Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3133332e302f32342d3234203d3e20313337343039.roa
File:                     3139392e3233352e3133332e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier:          hJn45KASyfe01jaTM81J6e61Z6/MmgwKy3quZjmqRbU=
Subject key identifier:   DE:F0:BF:CF:06:F4:CF:57:00:AA:FF:FA:BB:83:8E:70:0F:53:F2:89
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       6A9112E2F0C31AF9FC3DDCD6221DAC1C48B8E838
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3133332e302f32342d3234203d3e20313337343039.roa
Signing time:             Wed 23 Sep 2026 07:25:24 +0000
ROA not before:           Wed 23 Sep 2026 07:20:24 +0000
ROA not after:            Wed 22 Sep 2027 07:25:24 +0000
asID:                     137409
IP address blocks:        199.235.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:91:12:e2:f0:c3:1a:f9:fc:3d:dc:d6:22:1d:ac:1c:48:b8:e8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:20:24 2026 GMT
            Not After : Sep 22 07:25:24 2027 GMT
        Subject: CN=DEF0BFCF06F4CF5700AAFFFABB838E700F53F289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:e5:44:9a:9d:43:a5:24:69:3a:92:57:4a:
                    0d:3f:aa:e3:b3:f3:4d:03:9e:1a:7e:29:cb:b0:2d:
                    de:88:a1:9b:18:11:ec:35:15:9b:b2:12:8c:e3:99:
                    56:68:5b:5e:b1:c3:e6:47:25:d5:8d:2d:4c:fe:0a:
                    91:60:c3:23:98:87:1b:9a:11:4e:1f:a8:b1:4d:f5:
                    44:50:07:9d:ca:f9:63:f8:c7:43:55:f0:88:1e:3f:
                    a9:1d:f8:5d:90:65:97:ee:e6:12:59:cb:07:56:04:
                    dc:11:08:c7:1c:a8:b1:31:7d:9c:e6:8b:e3:ef:91:
                    13:ec:fc:a9:6a:bd:11:c0:e7:8b:56:a3:4b:6f:e3:
                    95:18:d7:21:90:00:fa:9c:69:8a:f9:5c:4b:73:e3:
                    5e:79:49:f9:e6:22:94:3d:70:70:28:ff:b8:eb:3e:
                    cf:9f:05:1e:28:73:39:0d:70:88:3b:2d:42:9a:fb:
                    36:27:60:98:85:a1:52:bb:92:82:21:c9:46:ad:f1:
                    8f:2d:e7:00:9d:fa:bf:df:33:37:6c:af:ef:0c:db:
                    7c:53:12:11:c2:50:3f:5e:6c:b4:32:33:48:fc:5a:
                    18:d9:19:bf:25:1a:1d:85:ef:c2:b5:2f:ff:11:3b:
                    7e:aa:22:8f:d7:f0:af:54:c0:ea:13:2d:7a:d5:7c:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F0:BF:CF:06:F4:CF:57:00:AA:FF:FA:BB:83:8E:70:0F:53:F2:89
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3133332e302f32342d3234203d3e20313337343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:d5:85:dd:c7:dd:34:e4:3c:c4:72:3a:5b:1b:c5:b4:76:
         a0:2c:17:03:b2:bc:7c:5a:30:82:00:4b:04:b7:71:05:71:e7:
         b1:44:e3:d5:5b:f0:d6:6e:c1:09:26:4e:4a:c3:d4:8e:3c:33:
         35:c7:73:65:91:1e:7d:0e:4f:b8:f0:21:2a:11:9f:28:7b:a4:
         0b:74:d7:d2:d2:0c:f3:2a:5e:31:b3:60:4d:5f:22:bb:b7:52:
         3a:27:93:92:eb:fc:30:9e:4f:d5:a8:83:ec:97:98:04:e8:d8:
         ee:8d:b3:87:fc:53:ba:37:c2:24:2f:88:76:f6:97:b2:f9:ed:
         a9:f2:72:fe:85:9e:b6:4a:2b:a1:c1:e4:87:2f:0c:fd:7e:7a:
         3d:70:8f:a3:13:41:0a:db:52:5c:47:54:ab:a4:9e:7b:98:da:
         c5:23:10:65:d5:ff:16:a4:08:6d:2d:33:49:b6:7f:04:dd:f9:
         87:58:22:48:6d:4d:26:42:c9:c9:45:e8:d1:0c:7a:e6:54:2c:
         9d:dc:7c:0c:d4:ff:8e:93:0c:3f:86:d9:4a:cb:1a:2b:9b:b3:
         2c:5c:d0:0c:f0:0f:17:42:89:20:ec:7d:83:54:e1:ec:d9:8f:
         12:a6:ac:a5:fe:b0:ee:1f:c8:7e:28:9a:2a:84:86:03:cf:61:
         d1:8b:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:47:49 2026 by rpki-client