Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e382e302f32312d3234203d3e20383334.roa
File:                     3139392e3233352e382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          4PGsBNeOBFH1bL0cKa9L3zfawjIvWSe5YqP/oBIh7nc=
Subject key identifier:   89:7C:D1:42:CE:75:17:F9:9F:D6:BE:DD:BF:FB:6C:2C:B1:2C:60:37
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       399C01EE14166D050266618B03428FFB06E13AD5
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e382e302f32312d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:32 +0000
ROA not before:           Sun 27 Sep 2026 07:28:32 +0000
ROA not after:            Sun 26 Sep 2027 07:33:32 +0000
asID:                     834
IP address blocks:        199.235.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9c:01:ee:14:16:6d:05:02:66:61:8b:03:42:8f:fb:06:e1:3a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:32 2026 GMT
            Not After : Sep 26 07:33:32 2027 GMT
        Subject: CN=897CD142CE7517F99FD6BEDDBFFB6C2CB12C6037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:57:d5:ad:fa:5f:0b:c1:02:e3:6e:1a:84:
                    fa:f8:34:f3:15:84:28:61:fe:be:dc:e7:af:26:46:
                    43:45:61:46:50:9c:f1:fe:6e:13:4e:65:91:47:67:
                    f9:9a:2c:5b:c8:1d:52:20:9f:22:7f:e7:52:fa:40:
                    7c:1e:41:e5:49:1b:aa:5f:99:a9:0d:d1:16:83:05:
                    1e:8b:1a:20:4a:53:fc:14:2a:5e:64:29:e2:ae:09:
                    20:8c:40:81:97:23:ea:5a:6d:69:b1:f1:91:1d:21:
                    e8:19:2c:6a:e6:d5:04:08:ba:86:0b:b9:d0:11:c1:
                    0a:46:e3:51:ef:e2:f6:18:11:b4:02:cc:8c:ac:ba:
                    b6:64:ff:94:fa:b0:76:22:bc:7f:74:19:07:e5:8d:
                    4c:ca:5a:8b:20:c9:fe:78:09:f0:fd:b2:02:a1:0e:
                    99:f2:d9:3c:b7:e5:a4:89:19:6d:50:9c:ed:5b:83:
                    39:42:4f:e4:32:87:e0:f3:81:c2:8d:d5:f1:28:a9:
                    81:5d:51:ee:2d:42:02:b5:f9:34:8e:17:7f:d7:7b:
                    d6:a9:79:e0:ef:36:f5:c8:5a:45:91:c6:be:5a:3e:
                    9c:d7:60:96:f1:95:50:a4:87:a4:20:4a:91:f4:56:
                    d7:ca:29:20:5a:a0:5d:54:4a:42:71:58:19:51:5d:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7C:D1:42:CE:75:17:F9:9F:D6:BE:DD:BF:FB:6C:2C:B1:2C:60:37
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e382e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         be:1e:fb:6e:ef:72:2e:47:5e:43:6e:1e:8f:81:d8:f9:43:87:
         f4:7e:c0:82:19:0c:b4:51:8c:67:f3:0d:bd:93:d1:39:f2:43:
         41:9d:cf:6e:f6:19:8d:01:77:a4:34:96:cc:d9:6c:c9:52:bb:
         87:5c:be:f9:ee:98:c3:c9:33:d8:33:28:10:77:44:a3:6e:6e:
         b3:59:c9:65:f2:be:57:09:9a:8f:fa:59:6c:91:bd:42:c4:61:
         ba:49:52:1b:be:a7:dd:da:39:13:58:1f:fb:b8:36:ff:fc:bd:
         9b:0f:fa:b1:2d:c5:1b:2d:9a:67:64:19:ea:a6:bd:09:47:97:
         67:be:8a:13:b4:57:12:3a:59:e6:87:5b:27:41:c6:00:a2:d7:
         e3:13:86:84:68:db:ac:f7:6f:8f:b8:f3:2d:94:f0:21:f9:55:
         e1:d0:db:37:9e:ee:fb:e7:73:01:a0:3a:b3:83:08:2f:d2:60:
         7f:39:d4:09:dd:93:09:ed:ef:8c:b2:64:e5:5c:51:bd:6a:de:
         b7:84:d1:b2:e2:7e:21:e4:75:c6:b6:6f:80:0e:6a:b1:df:de:
         37:36:37:97:53:92:78:52:47:43:7e:34:03:57:e9:56:1b:17:
         7b:c7:0f:6f:1f:68:b3:78:d4:a1:82:0f:28:e0:94:02:2c:41:
         63:db:e8:ed
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUOZwB7hQWbQUCZmGLA0KP+wbhOtUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTI3MDcyODMyWhcNMjcwOTI2MDczMzMy
WjAzMTEwLwYDVQQDEyg4OTdDRDE0MkNFNzUxN0Y5OUZENkJFRERCRkZCNkMyQ0Ix
MkM2MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/9X1a36XwvB
AuNuGoT6+DTzFYQoYf6+3OevJkZDRWFGUJzx/m4TTmWRR2f5mixbyB1SIJ8if+dS
+kB8HkHlSRuqX5mpDdEWgwUeixogSlP8FCpeZCnirgkgjECBlyPqWm1psfGRHSHo
GSxq5tUECLqGC7nQEcEKRuNR7+L2GBG0AsyMrLq2ZP+U+rB2Irx/dBkH5Y1MylqL
IMn+eAnw/bICoQ6Z8tk8t+WkiRltUJztW4M5Qk/kMofg84HCjdXxKKmBXVHuLUIC
tfk0jhd/13vWqXng7zb1yFpFkca+Wj6c12CW8ZVQpIekIEqR9FbXyikgWqBdVEpC
cVgZUV0pqwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIl80ULOdRf5n9a+3b/7bCyx
LGA3MB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3
YTMwMjMxOTU1LzAvMzEzOTM5MmUzMjMzMzUyZTM4MmUzMDJmMzIzMTJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx+sIMA0GCSqGSIb3DQEBCwUAA4IBAQC+
Hvtu73IuR15Dbh6Pgdj5Q4f0fsCCGQy0UYxn8w29k9E58kNBnc9u9hmNAXekNJbM
2WzJUruHXL757pjDyTPYMygQd0Sjbm6zWcll8r5XCZqP+llskb1CxGG6SVIbvqfd
2jkTWB/7uDb//L2bD/qxLcUbLZpnZBnqpr0JR5dnvooTtFcSOlnmh1snQcYAotfj
E4aEaNus92+PuPMtlPAh+VXh0Ns3nu7753MBoDqzgwgv0mB/OdQJ3ZMJ7e+MsmTl
XFG9at63hNGy4n4h5HXGtm+ADmqx3943NjeXU5J4UkdDfjQDV+lWGxd7xw9vH2iz
eNShgg8o4JQCLEFj2+jt
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:20:50 2026 by rpki-client