Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/3139392e3132372e34342e302f32322d3234203d3e20383334.roa
File:                     3139392e3132372e34342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          ygczQNQRsjfhNpp9Y1APLvlRWAcm0uz2enQQiYA0+9Y=
Subject key identifier:   40:23:AC:AB:50:A9:A6:07:BD:68:F7:C0:02:2B:14:82:D5:7F:32:80
Certificate issuer:       /CN=dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667
Certificate serial:       4CBE952C79FD44371680651107E9E97BE8A8EEF4
Authority key identifier: C1:3E:8D:86:AA:B6:E2:39:8C:19:6E:99:66:55:DE:9D:EE:8E:3C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/3139392e3132372e34342e302f32322d3234203d3e20383334.roa
Signing time:             Thu 05 Nov 2026 20:38:09 +0000
ROA not before:           Thu 05 Nov 2026 20:33:09 +0000
ROA not after:            Thu 04 Nov 2027 20:38:09 +0000
asID:                     834
IP address blocks:        199.127.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/C13E8D86AAB6E2398C196E996655DE9DEE8E3C7E.crl
                          rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/C13E8D86AAB6E2398C196E996655DE9DEE8E3C7E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ea9d7579-0035-4da5-98c8-cea0cb517536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ea9d7579-0035-4da5-98c8-cea0cb517536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 19:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:be:95:2c:79:fd:44:37:16:80:65:11:07:e9:e9:7b:e8:a8:ee:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667
        Validity
            Not Before: Nov  5 20:33:09 2026 GMT
            Not After : Nov  4 20:38:09 2027 GMT
        Subject: CN=4023ACAB50A9A607BD68F7C0022B1482D57F3280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:a6:23:c1:4a:ed:55:38:b7:b8:a2:11:2b:
                    56:4b:72:e4:b1:db:a2:9b:3c:05:a6:58:dc:ed:b1:
                    09:a7:66:0e:62:fb:d2:92:68:db:ed:f9:e5:30:2a:
                    48:e6:c6:6a:fb:c8:4b:9a:1d:c7:75:f1:a9:c0:d7:
                    bf:94:36:78:86:f1:f5:72:8d:8f:7c:e2:d3:a5:ed:
                    7d:89:3b:ee:d9:bb:9b:bc:bc:3f:1c:6b:1a:97:05:
                    e3:44:91:a7:c4:b0:8a:73:55:dc:de:cb:79:1c:4c:
                    2f:7a:1e:b7:30:ee:99:36:3e:60:5c:db:26:1c:7c:
                    f9:62:50:2e:97:4d:2b:e7:14:ab:91:48:c8:22:6a:
                    af:2d:a6:00:2f:34:d9:25:e4:0e:a3:24:1c:93:f4:
                    ee:1f:2e:57:a9:eb:63:e5:87:6e:81:0b:30:d8:07:
                    0d:f9:2a:a7:98:b6:f4:2e:c7:08:42:0f:58:e1:03:
                    37:cf:d2:ef:41:a8:da:5f:b7:18:41:16:82:ee:97:
                    85:64:a5:67:61:00:58:04:e6:e7:4b:d2:47:33:82:
                    af:a6:39:f4:a9:cc:07:ac:7e:35:fe:b6:0d:c1:89:
                    ba:dc:26:13:8f:eb:f9:20:33:72:e7:10:15:b5:d0:
                    e8:5c:01:d5:78:4c:36:9e:e0:65:a2:72:9f:31:d3:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:AC:AB:50:A9:A6:07:BD:68:F7:C0:02:2B:14:82:D5:7F:32:80
            X509v3 Authority Key Identifier:
