Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39322e302f32322d3234203d3e20383334.roa
File:                     3139392e3233352e39322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          9HWWCUHxW5Wgrd73QAPkSSF7JVgD8o3EoJMSNsYp8H4=
Subject key identifier:   11:88:04:3E:BB:D3:E7:EF:37:4C:8E:43:16:EB:13:2A:31:38:D5:AE
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       7A3BCDA93B3FABD5DA0C4953E7A65F9DD491F83B
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39322e302f32322d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:31 +0000
ROA not before:           Sun 27 Sep 2026 07:28:31 +0000
ROA not after:            Sun 26 Sep 2027 07:33:31 +0000
asID:                     834
IP address blocks:        199.235.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3b:cd:a9:3b:3f:ab:d5:da:0c:49:53:e7:a6:5f:9d:d4:91:f8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:31 2026 GMT
            Not After : Sep 26 07:33:31 2027 GMT
        Subject: CN=1188043EBBD3E7EF374C8E4316EB132A3138D5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:e5:20:65:68:e9:37:bb:92:1c:bf:17:68:
                    fe:1b:34:00:25:ec:61:35:f4:9c:2a:c2:2d:c8:53:
                    28:ea:98:c2:c4:ee:9f:76:65:c7:6f:89:f7:c3:f7:
                    d1:1b:86:c5:4a:e1:65:4a:26:63:86:59:06:f3:43:
                    36:ae:80:a9:b3:0b:5e:96:9c:43:d8:b2:bd:2e:11:
                    22:01:03:db:da:71:c8:24:15:54:2a:43:5e:f8:6c:
                    24:f5:a2:ff:40:59:a5:41:a1:25:87:a5:7f:ae:e5:
                    c5:26:f9:4c:97:1f:a9:b0:c6:44:9a:da:b1:e0:e0:
                    8e:da:0f:36:3e:db:fd:06:43:c2:6d:d6:d1:db:a7:
                    8f:04:4d:7c:80:cf:b8:82:aa:08:47:c9:d5:b4:43:
                    f3:f9:79:69:c1:bf:c2:bc:58:0d:d8:e1:26:f0:ed:
                    b1:8a:d9:82:51:71:ab:78:b6:4c:b2:12:88:6c:53:
                    31:2d:46:ea:33:1b:74:ff:b0:02:f9:87:d0:12:6f:
                    15:c8:cf:65:ef:82:df:89:93:26:d7:b9:74:23:4e:
                    8d:02:ea:ed:4e:06:69:93:c7:95:31:21:bb:ad:9b:
                    b9:33:3a:3b:d2:8e:ab:f3:39:1c:0c:f3:cc:fe:28:
                    fe:a4:e9:4b:7e:1a:5e:80:34:3f:85:f6:86:80:e5:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:88:04:3E:BB:D3:E7:EF:37:4C:8E:43:16:EB:13:2A:31:38:D5:AE
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:4e:6a:e2:39:e9:cd:f0:f7:29:7d:1c:1b:c2:0d:17:89:
         7c:b9:c5:9c:8d:9a:01:80:36:38:96:c7:2c:46:0d:9b:1c:6f:
         7e:00:82:52:dc:bb:de:2e:c0:64:9a:23:5e:43:5c:bd:35:b2:
         d2:4b:ca:f0:9d:ce:45:85:8c:6d:61:c4:26:a9:49:6d:be:e6:
         6b:2a:5d:94:fa:3b:a0:aa:11:fc:c7:32:66:9e:e1:93:9d:ca:
         a5:a4:8c:d6:5c:1d:1c:d5:ae:2a:62:06:69:20:7c:64:ff:34:
         77:e0:b3:b7:31:aa:2a:03:8c:93:bd:e9:68:ea:5a:5e:a1:69:
         2e:39:62:6e:c9:c4:2b:99:84:1d:44:f4:ec:ea:41:83:ee:7a:
         f9:af:a4:ba:64:15:84:19:9d:e1:d8:f4:c3:dd:ce:bd:29:59:
         1c:b4:81:68:1d:e2:6d:69:2b:7c:e3:d8:23:87:d5:2f:0a:8b:
         49:23:0e:92:3b:39:94:a2:6a:6e:e8:35:25:fe:ec:b0:e8:1b:
         6e:71:40:28:96:e4:fb:01:6e:58:b1:d9:a5:29:21:d8:bb:d7:
         a3:42:39:c4:1f:b5:43:7e:67:76:28:5a:98:30:1d:da:02:a2:
         7b:2f:92:6a:3f:10:fd:f4:b2:3a:74:24:74:c9:1f:3d:91:d5:
         a9:38:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:58 2026 by rpki-client