Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37362e302f32332d3234203d3e20383334.roa
File:                     3139392e3233352e37362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          V83YWJhC0ixZnzlojtGpM8H7fG61CKldnxkO83Su1Ms=
Subject key identifier:   94:3B:15:AE:8C:FC:B7:2C:45:CF:F9:9F:59:54:A2:1A:71:17:AB:AD
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       1CE958975B23D8BAC864C72FF2F18C8E6F9EADD1
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37362e302f32332d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e9:58:97:5b:23:d8:ba:c8:64:c7:2f:f2:f1:8c:8e:6f:9e:ad:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=943B15AE8CFCB72C45CFF99F5954A21A7117ABAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:5b:45:a2:75:c0:fe:41:91:ad:f6:73:31:
                    04:82:94:a8:c3:1c:d6:6c:57:ef:af:ce:0f:63:97:
                    d8:b0:f2:1c:04:8e:5f:0a:f4:c1:58:c2:ec:9b:1a:
                    0d:03:32:06:21:6b:d9:2b:d5:86:69:4e:f5:18:73:
                    33:eb:97:37:b4:57:dd:fb:4e:90:4e:50:23:9a:84:
                    cc:b2:7a:e1:b2:c2:03:a6:2f:a3:1c:df:e1:7c:f0:
                    27:6e:18:1a:79:5e:af:38:ae:23:b6:86:7b:b0:29:
                    7c:9a:50:75:87:d7:52:eb:51:05:d4:fd:46:97:97:
                    94:f5:c7:32:0a:e0:45:e4:bc:d0:b5:ec:fa:81:63:
                    78:60:f1:a5:2c:be:71:e1:72:7a:ee:11:f1:48:56:
                    46:4a:d5:61:d2:09:ca:71:f5:17:60:74:e9:84:35:
                    cc:26:93:0b:31:d4:6d:a0:bb:4b:b6:b8:af:a3:fb:
                    a1:e7:5f:c4:d7:f2:fb:49:18:da:e1:2a:74:8c:40:
                    e3:18:8d:08:8a:38:e9:cc:f3:23:33:2b:00:7e:ac:
                    59:5b:2e:0d:61:02:06:48:80:fd:df:bc:15:b2:56:
                    eb:cd:56:8c:cb:dc:cb:46:4b:94:8e:33:28:55:7a:
                    e7:80:a9:d5:6b:b8:d3:ce:d8:f5:c6:87:f5:50:78:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3B:15:AE:8C:FC:B7:2C:45:CF:F9:9F:59:54:A2:1A:71:17:AB:AD
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:67:8e:3a:1b:ef:e3:8b:fe:10:02:e8:9d:3f:cd:03:d2:9c:
         b0:2a:2f:a4:f5:48:5a:8c:23:60:bd:1e:38:c6:04:ee:5f:1a:
         51:94:83:e6:7f:e6:20:44:23:29:2a:8b:ee:73:94:1a:cd:cf:
         b5:19:04:fd:81:9d:53:d7:4e:13:5e:8d:3f:fc:8b:c7:06:b2:
         16:03:7d:b6:37:51:a8:6d:22:32:f9:c1:dc:63:67:9d:d2:df:
         b9:56:97:45:b1:d4:88:ef:61:7d:e0:2e:13:df:8d:a2:44:fe:
         b9:44:f3:fb:16:24:3c:1a:c6:40:91:b2:3f:bb:73:ca:33:76:
         4e:d6:6a:18:53:a9:ce:44:4a:6a:9e:6f:38:b7:2e:d1:23:06:
         a3:83:f4:24:31:ea:a2:39:15:e1:2a:ed:14:54:9e:b5:16:1e:
         a2:26:13:4c:81:9c:ec:b1:bf:a0:51:bd:bd:d3:1d:34:ce:1a:
         52:cd:e8:48:f5:db:3f:e9:ee:75:a7:a9:f3:d2:2a:ce:2e:ed:
         36:0c:3b:d1:a1:8b:a7:a0:9a:e3:27:3f:30:45:8d:00:8c:a9:
         f5:62:34:0a:7f:8e:aa:4f:76:6a:df:df:dc:34:4a:7c:66:12:
         e8:ba:47:1b:2e:fc:2c:55:d9:28:af:a4:7a:78:4d:40:f4:b4:
         59:46:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:08 2026 by rpki-client