                keyid:C1:3E:8D:86:AA:B6:E2:39:8C:19:6E:99:66:55:DE:9D:EE:8E:3C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/C13E8D86AAB6E2398C196E996655DE9DEE8E3C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/3139392e3132372e34342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:7c:0b:7b:f5:c9:22:0d:18:41:92:e1:12:ef:01:cf:1f:de:
         3d:fc:e9:2f:cf:ef:39:5f:2b:a1:34:0f:7d:a0:36:ec:87:23:
         e0:4a:f5:08:79:12:2c:57:1c:de:d5:7f:a6:ab:12:46:e1:7d:
         2f:f8:61:88:75:f4:fd:2e:b1:d9:d0:4b:d0:23:03:37:46:51:
         6e:89:dd:34:5f:7c:6c:d3:e0:28:66:ed:3a:60:b2:de:97:f9:
         35:dd:9b:ec:a3:16:10:32:9b:bb:c9:3f:65:df:1d:f9:03:22:
         17:0d:b4:8c:6d:f1:e5:6f:3e:a1:fc:61:e0:59:13:90:54:f8:
         0a:6b:ea:35:bd:40:2e:e9:f0:29:fd:ef:15:0d:22:38:ee:d4:
         bc:9c:f0:90:78:f1:b8:c6:34:18:80:06:e4:00:77:97:b4:f0:
         1e:fc:0a:9f:be:95:1a:2a:a4:19:e3:e9:97:e9:c8:3a:b7:5a:
         6f:24:9d:d6:c3:1a:a9:48:f7:3d:cb:21:32:0b:10:3b:da:13:
         2b:80:e2:28:59:61:ef:8a:45:5d:18:02:02:6f:b6:3c:ca:dc:
         0b:e2:d3:fd:c6:1d:bb:b3:1c:d6:78:8d:de:57:f1:ab:7d:2c:
         81:28:f0:32:58:a1:39:68:da:25:44:4b:52:57:55:a6:89:b4:
         d5:5b:ee:f8
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUTL6VLHn9RDcWgGURB+npe+io7vQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGNjYjRmYzYyZjA3Yjc5Y2E0ZDJlMGU0ZTYzMDU2N2Qy
MjQxNGQ2N2E1ZjdiNGE2NjcwHhcNMjYxMTA1MjAzMzA5WhcNMjcxMTA0MjAzODA5
WjAzMTEwLwYDVQQDEyg0MDIzQUNBQjUwQTlBNjA3QkQ2OEY3QzAwMjJCMTQ4MkQ1
N0YzMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDCmI8FK7VU4
t7iiEStWS3LksduimzwFpljc7bEJp2YOYvvSkmjb7fnlMCpI5sZq+8hLmh3HdfGp
wNe/lDZ4hvH1co2PfOLTpe19iTvu2bubvLw/HGsalwXjRJGnxLCKc1Xc3st5HEwv
eh63MO6ZNj5gXNsmHHz5YlAul00r5xSrkUjIImqvLaYALzTZJeQOoyQck/TuHy5X
qetj5YdugQsw2AcN+SqnmLb0LscIQg9Y4QM3z9LvQajaX7cYQRaC7peFZKVnYQBY
BObnS9JHM4Kvpjn0qcwHrH41/rYNwYm63CYTj+v5IDNy5xAVtdDoXAHVeEw2nuBl
onKfMdPU8wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEAjrKtQqaYHvWj3wAIrFILV
fzKAMB8GA1UdIwQYMBaAFME+jYaqtuI5jBlumWZV3p3ujjx+MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzUwNjNkY2I1YjRiNTQyMjRhNzY4ZTE3NGRmODExMDcxLzAv
QzEzRThEODZBQUI2RTIzOThDMTk2RTk5NjY1NURFOURFRThFM0M3RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5L2VhOWQ3NTc5LTAwMzUtNGRhNS05OGM4LWNlYTBjYjUxNzUzNi9kY2Ni
NGZjNjJmMDdiNzljYTRkMmUwZTRlNjMwNTY3ZDIyNDE0ZDY3YTVmN2I0YTY2Ny5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzUwNjNkY2I1YjRiNTQyMjRhNzY4ZTE3
NGRmODExMDcxLzAvMzEzOTM5MmUzMTMyMzcyZTM0MzQyZTMwMmYzMjMyMmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALHfywwDQYJKoZIhvcNAQELBQADggEB
AJJ8C3v1ySINGEGS4RLvAc8f3j386S/P7zlfK6E0D32gNuyHI+BK9Qh5EixXHN7V
f6arEkbhfS/4YYh19P0usdnQS9AjAzdGUW6J3TRffGzT4Chm7Tpgst6X+TXdm+yj
FhAym7vJP2XfHfkDIhcNtIxt8eVvPqH8YeBZE5BU+Apr6jW9QC7p8Cn97xUNIjju
1Lyc8JB48bjGNBiABuQAd5e08B78Cp++lRoqpBnj6ZfpyDq3Wm8kndbDGqlI9z3L
ITILEDvaEyuA4ihZYe+KRV0YAgJvtjzK3Avi0/3GHbuzHNZ4jd5X8at9LIEo8DJY
oTlo2iVES1JXVaaJtNVb7vg=
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:45:05 2026 by rpki-client