fd:
                    a6:b6:1d:a0:96:70:f9:e8:9e:ba:05:69:2f:a8:9a:
                    75:7f:7e:d2:c8:05:9a:dd:31:dd:3f:24:8d:64:25:
                    cd:d1:f8:28:fd:47:7d:63:d0:7f:3f:e8:d2:8c:53:
                    c0:5f:57:2d:8b:62:6b:ff:8d:3f:5f:53:57:99:47:
                    6b:33:35:a7:52:88:fe:83:4a:13:c4:77:fc:75:9c:
                    14:4b:da:00:91:4f:c4:95:fe:b3:bd:34:da:7b:35:
                    e5:99:bc:0c:0f:39:29:c0:57:6b:16:bf:41:d7:52:
                    06:13:35:56:4f:86:c0:f7:cc:00:aa:93:dd:a7:18:
                    56:5a:04:48:7a:1c:d6:54:f6:03:20:56:35:40:71:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:E6:2D:15:9A:41:5A:99:DF:AD:27:7A:3C:FD:18:02:6A:20:35
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:50:90:aa:fc:7d:61:77:5c:1b:fa:19:e6:6f:fc:7c:b5:
         a0:6c:d4:aa:9e:4a:61:ab:ff:66:df:63:5d:ba:e9:6d:2a:93:
         95:3f:bc:b8:6b:f6:bf:14:49:c7:3e:8d:fe:fc:af:6f:de:bb:
         81:43:97:fc:f9:89:32:d2:3c:3f:ec:0e:3f:a7:2f:f2:32:bc:
         a1:dd:d7:e6:bc:a2:76:12:fc:58:f2:0e:9a:a6:31:f2:9b:33:
         23:11:0b:4e:14:d7:11:9b:af:59:85:2a:55:92:c1:65:0f:88:
         08:65:0d:60:dd:1c:b2:6c:4b:f2:e7:49:f4:c0:44:ec:96:81:
         82:fc:cc:bf:25:10:3e:7c:21:97:47:c0:66:4b:a2:2e:2e:d6:
         36:70:d8:fa:27:f6:83:63:17:76:6b:73:15:1d:cb:a0:dc:be:
         a0:01:4a:05:ac:25:66:98:1a:7a:d8:e8:3e:23:2a:a5:a9:78:
         ba:68:63:f0:17:3f:7b:1c:4c:59:0e:1d:94:db:8f:a4:4d:49:
         f2:ff:a8:08:66:72:e0:64:49:83:14:b5:09:cb:bb:64:70:82:
         2f:e8:15:24:4f:a4:1c:d3:ce:6e:41:d0:e3:21:e2:98:8b:5a:
         44:aa:e0:f3:b6:a8:24:2a:06:57:b0:45:3d:19:49:db:c2:04:
         4f:6d:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:39:55 2026 by rpki-client