Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3135322e302f32312d3234203d3e2037303239.roa
File:                     3139392e3233352e3135322e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          C6mTDK60aVGeDRHwIUSJRqEWxMJGFYd4ryQ4Dh1Mf0M=
Subject key identifier:   74:ED:ED:30:EE:CC:87:F6:A6:2B:FD:81:B9:23:9D:C3:C2:5D:A5:1B
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       138C233AD1B568BEA79FFAE35E3541DF73B34B76
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3135322e302f32312d3234203d3e2037303239.roa
Signing time:             Wed 23 Sep 2026 07:29:21 +0000
ROA not before:           Wed 23 Sep 2026 07:24:21 +0000
ROA not after:            Wed 22 Sep 2027 07:29:21 +0000
asID:                     7029
IP address blocks:        199.235.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8c:23:3a:d1:b5:68:be:a7:9f:fa:e3:5e:35:41:df:73:b3:4b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:24:21 2026 GMT
            Not After : Sep 22 07:29:21 2027 GMT
        Subject: CN=74EDED30EECC87F6A62BFD81B9239DC3C25DA51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:7e:76:5d:ed:4a:97:7e:d5:46:ac:50:2c:
                    90:4c:6f:21:b4:2d:64:e4:9d:4b:36:8a:14:0d:c2:
                    eb:64:4f:9d:1e:93:50:64:da:8f:64:e8:a1:9e:d1:
                    67:05:5a:61:3f:a4:87:62:11:5f:30:d3:e4:02:58:
                    f4:a8:99:77:15:7f:84:92:2a:69:72:15:9a:0a:07:
                    24:f9:a7:e0:8d:f4:9d:a5:a4:57:5f:93:f8:f7:32:
                    ea:9c:56:d8:54:a3:21:a3:ff:54:5f:fc:ae:b5:54:
                    fb:7b:6f:f1:d2:e0:ba:a4:b5:fb:40:4c:85:1f:91:
                    a2:c6:cd:18:4f:f2:bc:b9:2d:65:d9:44:8d:6e:2d:
                    6f:68:84:4d:07:83:51:62:24:62:5d:d1:69:fb:ae:
                    5a:bc:d0:ec:30:63:f2:26:37:45:91:ba:2d:a6:21:
                    c0:21:f1:89:eb:cf:44:07:d4:d8:e6:4c:cf:d2:7e:
                    9a:3a:c6:97:0b:f5:cf:19:c5:74:cd:f9:b6:7c:81:
                    a6:b6:af:9e:ec:c7:51:20:58:4a:19:56:e7:67:1d:
                    1a:d5:84:d5:3d:2d:e5:52:69:71:4c:bc:20:25:49:
                    79:85:9f:60:4c:c8:77:85:da:98:88:21:d9:72:9f:
                    97:77:d4:5d:07:3c:e1:f2:2d:1d:95:75:7d:93:04:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:ED:30:EE:CC:87:F6:A6:2B:FD:81:B9:23:9D:C3:C2:5D:A5:1B
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3135322e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:03:ac:a9:d2:27:19:c5:22:00:67:f8:7c:1c:0e:dd:c4:7a:
         20:f8:03:11:33:38:ee:19:f4:ed:4b:f6:95:bf:9a:1e:be:0b:
         ed:ea:ea:3c:29:19:e3:09:b7:54:04:18:6f:21:ab:16:92:4c:
         70:86:c7:cc:fa:7d:f0:d4:6d:20:17:bd:39:97:64:4b:f0:b5:
         39:12:a6:b5:18:29:56:97:13:87:4c:42:15:fa:03:11:f0:84:
         9b:12:de:37:38:c2:94:78:f0:eb:24:46:71:bc:4c:b3:87:f7:
         b1:5c:f8:4b:6d:7a:8f:72:67:1c:bb:7d:b4:dd:d4:97:2f:64:
         18:5e:db:a7:c4:bf:d4:6b:03:57:c7:dd:d2:88:33:9a:91:ff:
         05:18:b3:19:b7:44:9d:23:a0:9d:9c:02:48:01:a3:5a:79:fd:
         c9:ae:b7:8a:b1:9f:b9:67:79:fa:9b:ed:da:97:8a:ef:f8:96:
         5d:40:8a:e1:c3:c8:2f:e0:fa:f1:c4:05:b0:1f:e3:07:e1:90:
         81:27:55:09:b5:da:4b:8b:35:be:3c:69:a4:90:1f:89:dc:f8:
         fa:a6:f2:7e:0f:f2:8b:90:c6:a5:11:7f:cb:6f:a3:f4:f2:6a:
         07:f8:86:6c:bb:9f:f7:79:26:9e:db:29:8e:f2:19:9b:8f:1b:
         a9:9a:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:57 2026 by rpki-client