Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38382e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e38382e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          5G0CVAeWfutURK+41FlpTYbT+5iOzcyliPO4Ta4Q7Co=
Subject key identifier:   C3:B7:EF:FF:61:D2:0A:65:DA:89:56:83:B4:8F:47:DA:46:BF:75:1F
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       669E9B40DBE8DD352FCDF821753363805947A5AE
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38382e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:59 +0000
ROA not before:           Sun 27 Sep 2026 07:27:59 +0000
ROA not after:            Sun 26 Sep 2027 07:32:59 +0000
asID:                     812
IP address blocks:        199.235.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9e:9b:40:db:e8:dd:35:2f:cd:f8:21:75:33:63:80:59:47:a5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:59 2026 GMT
            Not After : Sep 26 07:32:59 2027 GMT
        Subject: CN=C3B7EFFF61D20A65DA895683B48F47DA46BF751F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:d7:89:a2:a7:42:e2:e1:e7:e4:74:ed:d3:
                    d4:33:ee:f2:ea:b8:0d:f5:fe:57:b8:d7:56:b4:45:
                    6d:80:c8:a9:fe:02:37:91:f3:fd:9f:eb:1a:ae:2d:
                    39:79:ec:bc:61:18:f3:17:3a:27:7e:ad:fe:13:96:
                    21:fb:23:2a:cb:4a:b4:37:89:a2:cb:67:dc:1b:1b:
                    01:93:1b:d0:6e:39:88:88:e0:99:c9:ca:64:bf:40:
                    dc:b2:ae:f7:22:f9:96:ef:65:c3:29:20:88:73:fd:
                    8b:56:9b:d3:bd:03:6f:e7:b2:9d:41:7f:b6:ec:96:
                    46:46:da:00:5b:ea:1d:79:7f:dc:93:a1:f5:5d:a2:
                    9e:8d:81:e9:1d:6d:15:0e:02:0a:b6:9a:87:50:00:
                    53:17:34:c9:00:52:d3:97:98:25:aa:77:a9:5a:85:
                    43:29:05:3a:00:4f:f1:51:94:aa:53:e2:01:79:b8:
                    82:81:ea:00:6a:dc:a5:c8:b7:f3:2f:3a:09:9d:09:
                    1a:b4:d0:8e:20:d8:85:a3:3a:41:2a:be:a6:16:1d:
                    de:af:a6:34:ed:38:13:c4:5b:93:97:55:32:88:83:
                    36:73:76:9b:3a:2f:f9:18:6e:4c:f1:19:27:30:14:
                    db:71:17:b3:39:97:1a:04:df:d1:82:43:15:3c:64:
                    a7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B7:EF:FF:61:D2:0A:65:DA:89:56:83:B4:8F:47:DA:46:BF:75:1F
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e38382e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:b4:1e:64:00:12:4a:51:a6:d1:44:82:c1:a5:96:de:d1:3a:
         8e:8a:53:13:9b:1e:72:2a:ac:fd:a2:2b:22:2c:46:8d:8b:53:
         7d:3a:b5:ed:69:c4:f4:16:64:17:8d:5a:d4:b6:a4:cb:52:50:
         b4:36:4f:f8:4e:c2:a8:fb:91:0a:8b:01:97:08:5f:47:fb:1c:
         c5:cd:fd:26:5a:c3:dd:d2:2b:15:48:19:22:be:03:e5:8a:f9:
         e7:c2:bd:4b:07:f1:65:8a:19:ed:b7:ae:4f:63:f0:6a:d8:28:
         84:4f:96:e1:00:21:e5:03:78:be:46:ba:80:c1:29:ee:e0:18:
         c8:ca:78:0c:0a:b1:a3:a0:2e:01:d1:ae:43:82:94:6b:ba:20:
         a2:03:3c:a1:e4:ac:2b:22:a1:34:30:24:51:2f:07:87:c3:82:
         b2:0b:5d:45:5d:d7:ba:84:72:49:07:2e:00:55:36:29:e5:bf:
         85:29:fe:6b:b5:fc:4d:25:5d:9f:88:17:ea:e2:33:7f:59:e4:
         61:db:41:33:2f:f8:8e:f2:3b:6f:c0:d9:db:b1:64:e8:69:c6:
         7b:01:68:a7:11:73:19:96:c9:77:eb:73:3c:9a:8d:b2:ee:ac:
         a9:cd:fc:e6:5f:4a:4d:5f:a9:a2:3c:16:d9:79:19:ba:eb:5a:
         0f:ab:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:27 2026 by rpki-client