Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36342e302f32332d3234203d3e20383334.roa
File:                     3139392e3233352e36342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          qvloyMZu3lhtJxa/IVA6MjkLp7CWD2Wk7Ac0vGf2sAM=
Subject key identifier:   65:AA:9C:6B:87:18:2B:9F:7F:B0:BA:70:63:1C:B4:24:DE:09:6F:B2
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       26FAFD347ED911B8330684418B31D4DD4C81B1FF
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36342e302f32332d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fa:fd:34:7e:d9:11:b8:33:06:84:41:8b:31:d4:dd:4c:81:b1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=65AA9C6B87182B9F7FB0BA70631CB424DE096FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:39:66:6e:03:3e:43:7a:f5:d7:48:d6:df:
                    a6:21:51:14:f5:89:ab:f4:86:8e:15:26:ab:36:bf:
                    d9:5b:d4:20:bc:d2:84:66:98:48:a2:81:e8:43:7e:
                    e2:6a:05:93:41:b7:58:3e:de:e3:a0:23:61:25:51:
                    6e:d0:c9:d5:88:62:d7:ee:d3:5c:fb:21:c5:ba:6b:
                    89:95:f4:d7:f5:41:8a:4e:4b:3a:9a:95:78:21:e8:
                    21:58:3b:23:12:b6:61:d9:2d:92:f6:20:99:f1:e4:
                    15:c8:70:93:1a:3c:e3:ff:cd:dd:f4:76:46:e1:bc:
                    73:79:09:da:21:4c:66:17:c4:4d:23:6d:84:fa:88:
                    36:e9:eb:0b:7d:60:dc:ed:e9:f3:c9:d0:ae:98:e1:
                    1d:be:c2:e7:4b:f6:71:f6:5e:f7:c2:0e:c3:3c:29:
                    f2:8b:9f:d5:0a:ea:44:13:f6:08:6b:5d:8c:61:bc:
                    95:45:ee:dd:5b:88:3e:be:7c:75:28:78:1e:c1:94:
                    fd:54:12:8d:51:46:19:06:47:59:4b:71:75:87:8d:
                    44:11:2e:32:7b:2b:8c:e9:fa:96:c4:8f:b1:d2:92:
                    0e:7c:f2:53:77:60:b5:e0:fd:05:97:ef:9d:d3:5c:
                    2f:a0:ca:89:c7:01:18:59:98:d0:74:67:1b:b7:3f:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:9C:6B:87:18:2B:9F:7F:B0:BA:70:63:1C:B4:24:DE:09:6F:B2
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:5a:ec:cd:30:c4:dd:cd:aa:27:b7:c0:41:47:cf:3b:e9:60:
         3c:0e:8d:ab:30:42:05:4c:5a:58:11:86:86:d9:d5:cf:d2:77:
         41:25:b7:5f:2c:3e:64:07:ce:c0:30:3f:d1:94:16:8b:06:a2:
         69:42:fa:26:99:d0:22:54:91:3e:c8:87:52:54:e9:e1:70:6c:
         0f:2f:1c:58:87:d3:5a:d9:01:26:53:38:cd:72:45:74:cc:3b:
         e2:eb:70:be:1f:43:b0:21:bb:47:66:1c:1e:81:28:cf:dc:f0:
         60:74:f2:cb:0c:c6:ce:6d:c0:e0:0a:94:c5:10:ab:a8:fa:40:
         21:14:c9:e1:4a:2c:14:c3:fd:f9:c4:b0:49:34:34:4a:fb:2e:
         1d:c1:dd:3f:49:b7:1e:f6:a7:9c:54:9f:15:9a:f0:61:61:26:
         8e:eb:51:f6:f0:15:12:6c:2b:ab:6c:b4:66:d8:f1:07:08:85:
         43:40:28:fa:cb:3f:ae:44:5b:a1:c3:52:a7:98:c4:7f:c2:dc:
         4e:13:11:4e:9d:08:36:88:00:e6:39:9d:8b:87:61:4e:cc:0d:
         0b:d8:c1:35:72:31:5b:e7:40:ef:d3:fb:e9:5c:15:1c:1f:d6:
         2b:80:ab:ad:f8:94:00:2f:d3:6b:92:7a:43:06:a0:6c:f2:e9:
         9f:f8:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:20:45 2026 by rpki-client