Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39372e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e39372e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          /3Rn1eIIL0nmBQbPlhAkb3tClEFm1Cjhi+9HJGPkNUA=
Subject key identifier:   DC:3A:B0:2B:9B:30:70:C2:EA:E7:BF:E2:1E:C2:ED:F7:EF:F2:40:2A
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       658ED1030274DAC9BE6DF613946D7613A3B9F50E
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39372e302f32342d3234203d3e20383132.roa
Signing time:             Sun 27 Sep 2026 07:32:59 +0000
ROA not before:           Sun 27 Sep 2026 07:27:59 +0000
ROA not after:            Sun 26 Sep 2027 07:32:59 +0000
asID:                     812
IP address blocks:        199.235.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8e:d1:03:02:74:da:c9:be:6d:f6:13:94:6d:76:13:a3:b9:f5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 27 07:27:59 2026 GMT
            Not After : Sep 26 07:32:59 2027 GMT
        Subject: CN=DC3AB02B9B3070C2EAE7BFE21EC2EDF7EFF2402A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:76:84:07:b4:df:e9:db:90:20:d6:59:ee:
                    91:ae:56:29:c6:a8:87:88:52:b6:e3:ee:69:0e:78:
                    b8:ac:86:ca:13:f8:b0:25:15:b1:7a:f0:10:99:16:
                    13:44:b2:3c:57:bd:78:0a:6d:31:fc:70:46:c1:b6:
                    47:1d:28:ed:a5:bc:9d:25:2f:15:9d:01:94:bd:95:
                    be:4c:7c:eb:19:19:1c:a6:60:94:8d:56:b4:d7:c6:
                    2f:26:a7:c3:5e:9e:00:72:13:6c:b1:d9:ff:8f:47:
                    4a:fc:f9:4d:58:0b:94:17:be:f4:8f:26:45:9a:51:
                    eb:38:bf:de:c8:aa:eb:e1:ea:6e:b7:2e:0e:a7:c9:
                    f4:9c:dd:f0:f7:f2:40:1c:96:0f:3b:d4:a5:ca:e9:
                    24:db:07:f1:9d:c6:23:ee:82:52:87:16:be:16:2b:
                    60:95:ef:3d:a0:f5:3b:71:f9:29:f0:56:6d:2b:a1:
                    92:bc:43:70:44:79:e4:d0:4b:98:c7:80:0b:1c:00:
                    e2:71:69:34:00:88:20:e3:98:26:46:d3:5b:a6:d7:
                    52:86:e1:9b:b3:88:a7:91:75:55:c8:2d:a5:c4:34:
                    37:41:9a:1e:ce:5c:22:65:78:c5:4a:7e:f8:78:65:
                    d9:0d:37:fa:c1:70:12:1c:44:fe:49:8d:47:41:34:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:B0:2B:9B:30:70:C2:EA:E7:BF:E2:1E:C2:ED:F7:EF:F2:40:2A
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e39372e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:7e:56:94:7a:f5:7e:66:e7:99:d1:b4:1b:3f:fe:94:25:
         ed:d6:d2:ad:f5:32:ab:52:59:59:d6:05:87:d8:be:cf:f7:40:
         2d:1e:6c:6e:ba:45:cd:b6:d6:49:ee:a5:88:42:be:0b:80:2d:
         50:59:8b:d8:67:3e:1b:e4:6c:eb:5b:e4:bf:79:d9:b4:ab:eb:
         02:67:63:a9:9f:2e:d7:96:d6:df:db:cc:76:48:d3:e6:db:8f:
         05:5d:db:0e:bf:4c:67:ec:74:4f:95:b5:32:77:97:06:00:d7:
         cb:6d:98:cf:05:4d:1a:0a:7b:d4:3d:93:71:b0:df:92:d6:b5:
         f4:81:88:0a:d4:74:96:67:6e:70:0c:8b:ed:5d:cf:21:75:6e:
         46:33:2c:fd:af:59:c9:0a:d5:90:75:05:96:82:0b:50:e1:72:
         9b:01:77:a4:3f:aa:88:fb:25:91:ea:96:50:ea:d1:b6:9c:63:
         1e:b6:56:25:29:23:f4:a6:49:99:2f:d8:a9:dd:9f:de:f5:e4:
         95:43:94:7b:11:9a:3d:51:d4:fe:5a:56:28:ec:20:d0:8f:42:
         c7:8b:de:ea:5b:2c:c6:2e:c7:45:ca:5b:f0:d4:63:53:cb:27:
         4a:24:f6:69:54:cf:d6:1d:e1:ee:18:45:5d:fc:f3:10:55:27:
         11:48:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:24:13 2026 by rpki-client