Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e312e302f32342d3234203d3e20313432323430.roa
File:                     3139392e3233352e312e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier:          0is6DRuLYNOtnG8LxZvuBViVOgblDMdpiWeBCzRnYRs=
Subject key identifier:   B5:50:24:4B:4B:76:87:10:65:25:8F:C1:22:5B:CB:EF:73:51:3A:15
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       51F0401A046C2250A7A778C3806BED886E47AA58
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e312e302f32342d3234203d3e20313432323430.roa
Signing time:             Wed 23 Sep 2026 07:37:40 +0000
ROA not before:           Wed 23 Sep 2026 07:32:40 +0000
ROA not after:            Wed 22 Sep 2027 07:37:40 +0000
asID:                     142240
IP address blocks:        199.235.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f0:40:1a:04:6c:22:50:a7:a7:78:c3:80:6b:ed:88:6e:47:aa:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:32:40 2026 GMT
            Not After : Sep 22 07:37:40 2027 GMT
        Subject: CN=B550244B4B76871065258FC1225BCBEF73513A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:0c:4d:89:d1:6a:b6:35:e3:6a:6b:0b:74:
                    63:b9:15:91:e5:69:a6:fb:e2:9e:21:70:3c:9c:a3:
                    ec:41:10:d7:55:f9:41:e6:f3:42:cf:82:2c:e1:c2:
                    3e:4f:c5:23:b5:25:5f:9f:b5:58:14:d6:90:f0:a3:
                    9a:ce:00:2b:e8:c6:d5:e7:0f:c7:38:41:98:85:43:
                    78:fa:6c:14:94:b0:1f:a0:f3:a0:1f:79:5b:63:62:
                    f1:05:2a:1b:56:d7:fb:b6:53:e9:a1:b9:c8:b8:e7:
                    79:23:9e:cd:e1:ba:32:f0:b3:dd:71:69:26:11:0e:
                    89:d8:55:66:5e:9c:9d:a8:91:f6:29:13:72:9b:3a:
                    c9:bf:35:85:18:ff:e4:6b:5d:94:97:b8:55:5c:70:
                    e4:36:0b:51:03:f8:05:1c:7d:0a:f1:8c:d8:33:0a:
                    6d:29:12:75:ac:5f:a4:45:49:1f:db:26:97:87:8d:
                    e0:ba:a1:92:0a:33:28:22:cf:c8:50:a0:d3:49:0d:
                    45:db:21:42:72:1a:f9:d5:22:d3:c4:aa:ba:e6:98:
                    e1:b7:17:77:c3:db:3a:a2:07:7a:1e:cb:99:fd:9d:
                    ca:cf:fe:c8:f0:52:1f:7a:b3:95:fa:51:a7:6f:22:
                    34:f3:7b:9f:4a:7a:3d:69:49:b8:fd:3c:2a:1f:da:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:50:24:4B:4B:76:87:10:65:25:8F:C1:22:5B:CB:EF:73:51:3A:15
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e312e302f32342d3234203d3e20313432323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:37:57:e4:94:0e:31:1c:70:4d:b3:1f:71:17:aa:4f:66:52:
         26:2f:ee:7d:05:d1:ea:6a:92:3e:d7:e1:66:d6:37:f6:13:30:
         9c:c5:ad:17:0c:e3:16:02:7f:ec:1a:d1:23:79:04:c7:86:39:
         f0:cb:a5:95:39:fd:4a:0d:70:8f:22:4b:97:e4:c7:c7:6d:2a:
         e8:17:a4:ae:b6:80:e3:1c:4b:ae:af:63:64:c5:7c:92:41:83:
         02:e6:5e:73:f7:a8:c9:95:8a:5a:dc:3f:2a:00:6e:33:77:30:
         46:dd:ba:ab:c4:62:55:e7:17:18:49:df:00:38:15:8b:12:fa:
         38:f0:29:be:c7:ab:ca:f9:e4:e0:9b:8c:22:c3:19:c4:dd:1e:
         b5:bb:1c:d7:64:27:67:27:2a:59:23:07:7c:ce:92:8d:0d:65:
         fc:1c:91:d8:fd:f7:83:23:6b:84:ad:dc:94:aa:44:e2:bf:55:
         5a:34:0b:68:f0:62:be:84:b5:90:ab:0e:73:33:b3:70:fb:1f:
         ee:7f:be:b6:c4:a5:2d:4f:90:d1:e9:19:e9:71:62:29:b5:2b:
         d0:23:45:36:ca:64:16:57:bc:53:1d:60:f6:03:a1:1f:10:be:
         ac:fa:a5:0e:17:e9:11:84:0a:3f:e0:a7:c1:a8:b3:2b:1a:75:
         b1:8d:77:b3
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUUfBAGgRsIlCnp3jDgGvtiG5HqlgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTIzMDczMjQwWhcNMjcwOTIyMDczNzQw
WjAzMTEwLwYDVQQDEyhCNTUwMjQ0QjRCNzY4NzEwNjUyNThGQzEyMjVCQ0JFRjcz
NTEzQTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jAMTYnRarY1
42prC3RjuRWR5Wmm++KeIXA8nKPsQRDXVflB5vNCz4Is4cI+T8UjtSVfn7VYFNaQ
8KOazgAr6MbV5w/HOEGYhUN4+mwUlLAfoPOgH3lbY2LxBSobVtf7tlPpobnIuOd5
I57N4boy8LPdcWkmEQ6J2FVmXpydqJH2KRNymzrJvzWFGP/ka12Ul7hVXHDkNgtR
A/gFHH0K8YzYMwptKRJ1rF+kRUkf2yaXh43guqGSCjMoIs/IUKDTSQ1F2yFCchr5
1SLTxKq65pjhtxd3w9s6ogd6HsuZ/Z3Kz/7I8FIferOV+lGnbyI083ufSno9aUm4
/TwqH9rLRwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFLVQJEtLdocQZSWPwSJby+9z
UToVMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzQzMjMyMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMfrATANBgkqhkiG9w0BAQsF
AAOCAQEAEDdX5JQOMRxwTbMfcReqT2ZSJi/ufQXR6mqSPtfhZtY39hMwnMWtFwzj
FgJ/7BrRI3kEx4Y58MullTn9Sg1wjyJLl+THx20q6BekrraA4xxLrq9jZMV8kkGD
AuZec/eoyZWKWtw/KgBuM3cwRt26q8RiVecXGEnfADgVixL6OPApvseryvnk4JuM
IsMZxN0etbsc12QnZycqWSMHfM6SjQ1l/ByR2P33gyNrhK3clKpE4r9VWjQLaPBi
voS1kKsOczOzcPsf7n++tsSlLU+Q0ekZ6XFiKbUr0CNFNspkFle8Ux1g9gOhHxC+
rPqlDhfpEYQKP+CnwaizKxp1sY13sw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:40 2026 by rpki-client