Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39312e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e39312e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          yuRQgPV6vkVDyDWSwM0BaO++MXpVjJtBECz3KFhhtvY=
Subject key identifier:   57:E6:6E:02:89:C1:1A:C5:BA:AD:9F:D9:21:71:AB:B3:BD:53:5B:9C
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       14ACE72C3209A9C4E64C9305DE11B07C7F54E698
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39312e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:57 +0000
ROA not before:           Sun 27 Sep 2026 07:27:57 +0000
ROA not after:            Sun 26 Sep 2027 07:32:57 +0000
asID:                     812
IP address blocks:        199.235.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 05:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ac:e7:2c:32:09:a9:c4:e6:4c:93:05:de:11:b0:7c:7f:54:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:57 2026 GMT
            Not After : Sep 26 07:32:57 2027 GMT
        Subject: CN=57E66E0289C11AC5BAAD9FD92171ABB3BD535B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:f4:2e:c2:43:06:77:d6:38:28:a4:76:fc:
                    ba:07:1c:26:3c:05:64:ba:bb:3d:a4:37:b3:a6:d6:
                    6c:50:f1:cb:98:b9:78:34:3b:43:7a:8a:52:17:c5:
                    34:d7:fe:a9:15:33:14:c2:a7:d5:36:05:9e:c8:0f:
                    35:b4:12:3c:37:14:7d:3e:e3:6a:43:63:30:d3:35:
                    62:dd:ab:91:59:b1:f3:68:80:72:bc:55:85:7e:9a:
                    f2:55:d7:6b:0d:01:08:69:4c:22:92:2d:1b:bf:b6:
                    2f:14:4f:51:95:6f:89:34:dd:e0:1e:7e:7a:6f:a4:
                    86:ff:ec:5d:8c:32:c6:27:a3:f5:c3:f0:69:53:93:
                    8c:6e:fa:23:67:1e:3e:7e:4f:f9:d7:fd:c7:c0:1f:
                    35:7d:42:f5:62:cd:04:1c:90:8c:13:27:b7:bf:4a:
                    69:f8:cd:5b:ab:f3:5c:c4:c7:a3:50:31:86:33:e9:
                    1a:e6:74:50:9d:b6:41:e2:63:4a:c0:f8:87:e5:49:
                    a0:36:c6:e1:72:a4:5e:db:ba:96:ce:d4:99:03:cc:
                    05:c8:35:08:44:45:ed:31:1c:35:0b:7a:c2:68:ae:
                    bf:57:af:3e:35:e6:91:a2:25:0b:99:f3:cf:a0:d1:
                    35:86:ac:43:74:b2:85:93:54:05:3e:d9:b3:73:c7:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E6:6E:02:89:C1:1A:C5:BA:AD:9F:D9:21:71:AB:B3:BD:53:5B:9C
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39312e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:49:a4:ca:54:ba:27:2d:6b:53:0d:03:be:46:69:97:3c:
         55:ca:9a:fc:b2:3c:f5:c6:ed:75:c7:d8:47:aa:45:86:f9:65:
         c9:54:b5:3b:4a:86:ef:51:a4:0f:7a:08:18:8f:ca:ea:eb:2d:
         2c:4f:96:da:51:65:82:b7:0e:92:ac:7c:41:bb:78:89:13:6d:
         ad:9e:13:20:85:62:19:10:b6:d8:86:5d:3c:53:e2:6c:cd:ad:
         c2:cf:3f:09:7c:ef:52:2a:65:85:fa:5e:31:2a:ea:bd:77:a8:
         01:d2:ce:0d:19:d1:e2:36:31:a8:a6:0f:b4:99:21:e9:67:c9:
         35:21:52:1b:cb:bc:65:9f:af:e5:27:be:f8:13:ec:58:6e:77:
         4a:ad:20:2b:08:82:46:0e:34:a3:81:93:d0:cb:e4:90:a0:9f:
         19:82:eb:73:56:bb:95:2e:b0:ad:b8:e7:9f:68:ca:24:e4:fb:
         8c:d2:e6:0a:cb:45:f4:f0:82:1f:e3:68:ec:75:ad:75:5f:4a:
         9d:2c:e4:ce:f1:14:35:18:09:05:a3:de:23:b8:29:93:05:0b:
         e1:3f:18:bd:bc:2b:a0:05:f0:a3:3a:23:fd:2a:0c:d8:6a:b2:
         76:ad:a1:a7:19:20:03:59:24:e7:a4:c7:ce:35:b5:9e:b3:d6:
         de:65:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:06:22 2026 by rpki-client