Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134342e302f32342d3234203d3e20313532383638.roa
File:                     3139392e3233352e3134342e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier:          hcR+JX0QFN6B8osS6dP3XgHIVkcKswSDkiYGx9FSToE=
Subject key identifier:   B6:CB:F8:5E:5F:0D:75:85:B5:3C:58:84:CB:50:DD:55:FD:03:25:5D
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       6BE8EA9FF06851E54A5BDBA965AF5A2DA380CCCD
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134342e302f32342d3234203d3e20313532383638.roa
Signing time:             Wed 23 Sep 2026 07:30:33 +0000
ROA not before:           Wed 23 Sep 2026 07:25:33 +0000
ROA not after:            Wed 22 Sep 2027 07:30:33 +0000
asID:                     152868
IP address blocks:        199.235.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e8:ea:9f:f0:68:51:e5:4a:5b:db:a9:65:af:5a:2d:a3:80:cc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:25:33 2026 GMT
            Not After : Sep 22 07:30:33 2027 GMT
        Subject: CN=B6CBF85E5F0D7585B53C5884CB50DD55FD03255D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:2e:e4:d1:52:4b:bd:49:9b:48:43:96:4b:
                    20:3e:ce:4c:5b:ea:5a:36:9a:57:ef:99:bd:f5:07:
                    93:12:d8:c2:23:6b:3f:f1:8c:6f:a9:f3:00:ea:a0:
                    7f:74:66:23:d1:68:1f:a5:e4:99:61:19:55:72:5f:
                    2c:40:79:3b:30:ff:d4:12:ce:bb:1e:b1:fa:20:b3:
                    a5:30:92:d1:0a:10:91:cb:9a:61:34:66:1a:0c:20:
                    92:b5:f5:ec:74:28:92:56:6d:f2:91:8a:3c:c7:fc:
                    0c:d3:a2:4c:f7:9c:60:2d:c1:81:0b:7e:d8:35:9a:
                    5e:dd:54:9b:17:36:a7:d4:c5:42:99:79:96:c5:45:
                    99:d0:2e:b6:39:61:5f:79:b0:d4:cd:79:8f:f8:49:
                    ee:2f:03:dc:6b:0d:01:89:a9:5c:60:84:7a:0d:a9:
                    60:7b:f6:63:e9:60:a0:32:97:11:b3:9b:e9:c3:fb:
                    9f:7e:c8:a2:ec:21:95:12:62:b1:ff:b0:ef:71:4f:
                    0b:c4:88:1a:b3:1e:09:65:64:78:23:76:27:4b:b3:
                    4d:08:ac:28:51:c7:7b:9d:09:17:99:94:2a:c4:c6:
                    a9:ff:d0:d3:80:81:bc:03:3a:a9:9c:a1:9a:8b:8a:
                    fe:de:e1:27:fa:09:13:2a:a3:34:3b:b0:4a:b0:c8:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CB:F8:5E:5F:0D:75:85:B5:3C:58:84:CB:50:DD:55:FD:03:25:5D
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134342e302f32342d3234203d3e20313532383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:81:38:0d:d6:22:26:08:bf:ff:ad:9d:fb:18:9e:28:1e:
         a4:cb:a3:68:7a:6f:5d:25:71:f1:44:6c:ef:7d:a3:be:59:ef:
         94:8d:50:51:dc:73:dc:08:3d:a4:64:61:0d:8a:79:44:14:a9:
         0d:d2:43:7e:cc:91:ea:90:85:ca:b1:68:22:56:93:1f:42:2e:
         b6:94:03:6d:51:0b:48:da:ed:9b:38:ac:45:c2:66:bd:b5:58:
         26:4a:59:58:ce:fd:fb:be:3f:9c:79:db:74:10:15:b8:93:97:
         c5:8e:19:12:5f:b6:56:f6:d0:ae:6d:cc:ed:60:e4:e4:8d:a1:
         9f:0e:3c:05:eb:7a:24:ae:4e:95:4e:59:e0:17:96:0d:88:0f:
         f5:29:ca:b6:ea:58:a0:9a:e4:2c:9f:87:31:27:5a:69:d6:6f:
         7c:c2:32:45:e9:16:64:e7:be:bb:af:5d:63:0a:d7:a8:94:d2:
         f1:08:ef:68:5e:c9:c8:4f:52:bd:14:31:39:03:a4:fa:0f:25:
         ab:99:23:eb:3f:b8:a8:e9:e3:c0:07:d2:ba:68:9c:59:57:b8:
         b1:e9:55:1c:9b:48:ae:77:58:59:68:85:28:c7:06:d7:6a:c6:
         bb:06:c6:70:54:99:31:a6:89:13:92:da:0e:0e:18:1f:da:d6:
         9b:35:52:46
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUa+jqn/BoUeVKW9upZa9aLaOAzM0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTIzMDcyNTMzWhcNMjcwOTIyMDczMDMz
WjAzMTEwLwYDVQQDEyhCNkNCRjg1RTVGMEQ3NTg1QjUzQzU4ODRDQjUwREQ1NUZE
MDMyNTVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJUu5NFSS71J
m0hDlksgPs5MW+paNppX75m99QeTEtjCI2s/8YxvqfMA6qB/dGYj0WgfpeSZYRlV
cl8sQHk7MP/UEs67HrH6ILOlMJLRChCRy5phNGYaDCCStfXsdCiSVm3ykYo8x/wM
06JM95xgLcGBC37YNZpe3VSbFzan1MVCmXmWxUWZ0C62OWFfebDUzXmP+EnuLwPc
aw0BialcYIR6Dalge/Zj6WCgMpcRs5vpw/uffsii7CGVEmKx/7DvcU8LxIgasx4J
ZWR4I3YnS7NNCKwoUcd7nQkXmZQqxMap/9DTgIG8AzqpnKGai4r+3uEn+gkTKqM0
O7BKsMgEhQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLbL+F5fDXWFtTxYhMtQ3VX9
AyVdMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMTM0MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH65AwDQYJKoZIhvcN
AQELBQADggEBAD9ygTgN1iImCL//rZ37GJ4oHqTLo2h6b10lcfFEbO99o75Z75SN
UFHcc9wIPaRkYQ2KeUQUqQ3SQ37MkeqQhcqxaCJWkx9CLraUA21RC0ja7Zs4rEXC
Zr21WCZKWVjO/fu+P5x523QQFbiTl8WOGRJftlb20K5tzO1g5OSNoZ8OPAXreiSu
TpVOWeAXlg2ID/UpyrbqWKCa5CyfhzEnWmnWb3zCMkXpFmTnvruvXWMK16iU0vEI
72heychPUr0UMTkDpPoPJauZI+s/uKjp48AH0rponFlXuLHpVRybSK53WFlohSjH
BtdqxrsGxnBUmTGmiROS2g4OGB/a1ps1UkY=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:14 2026 by rpki-client