Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132322e302f32342d3234203d3e203333313035.roa
File:                     3139392e3233352e3132322e302f32342d3234203d3e203333313035.roa (raw, json)
Hash identifier:          ubdwoWShUKEB+XOzrPwAPUQ/RtpAV3CWK/on01CexEk=
Subject key identifier:   0A:19:06:F2:07:EC:E6:D4:82:52:7E:4F:3D:5D:8B:3E:C0:E4:2F:7E
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       3D46219307C8A3BF4ED99A2E6D19D09A80BDECA4
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132322e302f32342d3234203d3e203333313035.roa
Signing time:             Wed 23 Sep 2026 07:38:54 +0000
ROA not before:           Wed 23 Sep 2026 07:33:54 +0000
ROA not after:            Wed 22 Sep 2027 07:38:54 +0000
asID:                     33105
IP address blocks:        199.235.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:46:21:93:07:c8:a3:bf:4e:d9:9a:2e:6d:19:d0:9a:80:bd:ec:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:33:54 2026 GMT
            Not After : Sep 22 07:38:54 2027 GMT
        Subject: CN=0A1906F207ECE6D482527E4F3D5D8B3EC0E42F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:bc:7f:00:70:95:74:5f:9e:4f:1e:60:29:
                    15:5c:cd:6d:d9:55:8c:24:ab:3e:5f:5a:92:79:46:
                    20:01:b2:ea:c5:d9:76:a4:70:31:1c:5b:36:52:be:
                    ad:33:b6:b9:0c:85:c3:9d:8b:00:12:ca:a8:37:71:
                    f8:6f:8f:77:eb:80:62:e1:16:f7:56:55:d1:ba:4f:
                    d7:09:7c:b9:43:48:73:4c:f9:c2:72:d5:ed:0b:f1:
                    f4:71:06:03:4e:52:32:27:51:c4:1f:39:26:35:22:
                    87:3d:ee:c0:2e:b1:53:9b:40:1a:f2:c6:0d:da:a3:
                    c1:6e:52:ef:7e:48:d0:2d:83:18:70:22:0e:88:a5:
                    0f:0f:b3:ca:12:e6:d9:98:00:d9:d1:c7:f4:32:5e:
                    a3:5d:38:ac:29:39:50:82:eb:43:f6:15:94:41:61:
                    4d:de:03:06:64:21:b0:40:de:e4:14:67:f9:92:54:
                    4b:64:ca:e6:5c:9b:21:b2:bd:6f:8f:20:a6:60:65:
                    e4:8f:3f:4c:4c:7f:23:f0:30:08:58:3d:0f:3e:0a:
                    40:bd:ab:13:79:a0:9a:95:99:45:72:76:88:a6:b9:
                    80:1a:d2:98:04:fc:6e:51:1a:2d:13:4c:21:1b:b7:
                    2a:84:0f:47:c7:e1:33:00:52:76:a3:c2:f6:38:e2:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:19:06:F2:07:EC:E6:D4:82:52:7E:4F:3D:5D:8B:3E:C0:E4:2F:7E
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132322e302f32342d3234203d3e203333313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3d:78:63:bd:7c:08:9b:b2:48:15:a4:b8:e3:eb:7e:81:3a:
         d8:bd:c3:19:b2:7e:8e:18:51:6b:d2:ac:96:cc:c9:11:66:6b:
         af:3f:6b:59:70:e9:07:0f:0c:21:3f:96:9b:5a:05:b9:71:b9:
         ee:7b:79:34:12:74:99:d1:42:e3:7f:5d:92:b8:5a:5d:63:9c:
         44:59:8b:58:11:93:11:57:74:a2:e3:d0:40:f5:3b:cb:ca:ff:
         a4:68:f2:40:9d:4f:09:34:6b:28:c3:65:aa:a3:2b:af:a1:c4:
         c2:dd:94:d6:54:f4:cc:b8:68:1e:2c:3c:a2:49:36:53:30:1a:
         b5:b2:2b:df:ae:27:0d:f3:17:6b:e6:ba:e6:81:36:49:99:7c:
         b2:b6:33:94:4c:a8:ff:f8:7c:78:39:87:d3:62:6c:66:f4:35:
         9a:fb:de:65:e3:bf:12:dc:4f:ea:ef:ea:be:dd:49:5e:1d:20:
         2e:cb:dc:62:e0:5c:a2:49:a1:9c:6a:82:09:56:e0:0e:fa:14:
         9d:ea:d9:f4:b8:02:9d:db:60:70:5a:50:92:84:8b:83:1d:71:
         76:53:4a:f8:9b:39:9a:41:f4:fc:bd:e6:47:07:21:fa:9b:d6:
         b2:e6:eb:40:a6:3f:81:66:af:d1:24:20:7a:02:cb:6c:87:c8:
         e3:02:c9:3b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUPUYhkwfIo79O2ZoubRnQmoC97KQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTIzMDczMzU0WhcNMjcwOTIyMDczODU0
WjAzMTEwLwYDVQQDEygwQTE5MDZGMjA3RUNFNkQ0ODI1MjdFNEYzRDVEOEIzRUMw
RTQyRjdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMq8fwBwlXRf
nk8eYCkVXM1t2VWMJKs+X1qSeUYgAbLqxdl2pHAxHFs2Ur6tM7a5DIXDnYsAEsqo
N3H4b49364Bi4Rb3VlXRuk/XCXy5Q0hzTPnCctXtC/H0cQYDTlIyJ1HEHzkmNSKH
Pe7ALrFTm0Aa8sYN2qPBblLvfkjQLYMYcCIOiKUPD7PKEubZmADZ0cf0Ml6jXTis
KTlQgutD9hWUQWFN3gMGZCGwQN7kFGf5klRLZMrmXJshsr1vjyCmYGXkjz9MTH8j
8DAIWD0PPgpAvasTeaCalZlFcnaIprmAGtKYBPxuURotE0whG7cqhA9Hx+EzAFJ2
o8L2OOLwwwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAoZBvIH7ObUglJ+Tz1diz7A
5C9+MB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMTMyMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzMzMzEzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+t6MA0GCSqGSIb3DQEB
CwUAA4IBAQCEPXhjvXwIm7JIFaS44+t+gTrYvcMZsn6OGFFr0qyWzMkRZmuvP2tZ
cOkHDwwhP5abWgW5cbnue3k0EnSZ0ULjf12SuFpdY5xEWYtYEZMRV3Si49BA9TvL
yv+kaPJAnU8JNGsow2WqoyuvocTC3ZTWVPTMuGgeLDyiSTZTMBq1sivfricN8xdr
5rrmgTZJmXyytjOUTKj/+Hx4OYfTYmxm9DWa+95l478S3E/q7+q+3UleHSAuy9xi
4FyiSaGcaoIJVuAO+hSd6tn0uAKd22BwWlCShIuDHXF2U0r4mzmaQfT8veZHByH6
m9ay5utApj+BZq/RJCB6Astsh8jjAsk7
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:52 2026 by rpki-client