Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37392e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e37392e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          mCmH9EY8fyjs9Hzmpa5Wol4tR3gd2v3yMuiNFJjfDlI=
Subject key identifier:   D9:AF:8D:ED:16:40:EB:EE:7A:E0:DC:AC:F1:18:0B:2C:34:2B:14:21
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       590B95650AA2485B3C49D8EEAFD1640C6C983A1B
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37392e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:58 +0000
ROA not before:           Sun 27 Sep 2026 07:27:58 +0000
ROA not after:            Sun 26 Sep 2027 07:32:58 +0000
asID:                     812
IP address blocks:        199.235.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0b:95:65:0a:a2:48:5b:3c:49:d8:ee:af:d1:64:0c:6c:98:3a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:58 2026 GMT
            Not After : Sep 26 07:32:58 2027 GMT
        Subject: CN=D9AF8DED1640EBEE7AE0DCACF1180B2C342B1421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:d7:ca:96:2a:08:85:86:07:7f:56:22:b6:
                    7a:4f:b1:79:13:c9:61:5a:8f:bf:4b:44:ac:3f:5a:
                    fd:c5:21:63:32:2c:cd:d9:e7:e1:58:05:65:53:1d:
                    1e:93:b9:b3:f3:71:86:e8:08:23:b2:2a:26:97:b9:
                    9c:bd:2b:74:b6:48:18:64:a3:bd:ba:b1:1a:1c:10:
                    80:2c:a1:cd:84:ba:81:14:92:2d:19:b8:08:00:35:
                    7e:53:35:35:1e:90:ee:a4:dd:03:10:81:49:50:77:
                    dd:7c:ac:db:ce:a0:5d:06:df:e8:3b:ad:fd:e5:7c:
                    bc:52:b8:4e:98:0c:2c:86:f7:32:72:93:6b:05:ac:
                    69:f9:9a:19:88:23:da:40:05:b8:ec:8f:9c:55:ac:
                    60:19:d9:43:e3:11:f2:ba:e8:27:f5:8b:b6:f4:6f:
                    8b:13:e0:87:ea:af:d2:5e:b1:f5:b6:98:f7:5c:0a:
                    fc:79:08:bd:b3:2b:6b:2f:80:89:c5:08:90:f9:3b:
                    ea:ef:2b:11:47:09:6f:1d:7e:d2:57:f0:ed:7a:bb:
                    fa:76:9b:51:39:01:5e:1d:5e:4b:b3:53:a0:1f:c1:
                    cf:1f:12:b8:b8:f3:50:c2:c1:da:a8:b3:21:10:ad:
                    9f:2c:56:4a:c1:19:0b:e5:ae:c5:a7:a5:a7:70:61:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AF:8D:ED:16:40:EB:EE:7A:E0:DC:AC:F1:18:0B:2C:34:2B:14:21
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e37392e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:da:36:7a:e2:89:24:aa:64:6f:41:30:90:fc:e9:4a:95:5b:
         8a:88:ed:78:5e:83:93:73:3c:53:45:87:30:10:67:03:ba:7f:
         c6:b1:db:b5:cd:d7:24:63:19:06:f7:59:39:f1:ae:e7:d9:86:
         ff:e3:6e:f3:aa:fe:65:b1:4e:1e:2f:fd:c0:de:e4:28:42:47:
         55:38:14:c8:46:e4:21:ca:ad:a2:74:0f:7a:79:7c:4c:c0:c1:
         e6:c4:1c:20:91:82:52:3d:f1:cc:37:65:26:45:5c:fa:8f:50:
         f1:d8:ab:51:8c:75:71:b4:85:e5:0b:c5:b0:fd:40:e2:05:65:
         86:97:0b:2c:3a:60:cc:07:18:1b:51:c5:0a:46:eb:06:8d:9c:
         9d:98:ae:fa:1f:33:12:2d:bd:6e:1b:41:85:86:c6:a1:a4:87:
         af:1c:99:76:ee:64:f6:2c:85:4d:5a:ec:a9:c8:9c:3c:83:be:
         48:7e:21:f0:b5:24:95:82:70:22:44:52:ec:82:16:81:cb:1d:
         ae:a8:ff:b2:74:85:76:80:03:69:b0:93:5b:20:0c:7a:99:45:
         c6:15:5b:33:54:ad:9e:73:68:32:60:7b:f3:b7:ca:15:c4:87:
         82:7b:8e:0a:a6:2f:15:1d:17:b0:a2:c3:43:62:77:90:43:01:
         02:5b:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:24 2026 by rpki-client