Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38332e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e38332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          BZgAZXGbwTI4CDdGgTMdAt4EUfwud65iZrMhfcG4Igc=
Subject key identifier:   C0:EE:2C:08:F0:24:2F:20:BE:DD:74:58:E1:07:0F:5E:76:AE:C1:4E
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       239947647794F7C32843E5C6E3DB968EADC5ACBE
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38332e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:30 +0000
ROA not before:           Sun 27 Sep 2026 07:28:30 +0000
ROA not after:            Sun 26 Sep 2027 07:33:30 +0000
asID:                     834
IP address blocks:        199.235.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:99:47:64:77:94:f7:c3:28:43:e5:c6:e3:db:96:8e:ad:c5:ac:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:30 2026 GMT
            Not After : Sep 26 07:33:30 2027 GMT
        Subject: CN=C0EE2C08F0242F20BEDD7458E1070F5E76AEC14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:6d:e7:f3:13:d0:18:29:af:f7:93:ff:70:
                    34:09:96:25:03:53:37:01:6a:50:a7:7d:c2:8e:4f:
                    8f:a8:62:69:87:b8:56:18:55:95:89:f0:51:5b:9b:
                    9f:0f:98:04:f8:9b:14:bd:96:cc:8e:42:be:a6:9a:
                    ba:1c:81:d0:fb:e9:d0:8a:bc:45:c8:d5:91:9a:d4:
                    90:64:21:32:aa:7c:9d:7f:a6:1d:e0:69:ab:2d:36:
                    45:13:a7:eb:f1:41:ff:66:87:29:53:21:91:26:7d:
                    fb:14:c2:de:96:24:c6:e5:5b:fa:81:40:cc:ca:0a:
                    eb:8e:28:1a:8b:ab:b3:01:36:e6:12:95:43:f3:44:
                    13:75:af:a4:00:16:ae:80:df:57:0f:b9:cf:b9:d9:
                    b0:c8:e4:9d:cf:dc:2f:f6:47:0d:30:84:df:b2:0a:
                    e2:0c:a0:a7:68:f1:79:c4:9b:74:d2:e5:9c:5a:1c:
                    0a:95:cc:4a:dc:51:7a:1b:1e:a8:90:fc:6d:54:ee:
                    8a:33:2f:56:3c:ce:1d:9a:3f:96:84:75:c7:3f:0e:
                    1d:ea:d7:09:0f:83:c3:aa:d4:6e:2d:ed:10:94:f2:
                    39:76:6f:4c:86:13:ba:3f:87:ea:97:88:38:a3:10:
                    6f:5e:90:dc:e5:89:0e:e7:dc:c2:8e:e9:16:1a:2d:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EE:2C:08:F0:24:2F:20:BE:DD:74:58:E1:07:0F:5E:76:AE:C1:4E
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:a1:e4:5d:bf:10:c9:88:c0:37:43:ea:71:d8:17:24:45:8e:
         35:a9:dc:d6:be:a2:f4:7b:74:b3:7e:16:e1:73:35:3e:4c:e3:
         7b:21:87:81:20:cd:c2:c6:30:47:31:a5:84:78:c2:96:aa:80:
         4b:38:2f:50:e2:e7:ba:d1:ad:37:b6:34:1e:5b:44:19:fc:f5:
         88:f7:bf:2d:e5:67:de:d3:ff:24:14:b5:a0:e0:d3:cf:4d:ba:
         80:a1:bd:20:fc:0c:64:bf:b6:df:ba:dd:9b:c1:89:28:8b:62:
         a5:66:da:dd:af:69:c5:b9:25:72:25:52:1d:91:3d:30:d8:7e:
         2f:18:e5:e5:20:ea:5b:02:1c:02:2a:dd:d9:0e:1d:78:8d:f0:
         8b:b5:7a:4f:1e:89:2f:28:18:22:07:fa:fa:00:8d:19:d3:33:
         0a:fb:16:d5:bf:25:14:86:1a:4a:8a:d9:f5:1c:bd:f3:66:6e:
         93:91:f4:a2:b0:e9:88:b3:3e:26:cb:00:4f:7d:57:df:1c:e1:
         27:ff:66:f2:33:56:2f:2a:fd:e6:01:86:ee:e8:f3:cd:07:bb:
         12:ac:ff:15:46:72:d9:93:d6:81:a8:67:7a:95:93:51:d6:73:
         af:4f:9c:f3:04:ae:6b:42:c8:a0:70:7f:45:7f:dc:d1:48:d7:
         00:d0:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:30 2026 by rpki-client