Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132382e302f32342d3234203d3e20343032323838.roa
File:                     3139392e3233352e3132382e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier:          ZPuomMJC0HbtQFNXp5C2d2vdKF654MPDb2u40D92O8s=
Subject key identifier:   7B:E2:A1:84:6A:61:6D:CE:73:87:63:23:15:56:31:B8:A7:6A:CD:14
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       66642975E8796F49349BB4F44C145E414C2C850D
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132382e302f32342d3234203d3e20343032323838.roa
Signing time:             Wed 23 Sep 2026 07:31:37 +0000
ROA not before:           Wed 23 Sep 2026 07:26:37 +0000
ROA not after:            Wed 22 Sep 2027 07:31:37 +0000
asID:                     402288
IP address blocks:        199.235.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:64:29:75:e8:79:6f:49:34:9b:b4:f4:4c:14:5e:41:4c:2c:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:26:37 2026 GMT
            Not After : Sep 22 07:31:37 2027 GMT
        Subject: CN=7BE2A1846A616DCE73876323155631B8A76ACD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:67:10:e1:80:61:eb:9d:d5:72:1f:f8:6c:
                    ab:69:e1:16:6a:b8:3e:aa:8f:3a:45:58:bf:ce:f8:
                    d3:24:5a:1b:80:1e:62:65:a4:e0:fe:35:c4:6c:c0:
                    c4:5d:10:a6:86:65:b6:79:cb:fd:3b:8f:ad:3a:38:
                    ff:05:e2:bf:48:01:2e:2c:58:e0:b5:e2:7c:80:88:
                    49:7f:8c:dd:e2:c6:0f:ce:55:87:17:25:84:0e:dd:
                    c8:dc:7c:db:8d:e7:de:be:5d:4f:14:cf:6c:6a:25:
                    77:c3:b2:af:b7:77:4a:1f:1a:70:60:63:8e:14:96:
                    15:2d:0e:f3:43:77:e0:8c:16:6b:02:5f:08:ba:8d:
                    58:37:54:d3:98:8e:25:2b:ff:c8:f3:51:42:b4:46:
                    c1:97:e6:3e:54:75:6a:4b:37:34:50:6b:a1:53:f0:
                    92:55:64:4e:e2:fe:7b:d1:06:d3:47:da:48:95:40:
                    3b:c8:f0:6a:8f:c1:6a:ef:b5:d9:f0:94:f7:8b:98:
                    5f:f2:59:9d:46:3a:d6:5b:22:07:d0:83:f9:4e:1f:
                    f6:65:59:f3:9a:1e:a1:19:07:e9:9f:d9:04:16:95:
                    fe:0e:97:19:55:c3:1a:a7:7d:63:a9:7f:84:a6:d6:
                    03:97:97:8e:e2:bb:41:29:4e:0b:c8:be:6f:ab:43:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E2:A1:84:6A:61:6D:CE:73:87:63:23:15:56:31:B8:A7:6A:CD:14
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132382e302f32342d3234203d3e20343032323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:48:aa:70:8d:b8:13:6d:f6:b6:a6:3d:dd:74:dc:50:94:
         46:eb:17:98:21:a2:1c:8a:cf:68:7f:38:0c:7b:4d:23:90:a4:
         16:bf:cf:ea:0e:87:57:30:ac:e1:62:3f:0f:44:03:33:e4:ca:
         06:14:d3:a2:d0:14:19:c4:d1:1b:6c:b3:75:cd:0c:20:d6:51:
         6e:55:43:64:67:1c:a1:b7:b7:d0:a3:fb:50:ac:4c:36:40:bf:
         f4:a7:da:7f:c2:2f:14:7d:da:60:c5:da:97:0d:37:31:15:b2:
         bf:5e:6f:86:d0:3a:ed:3b:19:8c:86:83:0b:fe:49:f4:9d:89:
         df:c1:97:ca:09:a7:ef:b3:ca:08:c6:71:32:fc:c4:63:3c:12:
         27:0a:b0:b4:61:79:e5:dc:f4:2f:51:62:0a:1d:0b:44:69:64:
         a3:46:33:95:1d:a9:83:86:21:f7:f2:ba:95:31:20:9a:f2:fd:
         47:fa:56:38:01:7e:b7:fa:5e:c0:46:25:5c:c6:4f:16:3c:37:
         ad:04:b7:04:37:5c:94:c5:cd:b6:98:c9:6c:14:ea:4b:72:c3:
         8d:ab:bc:48:21:7b:c5:8a:81:95:22:fd:38:20:9c:e3:d0:6e:
         a7:56:5b:e3:ea:73:c2:2a:00:5c:85:c3:fd:54:9f:ad:df:54:
         ae:10:32:57
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUZmQpdeh5b0k0m7T0TBReQUwshQ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTIzMDcyNjM3WhcNMjcwOTIyMDczMTM3
WjAzMTEwLwYDVQQDEyg3QkUyQTE4NDZBNjE2RENFNzM4NzYzMjMxNTU2MzFCOEE3
NkFDRDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDlnEOGAYeud
1XIf+GyraeEWarg+qo86RVi/zvjTJFobgB5iZaTg/jXEbMDEXRCmhmW2ecv9O4+t
Ojj/BeK/SAEuLFjgteJ8gIhJf4zd4sYPzlWHFyWEDt3I3Hzbjefevl1PFM9saiV3
w7Kvt3dKHxpwYGOOFJYVLQ7zQ3fgjBZrAl8Iuo1YN1TTmI4lK//I81FCtEbBl+Y+
VHVqSzc0UGuhU/CSVWRO4v570QbTR9pIlUA7yPBqj8Fq77XZ8JT3i5hf8lmdRjrW
WyIH0IP5Th/2ZVnzmh6hGQfpn9kEFpX+DpcZVcMap31jqX+EptYDl5eO4rtBKU4L
yL5vq0OZEwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHvioYRqYW3Oc4djIxVWMbin
as0UMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMTMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzIzMjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH64AwDQYJKoZIhvcN
AQELBQADggEBABDNSKpwjbgTbfa2pj3ddNxQlEbrF5ghohyKz2h/OAx7TSOQpBa/
z+oOh1cwrOFiPw9EAzPkygYU06LQFBnE0Rtss3XNDCDWUW5VQ2RnHKG3t9Cj+1Cs
TDZAv/Sn2n/CLxR92mDF2pcNNzEVsr9eb4bQOu07GYyGgwv+SfSdid/Bl8oJp++z
ygjGcTL8xGM8EicKsLRheeXc9C9RYgodC0RpZKNGM5UdqYOGIffyupUxIJry/Uf6
VjgBfrf6XsBGJVzGTxY8N60EtwQ3XJTFzbaYyWwU6ktyw42rvEghe8WKgZUi/Tgg
nOPQbqdWW+Pqc8IqAFyFw/1Un63fVK4QMlc=
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:20:15 2026 by rpki-client