Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38312e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e38312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          B3UTnABNrOf+0XfJ/mr7yMNaa3Io0NNbIkwgLVxZHMM=
Subject key identifier:   96:77:0D:6D:34:CD:D8:D6:DF:A0:6A:49:0A:87:8E:22:CD:FA:05:F3
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       17560BE7DD6D605FA645A2537F16793D545BA96C
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38312e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:56:0b:e7:dd:6d:60:5f:a6:45:a2:53:7f:16:79:3d:54:5b:a9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=96770D6D34CDD8D6DFA06A490A878E22CDFA05F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:e3:03:fa:5d:e4:be:3f:f3:33:34:23:38:
                    fe:d3:50:b9:39:51:e0:eb:00:f3:60:86:c3:c5:d6:
                    08:41:37:a5:ee:9f:ba:05:a7:8d:93:72:c3:88:aa:
                    9d:3b:b4:45:60:3d:1a:72:5c:73:22:cf:09:eb:48:
                    08:c9:fb:c2:6d:0b:7d:9e:c0:0e:9e:05:a4:89:0f:
                    25:07:ee:f5:c7:55:36:00:d5:1d:8f:14:0c:b7:11:
                    af:68:30:6c:38:93:75:47:08:9c:a0:f1:e2:a9:dc:
                    52:39:41:fe:22:e7:bb:cc:76:bd:1e:d7:7a:8b:1f:
                    ea:d7:17:48:66:0e:77:02:4f:5b:88:15:69:6c:51:
                    1d:f5:5e:a3:9d:6a:f0:5c:c7:d7:bf:35:d6:19:ad:
                    b5:90:6d:b4:83:ae:e2:86:01:a0:7d:35:d8:cd:09:
                    f3:e8:cd:76:6b:b2:59:0b:06:2b:4d:e7:10:cf:16:
                    39:78:fb:12:f9:12:6a:ef:22:6b:cd:94:1d:e9:a7:
                    1e:44:b9:a1:2c:26:35:31:04:31:0e:2c:a4:5c:d3:
                    68:db:78:9f:5e:6f:bc:3d:03:fe:31:76:b5:c4:00:
                    ec:6c:b4:56:75:14:f9:4d:0b:7e:d4:1e:ce:80:1e:
                    94:4e:06:f5:39:e2:94:ca:6d:aa:c7:1d:1f:7b:d6:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:77:0D:6D:34:CD:D8:D6:DF:A0:6A:49:0A:87:8E:22:CD:FA:05:F3
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:45:d1:02:4c:6f:a2:3e:a2:44:a8:dd:c3:52:e3:a9:86:
         c1:09:60:4e:1d:1e:27:11:b1:9a:c9:dc:87:01:0d:99:d9:47:
         9d:5e:9a:6f:e3:ab:c3:fe:38:ac:23:15:db:75:39:26:88:bc:
         f1:f3:d9:dd:4d:c2:e6:39:bc:e2:aa:f4:6e:cb:71:bc:77:06:
         15:4a:e4:92:79:0e:c0:78:90:2d:b9:5d:65:5d:ae:6b:1d:f2:
         3f:38:42:5c:60:0e:1a:39:ca:28:10:6f:5a:14:1a:ea:94:df:
         bd:62:ce:11:ce:a3:8e:f5:b3:d1:c4:8e:20:56:a9:a1:b6:a4:
         07:7b:e1:3b:88:a5:4d:f3:aa:a7:6e:37:9c:0e:0d:f1:52:51:
         7c:90:53:12:31:30:9b:51:62:fd:ae:7f:e4:6d:1d:b9:c6:96:
         52:9f:07:a9:48:49:f6:5d:27:ec:45:4a:f0:d1:3d:ec:e2:79:
         bc:00:f1:49:ca:9d:17:ab:58:7f:32:0b:1d:c5:33:c1:85:99:
         4a:ca:36:6a:5a:3e:6d:b9:a6:5c:fc:fb:1a:b6:06:cf:58:3a:
         3a:8b:e4:89:18:cc:8a:8f:b1:4f:a7:73:a9:74:2a:f8:34:fb:
         cd:05:1d:b6:6a:56:20:17:07:b0:27:64:40:cb:af:90:49:a7:
         f2:43:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:23 2026 by rpki-client