Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132312e302f32342d3234203d3e203333313035.roa
File:                     3139392e3233352e3132312e302f32342d3234203d3e203333313035.roa (raw, json)
Hash identifier:          Kl8yVUk2+qS//m5kBX3bERTCxLzQxCsn2ln3e3HzggM=
Subject key identifier:   D2:5A:F3:3D:0C:57:23:7A:32:40:56:EF:1C:95:B4:AC:BF:C4:1D:F7
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       713DAC0A5A5C9A2AB1C7DE7AFF8B669922BE0402
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132312e302f32342d3234203d3e203333313035.roa
Signing time:             Wed 23 Sep 2026 07:38:54 +0000
ROA not before:           Wed 23 Sep 2026 07:33:54 +0000
ROA not after:            Wed 22 Sep 2027 07:38:54 +0000
asID:                     33105
IP address blocks:        199.235.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3d:ac:0a:5a:5c:9a:2a:b1:c7:de:7a:ff:8b:66:99:22:be:04:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:33:54 2026 GMT
            Not After : Sep 22 07:38:54 2027 GMT
        Subject: CN=D25AF33D0C57237A324056EF1C95B4ACBFC41DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:0d:7f:91:48:76:f7:28:7e:86:09:c6:e6:
                    c9:a1:27:45:47:65:68:3c:db:ba:c5:dd:2c:64:a3:
                    fe:f5:b2:72:6b:42:19:44:9c:4d:0e:8f:82:ae:a7:
                    64:ee:32:58:c0:2e:db:7d:ea:22:cb:0b:68:17:90:
                    80:17:62:ff:76:bb:e8:d1:2d:77:b8:2e:c6:e2:e0:
                    ab:50:0e:e4:89:30:97:7c:14:95:a2:df:36:00:0c:
                    ad:f2:ad:e6:e0:b8:b0:0a:52:5f:4b:93:51:d2:ae:
                    5b:d0:85:c0:17:71:19:da:e3:b4:70:d3:9e:a5:dc:
                    64:45:bc:68:18:cc:8a:3a:15:dc:63:f0:18:0d:af:
                    ed:03:d0:e5:f4:e8:b6:7c:8a:76:32:09:e6:68:e4:
                    d2:d8:0e:3b:cc:18:6c:7c:d8:29:24:70:54:1d:95:
                    71:d8:9e:87:a1:9f:9d:9f:79:63:f8:5d:1d:f3:f3:
                    cf:03:b7:e8:33:4d:2b:8b:44:f8:2f:4c:42:c2:ee:
                    16:8a:b1:8c:06:d0:2e:05:83:65:93:55:bd:77:b4:
                    27:04:3b:cc:40:4c:53:92:7c:51:02:74:63:2a:26:
                    0e:a5:46:0a:af:a7:f9:26:40:c3:58:ad:73:8d:a5:
                    17:89:c7:5d:ab:d4:e1:b4:0d:c7:a6:8a:d4:bf:df:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5A:F3:3D:0C:57:23:7A:32:40:56:EF:1C:95:B4:AC:BF:C4:1D:F7
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132312e302f32342d3234203d3e203333313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:4f:0c:2d:05:7f:9c:66:04:66:64:da:47:04:0f:b1:80:e3:
         be:5e:e0:0c:07:b4:fc:32:84:85:6e:d9:db:69:54:f5:50:47:
         4a:22:e9:35:c5:d2:e5:84:bd:95:af:2f:96:c5:c5:6f:ca:0d:
         ab:89:bc:ce:68:0d:6f:91:fd:ee:3a:3f:8d:15:e3:2d:ad:46:
         c0:e2:ee:12:ba:2d:65:3e:ab:9b:c2:e7:f9:e6:ea:23:a3:47:
         d0:a4:1d:8d:54:71:b6:9d:10:ae:42:25:9d:a1:46:08:47:2e:
         8a:5e:7f:e9:99:b7:ec:dd:73:71:db:4b:83:5a:7e:b4:2b:69:
         9b:72:f9:93:b6:39:62:03:b7:52:5d:88:39:c1:81:08:75:9f:
         44:bd:28:6d:3e:64:91:08:97:19:0d:92:f9:a7:fc:0b:26:88:
         8b:6f:6b:30:83:df:5e:67:89:3e:7a:f8:72:16:c2:ee:d1:cd:
         fa:2e:ba:41:e1:7e:6a:c6:82:b5:11:2c:db:ae:f4:bc:b8:fe:
         bd:86:b9:48:27:30:b6:cb:b5:25:7e:b6:f4:e6:a0:68:3f:59:
         cd:98:a2:9a:df:8f:01:4a:9b:50:d4:98:8a:d5:71:09:6d:f9:
         91:44:33:45:98:80:61:94:52:ae:7f:93:d8:dd:9a:bc:b8:2f:
         19:ae:eb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:13 2026 by rpki-client