Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39362e302f32342d3234203d3e20383334.roa
File:                     3139392e3233352e39362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          KWZE9GzkmHlGRc1w58Db9A9Xl0+a1fxMxn7T1tTI+c0=
Subject key identifier:   8E:C8:CB:CF:0C:9E:FC:DA:A6:59:76:BA:E9:C5:69:D3:FA:D6:D8:0A
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       515AA2E1425DBEC9B1C3900A9DA60D05A8FF0AAD
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39362e302f32342d3234203d3e20383334.roa
Signing time:             Sun 27 Sep 2026 07:33:32 +0000
ROA not before:           Sun 27 Sep 2026 07:28:32 +0000
ROA not after:            Sun 26 Sep 2027 07:33:32 +0000
asID:                     834
IP address blocks:        199.235.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5a:a2:e1:42:5d:be:c9:b1:c3:90:0a:9d:a6:0d:05:a8:ff:0a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:28:32 2026 GMT
            Not After : Sep 26 07:33:32 2027 GMT
        Subject: CN=8EC8CBCF0C9EFCDAA65976BAE9C569D3FAD6D80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:e6:1d:ba:1c:ef:f2:59:54:a0:bc:ed:60:
                    73:c8:da:88:26:9c:63:82:39:f6:48:4e:2f:45:b6:
                    cf:31:8d:79:0a:0b:5e:14:22:ce:8b:a1:4e:d9:91:
                    b8:09:c3:4c:99:5e:a4:2b:b2:0d:74:2a:23:a7:58:
                    11:97:82:ef:7f:57:d4:93:15:f2:7d:8c:ab:90:03:
                    e5:ca:47:a5:d9:cf:99:03:5f:23:2a:a6:d6:03:2c:
                    38:c1:8e:c7:83:61:d0:a9:f5:b1:12:e2:44:56:f2:
                    7e:08:79:eb:f2:d9:66:d2:01:36:b6:96:0f:7a:3f:
                    2b:f6:ec:5f:02:5f:27:41:d9:1a:3a:74:e2:b5:c8:
                    b9:b3:46:fb:f7:e3:ae:8b:eb:6a:d9:bf:f7:d0:c0:
                    da:a7:dc:d5:c5:4f:83:80:f5:c0:df:01:e8:14:ef:
                    84:7a:b8:04:a8:42:8d:6d:be:bb:a1:a5:1e:d9:b2:
                    e6:66:fe:c4:8d:db:d5:57:a1:14:34:0a:d0:41:46:
                    ff:a8:86:b2:ee:48:39:2c:d7:b1:7d:93:95:29:a0:
                    70:45:b1:ce:79:c2:78:a1:37:56:4c:69:a1:57:be:
                    c6:82:28:0a:1e:9e:77:92:53:24:98:84:fa:6d:a3:
                    2c:78:ed:d6:dc:18:8d:07:e9:77:22:f1:89:84:84:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:CB:CF:0C:9E:FC:DA:A6:59:76:BA:E9:C5:69:D3:FA:D6:D8:0A
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:ef:b9:75:39:1a:5f:e1:5a:61:1e:e9:6b:9a:04:ea:a1:73:
         e4:a3:4f:72:81:fb:1f:15:73:55:d8:ae:8c:d6:08:b4:73:6a:
         0c:58:04:db:21:f8:89:e9:04:6b:7a:96:2e:26:57:e6:88:3e:
         1c:c6:3e:d9:4d:89:d2:5d:b3:41:d6:9e:1f:35:a7:37:75:df:
         1c:a2:74:c0:3e:3e:0b:b3:38:af:1b:b7:f6:d5:cf:e3:dc:d6:
         1e:4f:60:03:33:ab:8a:16:4c:a7:af:8a:4c:9b:9f:44:2f:11:
         4f:3d:ec:4c:ec:65:a7:e6:8d:bd:d9:cb:b2:7c:bd:a8:57:f4:
         61:bd:19:a6:d4:73:b9:ec:43:b1:50:c6:1e:cf:34:bc:02:a3:
         02:4f:97:29:53:45:ea:39:9d:6b:d2:4a:2a:4b:9c:9f:27:cf:
         9c:81:c5:7e:4b:bd:c4:59:e9:8e:e8:2f:22:82:26:44:b2:a7:
         e0:5c:e6:6b:12:90:a0:54:4d:1f:fa:90:cd:aa:ea:9a:06:49:
         09:08:e8:67:e7:3f:22:0e:4c:e1:a2:99:26:5a:02:25:da:9b:
         2b:53:14:ec:cf:a7:f2:0a:55:04:32:0d:84:37:ea:fb:95:bb:
         b7:ac:d0:76:53:ba:82:58:f0:c6:b1:ca:c3:37:8a:9e:21:9f:
         cc:f0:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:23 2026 by rpki-client