Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38342e302f32322d3234203d3e20383334.roa
File:                     3139392e3233352e38342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          RAPocGQHb7VpyC/tfowwvBAnr1WFvB4jeshzuy8SKWo=
Subject key identifier:   48:99:48:35:57:29:E5:1B:B5:84:46:6B:2A:6B:CE:51:78:78:72:13
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       22EBBE5C39BB6C4D6641F89D852615BC3911EEB0
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38342e302f32322d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:be:5c:39:bb:6c:4d:66:41:f8:9d:85:26:15:bc:39:11:ee:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=489948355729E51BB584466B2A6BCE5178787213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:26:72:41:dc:79:49:14:0d:bc:71:28:94:
                    43:e5:22:17:a1:48:a5:7c:f9:21:86:97:31:18:c1:
                    f4:1a:8c:d8:cd:c8:92:f3:88:97:96:8f:f4:db:f0:
                    06:f6:d2:12:12:fd:28:86:9d:c8:83:45:2a:b3:b2:
                    c1:38:ad:a3:11:ab:b4:d3:d9:be:2b:fd:44:8f:de:
                    c0:50:30:1e:b4:4e:3a:32:2f:ea:b2:ee:16:a0:a4:
                    1d:64:95:68:a9:95:e2:6c:5f:4d:c3:a4:83:40:1d:
                    c2:e6:01:3d:b8:82:92:b2:83:d3:db:53:b1:1a:b1:
                    f8:45:95:13:81:bc:d7:da:24:61:bb:4f:86:25:2d:
                    1e:33:45:66:2d:1c:7d:4f:b1:38:0e:01:c0:91:08:
                    6f:02:64:70:22:03:82:1b:54:a1:54:96:fc:91:c9:
                    58:6d:86:b9:7a:16:b9:c4:70:8b:03:1a:2d:1f:42:
                    59:9c:02:77:d8:9f:5f:f0:51:39:4c:1c:37:50:f2:
                    74:09:92:67:43:43:46:81:58:69:40:39:21:a9:d7:
                    65:7e:c5:77:f4:2e:51:72:1d:eb:82:ef:60:d8:90:
                    cd:03:be:a2:9d:c8:0d:ab:6e:5e:a4:9b:52:58:53:
                    00:28:93:8c:eb:16:21:3c:00:48:39:13:00:17:3d:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:99:48:35:57:29:E5:1B:B5:84:46:6B:2A:6B:CE:51:78:78:72:13
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:cb:0e:ac:e6:7b:46:87:55:14:da:81:b6:ae:bd:cb:ce:bb:
         81:6c:ae:3c:b6:ac:11:ef:e7:94:dd:37:d0:56:f0:23:20:bf:
         03:61:05:d9:52:61:30:c1:65:bd:84:41:4e:10:3f:64:2a:98:
         80:50:a2:d2:13:50:4d:b5:17:17:c4:2d:47:2c:8f:2f:d8:27:
         96:05:1e:41:26:ba:29:e3:b3:13:4c:37:1e:ff:0b:33:96:6f:
         56:ab:39:af:40:01:f1:57:3d:50:0e:f2:a8:4c:da:f4:18:be:
         d9:5b:4f:61:e5:72:18:88:58:fd:79:e6:56:1e:b9:24:36:29:
         4b:e5:37:3d:3f:10:02:7b:51:cd:eb:28:08:cf:ce:55:76:8b:
         7b:48:55:7a:fa:de:ca:a6:ac:54:46:97:5e:49:ab:68:08:cb:
         4f:f6:5d:b9:de:2b:d2:2c:2d:dc:40:0f:63:53:e4:9e:76:3c:
         a3:0f:43:fe:f0:d1:ba:47:e7:f7:45:b0:33:71:9e:7b:d8:c8:
         a4:5d:d3:ae:83:df:19:59:5d:3a:3d:cd:1c:11:6d:46:9c:69:
         d9:e6:16:15:88:33:9d:1f:a1:5d:8f:e0:b0:bf:4f:8c:7b:b3:
         66:ec:15:56:05:df:90:9a:4a:7d:cd:bc:12:6f:35:e8:10:ed:
         74:03:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:21 2026 by rpki-client