Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235342e302f32342d3234203d3e203535323031.roa
File:                     3139392e3233352e3235342e302f32342d3234203d3e203535323031.roa (raw, json)
Hash identifier:          2+Mu5ov0H4qWzixT/jU63w5kKsGyNmyySlM/G+cFSx0=
Subject key identifier:   48:74:65:BF:D8:C4:B4:1B:C3:FA:BC:42:1F:6F:C1:44:88:5A:26:22
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       4A2059C9EFDB1C9635797E537BFA5FE570F0063C
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235342e302f32342d3234203d3e203535323031.roa
Signing time:             Wed 23 Sep 2026 07:25:24 +0000
ROA not before:           Wed 23 Sep 2026 07:20:24 +0000
ROA not after:            Wed 22 Sep 2027 07:25:24 +0000
asID:                     55201
IP address blocks:        199.235.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:20:59:c9:ef:db:1c:96:35:79:7e:53:7b:fa:5f:e5:70:f0:06:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:20:24 2026 GMT
            Not After : Sep 22 07:25:24 2027 GMT
        Subject: CN=487465BFD8C4B41BC3FABC421F6FC144885A2622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:52:42:f6:68:d0:09:6f:ae:6c:70:e6:75:cf:
                    22:c9:5e:17:f7:64:12:df:62:2a:b6:43:a7:a1:8e:
                    c7:d9:69:dc:97:ed:ac:4d:67:65:ca:40:6e:59:1b:
                    e5:c2:6b:49:65:24:4c:69:aa:29:fc:4c:20:8a:eb:
                    b0:8b:95:ca:32:da:0e:18:07:49:b0:b4:e2:4d:e6:
                    94:53:a8:9c:ec:76:0e:0b:18:73:68:4d:34:5a:d4:
                    fe:eb:7d:64:94:06:b2:65:0c:0f:5f:45:8d:a4:f6:
                    72:b8:f6:00:4e:d3:5c:a4:a6:cc:a0:8d:c9:6f:3a:
                    e0:92:79:6a:de:ec:17:7c:d5:1c:e9:9a:9e:a6:ea:
                    d2:09:9b:bd:f5:48:62:0e:2f:4d:bf:7c:a7:38:9c:
                    ce:37:77:af:c2:9b:c0:69:6c:26:95:32:d8:f4:6c:
                    0d:05:ad:6e:bd:bd:5b:f4:5a:9a:ee:a2:4d:7c:4d:
                    c2:6d:93:01:a3:f3:0f:2c:6f:4a:58:03:4a:33:35:
                    50:79:93:57:8e:13:40:62:bb:2d:50:1d:ad:82:39:
                    9e:5f:48:04:17:77:52:27:95:7c:e5:b7:41:56:d7:
                    16:2a:0f:1f:1e:9b:bd:36:d6:d2:d9:04:b6:80:cb:
                    03:2c:1a:b7:a4:22:66:79:7c:5f:84:51:33:7f:73:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:65:BF:D8:C4:B4:1B:C3:FA:BC:42:1F:6F:C1:44:88:5A:26:22
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3235342e302f32342d3234203d3e203535323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:44:ae:41:5c:b4:e3:ef:d2:ef:35:24:64:5a:ee:a5:39:56:
         37:6f:76:5b:62:43:57:92:34:0a:7a:de:48:b6:c1:15:93:4c:
         61:b5:99:94:0b:2e:8d:47:f5:62:de:b6:06:ce:9e:69:ee:c4:
         e7:3e:2d:20:1d:e7:8a:33:3c:90:70:e8:64:db:c1:30:65:ff:
         1f:50:47:01:07:c1:f0:04:e6:c5:50:7e:6a:63:8d:df:13:4b:
         db:3c:f8:24:0f:14:b7:1c:e2:6c:5d:85:9d:8f:da:3f:4d:1b:
         5b:45:27:e9:c1:3c:98:f1:26:64:11:18:3a:20:69:ef:e5:30:
         b8:37:44:f5:ad:85:c6:7d:5f:87:54:7e:f1:69:a1:fd:da:9d:
         fd:2d:b0:04:77:3e:82:17:d8:fe:46:dd:c7:dd:5b:ea:73:27:
         dd:f7:6b:e1:03:a8:95:59:5e:63:55:9d:91:51:01:60:51:f2:
         21:3b:59:a9:b5:8e:c8:57:0f:32:85:5e:5f:dd:20:bb:79:31:
         a5:51:55:8b:da:fc:1e:e8:f3:81:77:c1:84:76:ba:0d:fc:bf:
         31:c8:88:e0:0c:08:97:59:a0:8b:97:05:93:d9:73:ed:8d:5d:
         90:cb:20:98:6e:58:85:32:d3:29:a4:63:5e:ff:d7:23:01:3c:
         8d:87:36:06
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUSiBZye/bHJY1eX5Te/pf5XDwBjwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTIzMDcyMDI0WhcNMjcwOTIyMDcyNTI0
WjAzMTEwLwYDVQQDEyg0ODc0NjVCRkQ4QzRCNDFCQzNGQUJDNDIxRjZGQzE0NDg4
NUEyNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61JC9mjQCW+u
bHDmdc8iyV4X92QS32IqtkOnoY7H2Wncl+2sTWdlykBuWRvlwmtJZSRMaaop/Ewg
iuuwi5XKMtoOGAdJsLTiTeaUU6ic7HYOCxhzaE00WtT+631klAayZQwPX0WNpPZy
uPYATtNcpKbMoI3Jbzrgknlq3uwXfNUc6ZqepurSCZu99UhiDi9Nv3ynOJzON3ev
wpvAaWwmlTLY9GwNBa1uvb1b9Fqa7qJNfE3CbZMBo/MPLG9KWANKMzVQeZNXjhNA
YrstUB2tgjmeX0gEF3dSJ5V85bdBVtcWKg8fHpu9NtbS2QS2gMsDLBq3pCJmeXxf
hFEzf3Mn9QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFEh0Zb/YxLQbw/q8Qh9vwUSI
WiYiMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMjM1MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM1MzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+v+MA0GCSqGSIb3DQEB
CwUAA4IBAQA0RK5BXLTj79LvNSRkWu6lOVY3b3ZbYkNXkjQKet5ItsEVk0xhtZmU
Cy6NR/Vi3rYGzp5p7sTnPi0gHeeKMzyQcOhk28EwZf8fUEcBB8HwBObFUH5qY43f
E0vbPPgkDxS3HOJsXYWdj9o/TRtbRSfpwTyY8SZkERg6IGnv5TC4N0T1rYXGfV+H
VH7xaaH92p39LbAEdz6CF9j+Rt3H3Vvqcyfd92vhA6iVWV5jVZ2RUQFgUfIhO1mp
tY7IVw8yhV5f3SC7eTGlUVWL2vwe6POBd8GEdroN/L8xyIjgDAiXWaCLlwWT2XPt
jV2QyyCYbliFMtMppGNe/9cjATyNhzYG
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:10 2026 by rpki-client