Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35382e302f32332d3234203d3e20383334.roa
File:                     3139392e3233352e35382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          ejb7KoGFxhdcgG5Ypr36XmF9ZbnaQqmnW4CVOwz4dEg=
Subject key identifier:   5C:29:2E:3A:7A:65:16:02:8A:A6:93:7C:46:8E:D7:73:BE:C8:36:32
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       35966B090420E6B4CA29376639EB1B4AB4C1A414
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35382e302f32332d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:32 +0000
ROA not before:           Sun 27 Sep 2026 07:28:32 +0000
ROA not after:            Sun 26 Sep 2027 07:33:32 +0000
asID:                     834
IP address blocks:        199.235.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:96:6b:09:04:20:e6:b4:ca:29:37:66:39:eb:1b:4a:b4:c1:a4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:32 2026 GMT
            Not After : Sep 26 07:33:32 2027 GMT
        Subject: CN=5C292E3A7A6516028AA6937C468ED773BEC83632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:f3:9e:66:7b:59:72:e6:c4:ae:ce:d3:62:
                    8e:bd:2f:d4:72:fd:b9:0d:6e:ca:3b:82:5a:cb:b5:
                    5d:4c:20:28:cf:ed:b1:ff:91:40:cd:06:22:96:84:
                    24:78:ab:d8:5d:33:63:72:c9:fa:51:04:b2:ca:74:
                    ca:b3:da:6b:30:3d:ee:42:ac:35:90:b0:f6:08:22:
                    48:d9:b9:ef:b2:4b:c0:f0:26:5e:cf:15:d7:3d:72:
                    bc:8a:e4:af:a3:b6:0c:cc:b4:a4:6e:59:47:29:88:
                    f1:a0:28:89:2a:53:c9:cb:54:3d:dc:02:6b:15:2d:
                    e7:21:30:df:1e:e6:b9:27:fc:37:8b:fc:f3:87:43:
                    c5:48:b6:49:0e:6c:82:61:b0:36:c2:9a:d5:67:6f:
                    87:52:ce:20:3e:31:e7:2d:5c:1e:90:7a:a3:55:ea:
                    73:e8:85:5d:b0:0f:a3:a1:ee:6f:e5:ff:45:38:81:
                    48:1a:60:39:39:5a:88:47:73:22:23:81:3a:0d:bf:
                    fd:9b:62:ce:93:34:a7:6d:50:b5:de:5c:5a:ba:2a:
                    23:03:13:bc:63:1a:02:2b:c8:e0:e0:92:84:a5:3d:
                    2a:6f:7d:9f:52:c5:55:e4:74:b4:46:c0:38:87:68:
                    43:13:34:8f:64:85:a0:e3:94:c8:7d:fc:bc:6d:39:
                    82:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:29:2E:3A:7A:65:16:02:8A:A6:93:7C:46:8E:D7:73:BE:C8:36:32
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:ee:16:97:6f:44:77:ff:89:a6:56:0c:7c:b3:e1:c9:df:54:
         b8:de:45:af:b2:eb:39:d9:40:0e:6d:c6:49:e4:12:1b:09:e8:
         62:1d:7c:13:c6:15:45:5e:ab:47:72:0d:25:cb:4c:5b:bf:46:
         ad:70:c0:c9:d4:1c:4e:24:78:ba:a6:ff:7b:d8:d1:d5:db:49:
         fa:1e:71:f4:4f:d5:47:d7:3a:14:3b:fb:90:c8:53:01:a3:16:
         df:ed:27:8e:e7:32:ee:d9:db:f2:48:ae:96:21:af:ab:d6:be:
         8b:94:2b:4a:cc:5b:cf:94:6a:e6:33:32:4f:31:8e:f5:59:fe:
         38:da:d6:37:f5:21:a1:3e:01:0a:38:e3:fd:ce:ae:dc:e3:96:
         49:cf:99:fb:95:18:e9:18:b4:d1:e0:e5:30:a4:2f:e0:c3:36:
         63:10:89:b4:84:44:ca:1d:90:a7:db:84:c7:23:19:61:87:b2:
         dc:ea:44:93:4b:a2:1d:20:3e:24:46:4a:6e:3d:d5:65:5b:35:
         b1:e6:8c:c5:4a:85:54:aa:6e:af:27:35:68:c8:fe:37:df:34:
         72:e8:65:6c:0b:36:c1:e0:6c:8f:1c:29:3d:86:5f:a2:37:dd:
         12:22:1c:39:81:0b:18:c3:3c:18:b9:48:65:00:fd:4b:28:a6:
         e5:0a:46:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:09 2026 by rpki-client