Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34372e302f32342d3234203d3e2036303739.roa
File:                     3139392e3233352e34372e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          Ah10HgAeEplsTRH037LA6AxMctbUOjp07ZD5RVw3viQ=
Subject key identifier:   06:F0:2A:70:60:4D:04:AB:D0:9F:C0:1A:ED:14:F1:86:64:12:09:25
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       118E071AE0F2B1CEDC715155D121688E5661CF12
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34372e302f32342d3234203d3e2036303739.roa
Signing time:             Wed 23 Sep 2026 07:25:24 +0000
ROA not before:           Wed 23 Sep 2026 07:20:24 +0000
ROA not after:            Wed 22 Sep 2027 07:25:24 +0000
asID:                     6079
IP address blocks:        199.235.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8e:07:1a:e0:f2:b1:ce:dc:71:51:55:d1:21:68:8e:56:61:cf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:20:24 2026 GMT
            Not After : Sep 22 07:25:24 2027 GMT
        Subject: CN=06F02A70604D04ABD09FC01AED14F18664120925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:57:c4:ca:4a:e3:8f:f6:42:0b:73:4c:55:
                    00:69:1d:25:14:dd:ba:db:2e:3a:b2:85:63:9b:83:
                    32:61:48:c0:ae:c8:0d:24:71:cf:93:fe:a6:51:4e:
                    80:d7:c0:40:ed:6b:4b:c0:91:25:c9:3b:00:17:5f:
                    af:9e:1d:37:48:c8:a1:76:f7:e1:f0:56:dc:e1:68:
                    96:92:eb:8f:21:fc:0b:15:82:2c:74:0e:47:9d:d7:
                    78:cc:49:86:e5:0d:b1:85:99:2b:5e:9e:2d:24:01:
                    dc:f5:ec:74:62:af:76:dd:27:e1:b7:20:e7:cc:03:
                    23:ae:40:d0:cf:20:a5:8d:38:b5:ec:0e:d7:ef:72:
                    3a:15:b8:ae:31:62:78:bb:c1:00:ac:39:86:c3:a9:
                    23:4a:77:78:47:1f:19:f1:dd:17:75:18:81:93:45:
                    49:a5:40:22:e2:65:96:2e:31:9e:94:69:59:15:f3:
                    55:d7:3d:5e:8e:80:de:30:73:3d:06:9b:6e:2d:e8:
                    15:da:32:99:8f:aa:4e:17:dc:60:ce:2b:28:cd:40:
                    f9:2c:3f:cf:f6:83:6b:b3:34:af:c4:ca:9a:c1:36:
                    9d:00:cd:b3:2f:02:aa:75:3f:b3:d4:3a:08:76:28:
                    b0:b0:25:58:48:dd:37:77:3c:0a:70:26:e4:74:86:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:2A:70:60:4D:04:AB:D0:9F:C0:1A:ED:14:F1:86:64:12:09:25
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e34372e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e1:c4:6f:04:29:fe:14:c9:24:61:e0:7b:87:c5:29:59:94:
         78:e5:cd:5b:5d:1b:51:5f:b1:be:60:a5:b8:a3:59:8c:c2:c0:
         10:ca:56:24:13:1a:db:70:96:3b:63:3b:f1:0e:bd:4d:ca:f7:
         44:ee:1c:ff:9e:9d:71:71:e8:2d:37:60:b5:80:80:75:8a:ab:
         02:02:f4:c8:87:c6:a5:58:f1:5b:27:1b:2e:d3:ad:7f:0d:73:
         2a:0a:1e:70:02:cb:9b:97:94:c0:c6:79:d2:9e:ed:41:7e:f6:
         6d:cf:ed:b1:69:8d:7c:ba:ad:81:f9:f0:17:12:c6:e9:c8:44:
         56:5c:17:da:47:57:aa:a6:fe:04:e3:49:af:c6:63:53:aa:c7:
         9c:b4:9c:4b:61:90:9c:95:27:9f:83:71:69:4f:b1:69:15:35:
         78:8d:1d:30:73:1d:71:c9:12:22:2a:8c:86:d5:2a:80:0f:3b:
         23:76:d3:d2:c2:88:cc:5b:ed:0d:9b:0b:3f:1f:24:c6:29:26:
         ee:fc:47:17:3b:22:4c:6b:71:0f:f2:e3:3c:bd:2e:9f:57:24:
         fd:72:c4:ff:ea:e9:e7:db:9a:a9:9e:38:08:bf:a1:55:95:89:
         93:4f:aa:1a:9b:5b:2c:28:b0:89:82:4e:a3:81:81:33:4f:e5:
         b1:7a:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:51 2026 by rpki-client