Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36302e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          IboX46JsQ5B8zbZiwzUZbNUIuRgyvhVJpJXHWnQZmjI=
Subject key identifier:   76:AE:1A:DC:50:3D:71:AD:2F:5C:EB:9E:66:C4:5A:C7:07:44:DB:2D
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       320BB577B8F6DF7FA2BF96007FFE2B97A39A99BA
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36302e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:29 +0000
ROA not before:           Sun 27 Sep 2026 07:28:29 +0000
ROA not after:            Sun 26 Sep 2027 07:33:29 +0000
asID:                     834
IP address blocks:        199.235.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0b:b5:77:b8:f6:df:7f:a2:bf:96:00:7f:fe:2b:97:a3:9a:99:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:29 2026 GMT
            Not After : Sep 26 07:33:29 2027 GMT
        Subject: CN=76AE1ADC503D71AD2F5CEB9E66C45AC70744DB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:bf:0a:65:f9:e7:4a:12:bf:d5:73:49:36:
                    4b:a7:cd:5e:8e:0d:30:94:33:8b:6f:44:25:2f:c3:
                    09:74:8b:cb:ba:40:b6:dc:82:1a:3e:a2:9c:26:61:
                    cf:a0:26:8d:57:0b:e4:57:60:b5:0a:c0:f7:e0:0b:
                    ae:f9:78:7f:01:83:84:19:31:23:3a:b9:c0:1f:f9:
                    16:2b:99:7d:73:82:e2:90:ad:1d:db:b9:2e:3e:1a:
                    9b:46:01:dc:de:d2:ae:06:3f:7c:06:74:19:41:44:
                    45:dc:a5:72:86:d2:6b:b4:aa:88:0e:d3:4a:1d:bd:
                    f2:e1:ac:8a:3f:fe:01:47:c6:c3:e8:19:54:5f:30:
                    43:0e:33:86:10:7c:27:a3:04:d8:69:4c:36:a5:23:
                    0b:19:db:4a:fb:6d:0c:72:8a:bc:9d:3e:dd:8c:db:
                    73:81:3e:55:83:1d:2e:bb:a0:3f:e9:78:cc:0c:5f:
                    c7:7f:3d:82:94:20:71:7f:f9:6e:f7:cd:e6:15:f0:
                    19:11:82:f1:ff:40:96:e2:0f:d5:09:b6:bd:b4:11:
                    4b:25:03:10:a9:47:55:80:6e:18:2f:bb:f7:37:fd:
                    0e:0f:4f:89:48:55:e8:33:4c:88:87:8b:0b:4c:1a:
                    d8:65:30:ce:67:4d:3a:86:04:d7:6c:6a:f2:70:14:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AE:1A:DC:50:3D:71:AD:2F:5C:EB:9E:66:C4:5A:C7:07:44:DB:2D
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:73:fa:99:c0:fd:c6:d2:9b:65:7d:17:dc:cf:2b:fa:40:
         ff:0c:b3:68:fc:ef:00:70:59:a1:d0:1d:8b:2c:cc:79:03:3f:
         c1:7e:5e:85:ca:0a:87:46:42:77:62:df:30:4d:d3:5d:a1:28:
         ed:b5:25:ee:36:35:37:1f:27:a6:1b:90:c2:63:73:fd:8d:ce:
         1f:ab:69:ab:69:5e:d1:83:6c:88:70:8d:94:12:c3:f8:c2:36:
         ae:7e:3a:f1:5a:45:55:40:5d:a9:08:b0:12:f0:41:a4:b5:af:
         45:50:cd:45:7a:9c:2b:36:dd:11:6b:c2:e9:c8:36:df:a2:5e:
         22:6b:cd:aa:24:0d:02:55:81:16:d7:47:39:18:13:a0:45:5b:
         d2:2e:39:ea:d3:23:09:7c:dc:cc:1a:05:b8:af:23:ef:03:2b:
         a6:cb:a3:5e:84:f4:96:24:a8:ae:e3:15:5d:28:51:09:ba:20:
         1b:c0:52:64:99:f5:3a:c3:1b:0b:bc:58:1f:8b:63:58:b1:40:
         5d:6f:31:b5:03:db:27:e4:e9:af:17:15:25:44:70:95:a1:82:
         02:ff:6f:88:fb:7c:cb:39:4e:f6:55:a5:fe:1d:b6:6d:66:66:
         10:25:b4:db:02:9b:bf:ac:38:3b:b9:88:1e:11:c1:10:ef:95:
         4c:30:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:11 2026 by rpki-client