Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35362e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e35362e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          YMFp3D2o2nckgioqr1Ai9vhJmuPfFCfgSdYVNGZ8teI=
Subject key identifier:   FD:0A:32:B4:B6:DE:B3:FE:B8:2B:21:6F:26:AE:27:A9:7C:17:18:F5
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       111824AEEAAEEB533814131E755FB1A8FF225628
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35362e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:55 +0000
ROA not before:           Sun 27 Sep 2026 07:27:55 +0000
ROA not after:            Sun 26 Sep 2027 07:32:55 +0000
asID:                     812
IP address blocks:        199.235.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:24:ae:ea:ae:eb:53:38:14:13:1e:75:5f:b1:a8:ff:22:56:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:55 2026 GMT
            Not After : Sep 26 07:32:55 2027 GMT
        Subject: CN=FD0A32B4B6DEB3FEB82B216F26AE27A97C1718F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:a0:d3:2e:54:4e:9c:cb:b2:f3:f5:14:ee:
                    b5:dd:50:31:be:00:67:e6:13:25:b7:22:0f:05:27:
                    58:6e:68:6f:07:8f:26:f1:fb:9f:02:ad:98:d1:ec:
                    3d:fe:6b:41:48:3c:8b:7d:e7:05:c2:37:5e:fe:94:
                    6f:70:4a:b9:64:53:6d:2d:7a:25:2c:2b:fa:dc:31:
                    6d:d3:c3:5f:4b:73:42:a5:3a:f3:d9:64:52:84:d5:
                    66:b5:60:68:48:c4:56:6e:5d:9c:3f:48:d5:ee:6e:
                    56:7b:20:d1:28:b7:76:8e:41:05:b1:86:98:df:5b:
                    2f:f4:97:02:4d:9f:66:11:32:46:e4:47:a8:35:c2:
                    18:b7:92:49:c1:07:6e:d6:e8:82:f9:97:9f:ff:22:
                    14:eb:86:6a:93:2e:18:55:a8:b8:b4:a4:11:c3:3a:
                    57:d0:95:35:98:87:57:9d:54:0c:0e:0a:c1:3f:67:
                    c6:d1:80:2e:92:41:7c:4d:95:93:98:b7:1b:ec:86:
                    55:28:ea:f6:8b:57:9d:a6:b2:7e:99:9a:05:d3:76:
                    c7:73:da:d1:41:a1:54:0c:ac:0d:72:89:b1:91:2f:
                    42:ea:3c:88:34:2a:47:17:d4:62:ea:23:9d:48:c6:
                    5d:49:ca:7f:c9:ad:55:e9:4b:87:da:49:c1:42:36:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:32:B4:B6:DE:B3:FE:B8:2B:21:6F:26:AE:27:A9:7C:17:18:F5
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35362e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:93:e0:0d:cd:77:81:ce:a2:15:dd:bf:63:d3:2b:f6:6c:81:
         67:01:dd:ab:d9:cb:e4:ea:7f:d5:a0:8a:b0:ae:23:df:99:4c:
         c6:37:89:10:7a:63:c1:77:0f:c3:35:8e:ba:e6:4e:24:94:41:
         fc:a3:f1:e3:b7:73:6a:51:e2:19:4c:06:03:4c:28:a0:6f:3e:
         8c:7d:5c:d2:fc:51:40:3d:02:ab:cc:04:18:24:f2:cb:9c:42:
         60:4e:6d:61:fb:7d:a0:40:4b:90:0a:fd:86:59:41:eb:ef:48:
         69:a9:77:8f:70:3e:7c:04:64:16:f8:db:63:2e:4b:fc:9a:82:
         cf:bd:cc:f1:8a:55:35:96:cd:eb:ee:91:3b:f6:23:7c:08:94:
         30:65:27:0a:f2:4f:a2:19:21:ea:be:61:47:49:c3:6e:10:a1:
         ff:f9:e6:fc:0c:fa:93:21:af:af:20:64:7c:7d:a2:84:74:41:
         04:02:8b:97:14:90:d5:43:62:e7:6f:e3:ed:8f:c9:90:4e:d1:
         17:70:1d:f3:24:39:f5:64:b7:95:26:f7:eb:0b:cf:94:42:7b:
         e0:89:b2:9f:d7:c8:97:74:28:49:53:1c:5b:0c:93:d4:a7:bd:
         85:97:4e:4c:80:4f:99:f2:e3:a1:64:a7:ac:92:c7:b1:1a:d3:
         0d:2b:76:27
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUERgkruqu61M4FBMedV+xqP8iVigwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTI3MDcyNzU1WhcNMjcwOTI2MDczMjU1
WjAzMTEwLwYDVQQDEyhGRDBBMzJCNEI2REVCM0ZFQjgyQjIxNkYyNkFFMjdBOTdD
MTcxOEY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwOg0y5UTpzL
svP1FO613VAxvgBn5hMltyIPBSdYbmhvB48m8fufAq2Y0ew9/mtBSDyLfecFwjde
/pRvcEq5ZFNtLXolLCv63DFt08NfS3NCpTrz2WRShNVmtWBoSMRWbl2cP0jV7m5W
eyDRKLd2jkEFsYaY31sv9JcCTZ9mETJG5EeoNcIYt5JJwQdu1uiC+Zef/yIU64Zq
ky4YVai4tKQRwzpX0JU1mIdXnVQMDgrBP2fG0YAukkF8TZWTmLcb7IZVKOr2i1ed
prJ+mZoF03bHc9rRQaFUDKwNcomxkS9C6jyINCpHF9Ri6iOdSMZdScp/ya1V6UuH
2knBQjZ9cwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFP0KMrS23rP+uCshbyauJ6l8
Fxj1MB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3
YTMwMjMxOTU1LzAvMzEzOTM5MmUzMjMzMzUyZTM1MzYyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH6zgwDQYJKoZIhvcNAQELBQADggEB
AMGT4A3Nd4HOohXdv2PTK/ZsgWcB3avZy+Tqf9WgirCuI9+ZTMY3iRB6Y8F3D8M1
jrrmTiSUQfyj8eO3c2pR4hlMBgNMKKBvPox9XNL8UUA9AqvMBBgk8sucQmBObWH7
faBAS5AK/YZZQevvSGmpd49wPnwEZBb422MuS/yags+9zPGKVTWWzevukTv2I3wI
lDBlJwryT6IZIeq+YUdJw24Qof/55vwM+pMhr68gZHx9ooR0QQQCi5cUkNVDYudv
4+2PyZBO0RdwHfMkOfVkt5Um9+sLz5RCe+CJsp/XyJd0KElTHFsMk9SnvYWXTkyA
T5ny46Fkp6ySx7Ea0w0rdic=
-----END CERTIFICATE-----
Generated at Mon Oct 5 09:50:58 2026 by rpki-client