Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37322e302f32322d3234203d3e20383334.roa
File:                     3139392e3233352e37322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          ERyeXiml/gf1WvYHhnUR5Yee3bJJluX1mXJbXeYi5M8=
Subject key identifier:   B1:DA:21:CF:2D:D3:D5:4A:1C:2A:A6:86:97:58:F9:06:71:BA:7D:3A
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       78E235431DCAE36A97C82F919EB12EB3FB678935
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37322e302f32322d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e2:35:43:1d:ca:e3:6a:97:c8:2f:91:9e:b1:2e:b3:fb:67:89:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=B1DA21CF2DD3D54A1C2AA6869758F90671BA7D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:17:4e:74:07:5a:ff:68:88:0d:39:46:16:
                    73:8c:f0:91:78:1b:d7:82:8a:b3:ec:b4:6e:f9:ec:
                    b1:08:cf:8e:1b:d9:2f:06:c1:4d:2b:73:12:65:5f:
                    5c:ba:fd:12:e9:d4:83:8d:6a:58:f4:ba:38:ec:3b:
                    26:e8:58:ec:ea:4b:d8:b7:da:9d:6f:b5:9e:91:44:
                    5f:3a:4e:0c:f5:92:57:4d:1c:66:83:85:41:60:d8:
                    f9:89:e1:b8:de:6b:39:8d:10:cc:e6:62:1d:7b:83:
                    1b:79:66:12:a4:f1:38:05:82:8b:86:82:90:a0:ab:
                    d0:0e:0a:f0:70:08:de:c3:10:51:47:ed:d3:bf:67:
                    99:5b:cc:a9:46:f5:d0:56:62:15:07:cf:8a:67:86:
                    7a:fa:9d:31:86:b2:16:a1:cc:39:cd:f4:18:22:9c:
                    32:c9:a9:5e:1e:17:b4:29:03:66:a7:d2:ef:8d:f6:
                    03:b9:02:e9:0c:11:79:72:8e:28:de:db:57:bb:8d:
                    b4:d4:81:85:2e:37:3c:d6:1c:25:b2:35:b1:11:a4:
                    52:4d:e5:d6:cd:96:5f:68:73:a8:99:81:27:6a:8c:
                    8d:89:54:86:22:2e:50:69:49:84:8e:7a:70:31:4c:
                    69:f8:d9:52:2c:32:09:17:f5:60:bd:3e:f1:11:83:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:21:CF:2D:D3:D5:4A:1C:2A:A6:86:97:58:F9:06:71:BA:7D:3A
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:60:b6:65:d4:45:89:b6:56:20:27:6b:e8:2f:20:17:66:
         9c:53:d7:ee:2a:83:6d:b0:45:e2:fe:ed:20:1c:7c:aa:d7:04:
         ed:59:a4:4d:c9:d7:6e:2d:9c:f0:51:e9:e7:84:0e:d2:24:ef:
         ff:98:b8:94:6c:9d:4d:d9:78:ec:82:88:c6:2a:3c:1e:ba:23:
         4f:e2:61:38:49:3b:91:9d:de:71:bd:95:fb:fd:05:8c:f2:44:
         e2:a2:95:c4:e9:5f:31:08:6e:30:c0:3d:56:12:1a:c3:48:df:
         1c:0b:7f:2e:37:93:f1:1b:f5:d0:4a:8e:ee:37:38:ff:9e:2b:
         2f:0a:97:ec:36:a6:60:64:38:1e:f9:06:8f:cc:82:81:2c:80:
         43:7e:d4:26:61:a8:be:9e:a4:29:db:43:d9:51:43:2a:69:5e:
         0d:6e:68:f7:8c:4b:1c:14:a6:93:da:a2:e4:51:0c:fc:d0:62:
         ea:c2:03:4d:3c:b6:05:08:7c:08:df:0f:3d:56:5f:c7:3f:7c:
         e3:61:b5:2a:4e:33:55:7f:fb:da:0c:5f:81:85:1c:de:59:cc:
         ad:99:78:d8:52:3e:ab:ac:d7:8e:d7:00:9f:e0:e6:47:42:ab:
         3e:71:a3:9c:93:4b:f0:9f:78:64:5a:9a:21:a8:0b:3c:ce:bc:
         06:9d:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:58 2026 by rpki-client