Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38322e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e38322e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          dZmZKFThI0Y3hdOzshymf3g9FxTv3+wMMwWpLUH+PXs=
Subject key identifier:   86:24:54:26:44:73:BA:BD:1E:A4:85:B5:C0:97:10:79:94:39:B1:3B
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       6B411797FD34256867F91047BE1663479D48BF28
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38322e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:58 +0000
ROA not before:           Sun 27 Sep 2026 07:27:58 +0000
ROA not after:            Sun 26 Sep 2027 07:32:58 +0000
asID:                     812
IP address blocks:        199.235.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:41:17:97:fd:34:25:68:67:f9:10:47:be:16:63:47:9d:48:bf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:58 2026 GMT
            Not After : Sep 26 07:32:58 2027 GMT
        Subject: CN=862454264473BABD1EA485B5C09710799439B13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:2c:d0:04:72:1b:0c:0d:e9:8e:a6:d1:0a:
                    70:20:2e:8f:97:9c:18:f8:d5:6e:62:a7:d7:de:de:
                    5f:b0:8b:c8:47:fc:4d:4b:e8:a1:81:ae:89:6a:47:
                    d9:ee:0a:5f:fa:a3:b9:2e:df:b1:6a:55:a0:a2:94:
                    9e:55:aa:dc:9d:9f:75:9a:a1:a5:43:3f:15:57:32:
                    91:08:c8:5d:55:22:fd:af:6f:aa:0d:77:83:22:e4:
                    9a:7a:ac:5c:dd:94:ad:c1:82:85:cb:aa:86:17:18:
                    01:5f:de:02:cb:e8:85:dc:58:e8:a7:18:ad:2d:70:
                    85:00:f1:88:38:a0:25:ec:c7:e2:f3:28:0f:a7:28:
                    a0:d4:52:e8:92:89:8a:42:05:fb:3d:df:74:2a:8e:
                    0d:6a:f5:9d:6a:79:5e:69:f9:af:24:f0:42:ea:8d:
                    2d:cc:4a:2b:3d:72:e7:44:17:d3:e0:be:1a:fe:18:
                    fa:ba:74:69:97:86:52:cc:44:7d:57:9e:ed:d7:f6:
                    ab:99:43:a9:41:51:b7:9c:84:f3:27:bd:f1:4f:88:
                    79:54:e0:36:54:e9:70:b7:df:a6:2c:8b:36:e4:b8:
                    dc:13:45:b5:b1:b4:e1:2f:62:78:a4:54:b2:a6:a2:
                    c5:fd:1f:9b:68:cb:d6:49:dd:ca:71:c4:38:5b:db:
                    9e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:24:54:26:44:73:BA:BD:1E:A4:85:B5:C0:97:10:79:94:39:B1:3B
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38322e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:b1:de:f0:04:68:23:a1:cb:a2:0a:0f:b3:b0:be:0c:70:99:
         da:dd:02:3e:c2:b0:13:04:38:b8:eb:be:76:9f:71:02:1e:8f:
         50:10:b7:bf:da:a2:bf:b4:b0:2a:8b:16:d7:c1:ba:04:96:6e:
         b3:9f:2f:66:df:4c:53:61:53:85:cb:4d:2c:5b:6d:93:9a:f2:
         5d:e5:a5:55:74:c2:85:e1:d0:96:26:19:d2:28:aa:4c:43:1a:
         24:11:e0:7d:14:26:9c:41:c5:a5:18:22:24:56:b6:ab:b0:2c:
         95:37:6a:79:7d:24:a6:6a:d4:b6:91:75:46:fd:c6:d1:44:e4:
         5b:d2:97:c7:6d:88:4c:a1:c1:a0:fd:fe:76:14:64:84:3c:ad:
         1f:80:e4:b7:28:19:5c:c4:ef:fa:47:96:50:ae:9a:26:9e:d3:
         78:57:74:ac:6b:9c:39:ed:ec:96:30:a0:7d:89:4e:1e:28:43:
         c1:0a:96:2e:ce:7c:b8:95:92:e5:ec:15:d7:62:cb:34:26:50:
         7f:42:f0:2f:43:e1:2e:b3:45:39:0a:b9:1f:1e:46:ce:06:42:
         6c:61:7b:49:35:64:0c:ee:0a:ab:00:0e:b0:70:40:cc:c8:bb:
         fc:00:05:66:5f:96:da:08:16:71:33:2b:00:f9:2d:1f:ae:c1:
         da:88:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:27 2026 by rpki-client