Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa
File:                     3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa (raw, json)
Hash identifier:          UgNN7RVptJK2Vi4Uv7rSxJRFLN1aWjJGSR1a3o22BeM=
Subject key identifier:   A8:F4:00:F8:A2:D7:B5:DA:FB:3A:84:33:4F:64:07:81:42:AF:B1:D4
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       22783A7B4CC6F085D09172022127658081FCDC60
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa
Signing time:             Wed 23 Sep 2026 07:38:54 +0000
ROA not before:           Wed 23 Sep 2026 07:33:54 +0000
ROA not after:            Wed 22 Sep 2027 07:38:54 +0000
asID:                     33105
IP address blocks:        199.235.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:78:3a:7b:4c:c6:f0:85:d0:91:72:02:21:27:65:80:81:fc:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:33:54 2026 GMT
            Not After : Sep 22 07:38:54 2027 GMT
        Subject: CN=A8F400F8A2D7B5DAFB3A84334F64078142AFB1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:3b:36:07:9c:bf:8c:8a:2b:6d:d1:5a:77:
                    4c:18:c3:f3:31:61:91:33:a8:63:e4:19:e0:3b:78:
                    4a:9b:04:a9:73:1b:3a:55:97:62:2f:e9:77:bb:07:
                    d8:ea:5e:db:d1:a3:4b:a1:7a:42:9e:09:e7:0c:d2:
                    1f:70:4e:9b:23:81:c8:c7:08:dc:5d:80:79:f0:ef:
                    c8:b9:ee:0f:65:75:32:4f:79:e3:e6:20:4c:e4:40:
                    d5:77:c2:f4:50:c2:20:3e:e6:46:3a:5b:10:3a:37:
                    c6:2e:24:29:d9:0e:d4:50:cc:0d:9d:46:2a:bf:97:
                    06:ea:1b:f3:0c:71:45:de:51:34:65:b5:42:96:ad:
                    b4:cf:ff:21:ee:72:76:be:44:df:d7:af:05:96:67:
                    37:9b:c1:ff:6f:b5:05:6b:06:73:12:e3:df:38:98:
                    d0:51:b7:e2:4b:63:a0:d8:70:30:00:d6:e5:c0:4b:
                    d4:fe:60:aa:1d:c0:d9:19:5e:03:a5:24:7f:2f:b9:
                    6c:2f:98:ca:33:c2:d8:1c:4a:9d:40:73:7e:e5:32:
                    ec:cd:cb:b7:9e:4a:9b:fe:1b:1a:7a:53:17:41:76:
                    dc:b6:67:77:fe:05:88:11:1a:90:7c:89:bf:a3:25:
                    38:e3:49:c7:54:47:eb:05:2a:63:56:0d:29:2d:75:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:00:F8:A2:D7:B5:DA:FB:3A:84:33:4F:64:07:81:42:AF:B1:D4
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:e3:24:fe:86:15:35:82:6d:5d:e6:3b:73:d1:a4:45:2d:
         fa:7f:58:15:dd:b5:56:3e:f6:30:c5:10:91:05:03:28:34:ee:
         26:0a:4f:04:1e:c4:c9:33:eb:61:c9:75:09:39:f4:b7:3f:b3:
         b3:43:f5:67:73:de:0e:a5:74:e5:ea:36:25:86:db:45:fb:fb:
         45:29:09:fe:2f:93:04:9d:85:e0:2a:13:b0:50:26:ac:76:f3:
         8a:1c:59:4a:8a:8c:a5:e2:cd:56:8e:6c:8b:c6:1c:09:45:aa:
         4c:d3:1a:4f:76:cb:e4:0e:2e:6c:81:be:ba:83:ce:bc:d1:5b:
         88:9b:a9:c7:4f:31:a9:a7:4b:3b:ae:6e:02:0a:7a:57:b5:de:
         9c:70:61:5a:b2:ea:73:5a:cd:f5:f6:52:b5:94:81:56:9b:63:
         67:51:b2:71:20:69:66:02:31:d8:6b:df:1c:1a:0f:81:50:aa:
         99:6e:90:2b:77:5c:f8:8a:1c:80:f6:14:08:6c:8a:ac:f1:a0:
         1e:7f:a4:29:79:f9:b0:a0:13:63:6a:28:2f:0d:7f:9a:be:89:
         f3:54:ec:96:5f:b2:a6:fc:43:27:a1:d7:58:ff:6c:56:99:9a:
         b4:72:c1:1c:90:05:50:24:db:08:97:f9:f3:e0:7c:ad:a1:a9:
         35:d0:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:59 2026 by rpki-client