Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38302e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e38302e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          0fGYB04hLLKYYigwnopbXaAkVH+q1UdgpEFWAU589C8=
Subject key identifier:   17:15:DD:F4:5B:81:FA:FC:27:C5:00:24:41:B6:BD:47:F8:0D:7E:96
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       56135FEFA47EFE42F54BB423C4467A35F867FB
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38302e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:59 +0000
ROA not before:           Sun 27 Sep 2026 07:27:59 +0000
ROA not after:            Sun 26 Sep 2027 07:32:59 +0000
asID:                     812
IP address blocks:        199.235.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:13:5f:ef:a4:7e:fe:42:f5:4b:b4:23:c4:46:7a:35:f8:67:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:59 2026 GMT
            Not After : Sep 26 07:32:59 2027 GMT
        Subject: CN=1715DDF45B81FAFC27C5002441B6BD47F80D7E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:d7:35:3d:3d:7d:5f:7b:97:d0:39:24:21:
                    49:96:20:b5:ca:06:62:e8:a4:59:3d:36:b3:f1:7a:
                    31:bd:f4:41:e4:a0:85:d9:d5:5f:a1:c0:bd:f0:60:
                    02:b6:11:d8:36:95:83:68:df:85:8b:7a:8e:7e:75:
                    61:b0:a0:01:c3:2e:29:76:07:74:6b:f9:0a:fe:06:
                    bb:b8:26:32:67:e9:c0:69:a9:28:1b:6f:0b:65:45:
                    6d:93:6c:39:91:a5:62:bf:29:2c:a8:b4:dc:e0:86:
                    8c:41:b7:2f:1f:9a:51:7b:94:80:8d:5c:17:9a:da:
                    54:92:6a:71:33:08:d5:dd:59:24:02:57:70:c3:51:
                    e6:2f:d3:fe:52:5a:75:3c:1d:a8:36:e5:f5:cf:0d:
                    0c:ce:40:f7:a0:69:d3:48:20:72:1c:38:cd:fd:b8:
                    f5:7c:e9:e3:df:6e:e6:90:89:d9:4b:8f:4c:4c:48:
                    66:e5:b3:8f:69:5e:7a:73:88:6f:54:c5:3f:5f:3e:
                    d6:73:87:14:cf:4f:3b:d8:d3:2b:c6:65:1b:e3:91:
                    21:fa:7d:e3:05:66:12:a2:95:55:31:f9:5f:98:4c:
                    0d:70:e7:f9:6e:e1:f5:3d:e7:db:73:e2:6f:a3:43:
                    f1:68:53:80:d3:64:33:2f:4e:58:78:c0:8a:45:43:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:DD:F4:5B:81:FA:FC:27:C5:00:24:41:B6:BD:47:F8:0D:7E:96
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38302e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:f8:92:43:02:10:c5:cd:01:f4:e8:c3:a9:02:2a:29:dd:
         fd:60:00:c3:ec:65:65:5a:f7:cb:6e:1d:0b:9e:aa:0a:a7:2c:
         2b:a5:0b:61:bc:ae:62:8b:fd:3c:81:9e:f0:50:4f:e1:91:47:
         82:2a:9d:a0:6c:ba:e2:bd:c3:9b:3f:5b:49:9c:23:79:49:9e:
         96:cf:09:21:3d:04:62:64:52:1f:fe:5a:29:60:68:eb:ad:c0:
         2e:ac:df:bd:0f:76:4c:b5:3f:ae:b3:b4:5c:79:99:27:6d:0d:
         17:e2:ea:93:83:a8:2e:4f:19:10:45:a1:ea:31:e8:51:12:1c:
         bb:49:b0:55:54:86:f2:8a:78:2c:94:dc:70:0a:96:4a:62:38:
         2a:c0:e6:d4:74:36:83:c3:7d:e2:43:5e:0b:e3:45:4e:f3:6e:
         36:23:0a:96:bc:7e:83:4a:d3:b6:7a:3f:a7:c2:1e:32:78:38:
         5b:42:e2:f8:31:54:f4:d5:7d:fb:8e:65:15:5c:cf:4d:7b:e0:
         9f:db:2e:4c:b0:1b:ae:be:9e:a0:7a:cf:4f:ec:ed:05:41:ae:
         8e:ea:09:2c:62:98:ff:ee:3c:6f:3a:ee:90:b3:62:d5:a9:5d:
         1c:6a:74:6f:51:aa:ec:34:c0:cf:85:f7:86:aa:fb:e3:1f:bb:
         61:aa:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:22 2026 by rpki-client