Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235332e302f32342d3234203d3e203535323031.roa
File:                     3139392e3233352e3235332e302f32342d3234203d3e203535323031.roa (raw, json)
Hash identifier:          XAuLyLKSDvZT2TG5p4wtsVcsrkNQfmxvSVOeJo2WKLY=
Subject key identifier:   F4:7F:62:C6:03:8F:7E:63:4C:4D:2F:C2:FA:85:6A:15:53:23:1E:5A
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       4027F5BE6439B2B916D8612DD7BA1249200AFBC9
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235332e302f32342d3234203d3e203535323031.roa
Signing time:             Wed 23 Sep 2026 07:25:24 +0000
ROA not before:           Wed 23 Sep 2026 07:20:24 +0000
ROA not after:            Wed 22 Sep 2027 07:25:24 +0000
asID:                     55201
IP address blocks:        199.235.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:27:f5:be:64:39:b2:b9:16:d8:61:2d:d7:ba:12:49:20:0a:fb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:20:24 2026 GMT
            Not After : Sep 22 07:25:24 2027 GMT
        Subject: CN=F47F62C6038F7E634C4D2FC2FA856A1553231E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:0b:f3:e8:ff:c1:39:29:e1:a0:3f:d0:6a:
                    e5:6c:4f:34:eb:08:30:4a:cc:8e:60:6a:bd:e3:d3:
                    56:80:66:28:10:cd:4c:0d:8a:44:d5:71:22:91:e8:
                    6b:7b:52:3b:0f:e7:7e:15:df:6c:3a:9d:f8:6c:26:
                    95:d1:96:60:b5:70:8e:65:4c:b8:2f:f6:5a:d8:0a:
                    0b:82:95:82:e3:13:29:63:f5:c4:14:e0:fc:66:9f:
                    09:88:f5:57:47:95:68:af:74:85:fd:46:68:b4:9e:
                    b2:9f:44:2d:72:64:68:e1:76:26:a5:61:0d:8c:69:
                    9a:61:68:60:88:5d:ff:6b:90:03:81:ed:f5:7f:ca:
                    b9:22:19:8a:a4:d3:dc:ef:44:c9:ce:ba:01:1a:0b:
                    23:b2:81:71:26:da:0e:07:f1:f1:b9:5a:91:8b:3d:
                    04:91:21:eb:48:ed:25:44:5b:ee:6b:2a:07:ea:2f:
                    b9:51:3b:99:1a:ac:d1:83:63:a6:4f:d5:09:9f:eb:
                    ec:31:3c:2a:f1:c1:95:ae:65:cf:ae:2b:35:c3:4b:
                    f3:b3:8a:f7:91:80:e3:5e:fc:20:19:df:47:8d:22:
                    37:73:f7:5f:0c:d5:a1:f8:b7:f6:24:86:e1:79:42:
                    3c:23:fd:2b:d7:89:06:5e:69:09:4c:ac:78:f4:df:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:62:C6:03:8F:7E:63:4C:4D:2F:C2:FA:85:6A:15:53:23:1E:5A
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235332e302f32342d3234203d3e203535323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:f6:7f:34:04:ec:7d:98:fb:b8:95:e7:1c:3c:a5:f9:29:
         e3:94:2e:d8:35:60:c6:f8:74:5d:b8:82:45:74:ed:cd:70:f8:
         76:7e:e1:99:ea:67:9c:52:9b:a8:b6:f7:76:7a:d3:7d:b4:60:
         02:44:cc:06:4e:37:1b:fc:87:5a:80:dd:da:f9:14:c2:97:cd:
         27:0a:37:6e:aa:03:6b:d9:b9:de:f4:8c:b8:51:89:7e:be:94:
         7e:29:12:fb:09:d1:ab:f4:92:57:c2:cb:79:e8:67:d1:a6:56:
         2f:fa:a5:3b:50:dd:ad:60:05:df:ba:50:dd:4b:24:c6:d3:db:
         db:7f:3d:42:e9:f6:92:d3:fd:6c:d7:d9:38:28:c9:51:92:9a:
         2e:3d:a4:2c:bc:78:13:bc:2f:88:20:c1:c7:02:ca:d3:70:d2:
         d6:58:1a:5d:da:89:74:12:14:11:2e:a1:26:9f:fb:7e:31:19:
         7f:bd:e9:a5:82:7b:cf:06:02:83:3c:f8:58:62:b3:7d:d9:0e:
         a6:75:1f:9c:38:42:93:2c:65:ce:03:d7:c7:1b:14:9c:5c:07:
         4e:47:cf:15:ef:05:fa:5d:0c:97:ab:ac:23:4d:26:6f:b2:c2:
         18:12:fb:26:f6:d4:32:04:b2:16:e9:ec:3f:d5:ad:94:f8:84:
         35:f4:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:44:50 2026 by rpki-client