Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36372e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e36372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          iAI3zHQsu9HqLK9br9RHifRFcuqp4BPQn58uWVs1zFc=
Subject key identifier:   F4:F5:08:F5:D6:97:95:92:23:9D:BB:EA:6D:71:2A:26:26:A5:79:FB
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       4D93F71FFAECAF8E211955F64F95122FFDABE8D5
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36372e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:f7:1f:fa:ec:af:8e:21:19:55:f6:4f:95:12:2f:fd:ab:e8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=F4F508F5D6979592239DBBEA6D712A2626A579FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:29:17:e7:a5:7a:81:78:b3:ce:5b:76:7b:
                    22:80:34:23:54:24:11:7a:72:ca:0a:71:38:97:b2:
                    9f:39:80:1b:d8:88:de:b5:47:2c:4a:3b:f8:0d:69:
                    91:31:74:7b:40:66:43:c7:24:e8:b8:0c:cd:79:4f:
                    4a:90:f6:56:0e:ef:3d:26:c8:f2:ca:e5:b5:31:ff:
                    43:e8:2e:71:11:bf:31:b3:1b:42:4a:3b:ce:b1:b3:
                    2d:14:39:6f:ea:54:23:8c:ea:82:c6:8f:4d:32:2a:
                    40:e6:3a:74:c3:f8:86:cb:45:b5:0c:35:83:cd:cf:
                    eb:a6:84:39:8c:cf:71:33:85:78:09:c3:44:27:7d:
                    9d:29:c3:53:e9:d9:e5:11:24:5b:8b:04:4c:a3:26:
                    ba:1c:b0:e6:62:0f:30:64:06:54:8b:28:e4:6d:05:
                    be:74:9c:da:41:5d:70:a0:50:33:c1:0f:48:07:84:
                    61:c4:17:f3:38:37:a0:bb:3d:b0:d9:27:a6:93:ea:
                    11:97:ae:ce:a2:82:55:51:38:b9:32:5c:9f:d6:7a:
                    ec:77:0c:42:44:7e:df:a5:e6:c0:bf:af:aa:e4:9d:
                    b2:0f:4d:3a:21:4b:df:8e:47:3a:fc:13:f8:2b:fd:
                    9a:8d:c3:c5:ba:bc:2d:fe:4b:03:1f:b7:03:15:2b:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F5:08:F5:D6:97:95:92:23:9D:BB:EA:6D:71:2A:26:26:A5:79:FB
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e36372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:05:f2:f9:1e:83:11:29:55:fc:9b:9d:0e:20:af:41:10:ca:
         d3:d9:15:03:1f:bd:10:f2:31:5c:cd:50:80:3b:90:dc:73:db:
         d5:dd:26:5a:fa:47:c1:24:6b:0c:fe:b0:c4:da:de:2e:bc:98:
         84:98:b2:b3:78:e8:1e:50:6e:be:ce:38:2a:e3:d3:bf:50:c8:
         76:95:b8:85:75:79:db:e5:2c:0e:5e:eb:d6:32:ba:f2:15:90:
         c8:29:a1:68:80:bf:1f:21:a1:f3:1a:65:72:4a:bd:64:22:af:
         92:c8:58:1e:39:2e:ee:99:d6:86:78:ab:a8:00:a6:11:71:2c:
         1a:88:ee:6b:d7:83:c8:f6:a0:93:3b:e2:06:fe:bf:c4:48:7e:
         6f:cf:37:20:83:62:18:15:cf:07:d9:9b:5d:88:36:78:cf:10:
         f5:00:f0:c1:7e:5f:95:f5:07:27:62:41:30:74:3b:26:de:a7:
         b6:5b:14:8a:ee:42:1b:2c:89:95:a5:cd:9f:49:58:16:73:dd:
         79:c1:96:e4:4d:1e:cb:44:01:c5:be:48:f5:ba:c1:ca:f9:2b:
         4a:b5:4f:66:ef:d0:d3:48:cc:6a:58:b6:44:f0:bc:9a:74:8a:
         ca:84:18:4f:84:52:ef:b8:b4:66:16:5c:6b:8e:cd:a6:6b:32:
         60:78:a1:5a
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUTZP3H/rsr44hGVX2T5USL/2r6NUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTI3MDcyODMwWhcNMjcwOTI2MDczMzMw
WjAzMTEwLwYDVQQDEyhGNEY1MDhGNUQ2OTc5NTkyMjM5REJCRUE2RDcxMkEyNjI2
QTU3OUZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbgpF+eleoF4
s85bdnsigDQjVCQRenLKCnE4l7KfOYAb2IjetUcsSjv4DWmRMXR7QGZDxyTouAzN
eU9KkPZWDu89JsjyyuW1Mf9D6C5xEb8xsxtCSjvOsbMtFDlv6lQjjOqCxo9NMipA
5jp0w/iGy0W1DDWDzc/rpoQ5jM9xM4V4CcNEJ32dKcNT6dnlESRbiwRMoya6HLDm
Yg8wZAZUiyjkbQW+dJzaQV1woFAzwQ9IB4RhxBfzODeguz2w2Semk+oRl67OooJV
UTi5Mlyf1nrsdwxCRH7fpebAv6+q5J2yD006IUvfjkc6/BP4K/2ajcPFurwt/ksD
H7cDFStXRwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPT1CPXWl5WSI5276m1xKiYm
pXn7MB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3
YTMwMjMxOTU1LzAvMzEzOTM5MmUzMjMzMzUyZTM2MzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH60MwDQYJKoZIhvcNAQELBQADggEB
AN8F8vkegxEpVfybnQ4gr0EQytPZFQMfvRDyMVzNUIA7kNxz29XdJlr6R8Ekawz+
sMTa3i68mISYsrN46B5Qbr7OOCrj079QyHaVuIV1edvlLA5e69YyuvIVkMgpoWiA
vx8hofMaZXJKvWQir5LIWB45Lu6Z1oZ4q6gAphFxLBqI7mvXg8j2oJM74gb+v8RI
fm/PNyCDYhgVzwfZm12INnjPEPUA8MF+X5X1BydiQTB0Oybep7ZbFIruQhssiZWl
zZ9JWBZz3XnBluRNHstEAcW+SPW6wcr5K0q1T2bv0NNIzGpYtkTwvJp0isqEGE+E
Uu+4tGYWXGuOzaZrMmB4oVo=
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:04 2026 by rpki-client