Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35332e302f32342d3234203d3e20383132.roa
File:                     3139392e3233352e35332e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          QynH0l4wZVKXJ37z6/YFW8SHABqMXpz+4zGUdCcYSMQ=
Subject key identifier:   32:60:95:F4:C6:39:AA:6B:21:F2:F3:EE:02:76:0F:5E:5E:46:A7:00
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       0F5558D80C218C8B91CD780697043CAF935FDBD8
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35332e302f32342d3234203d3e20383132.roa
Signing time:             Wed 23 Sep 2026 07:25:24 +0000
ROA not before:           Wed 23 Sep 2026 07:20:24 +0000
ROA not after:            Wed 22 Sep 2027 07:25:24 +0000
asID:                     812
IP address blocks:        199.235.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:58:d8:0c:21:8c:8b:91:cd:78:06:97:04:3c:af:93:5f:db:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Sep 23 07:20:24 2026 GMT
            Not After : Sep 22 07:25:24 2027 GMT
        Subject: CN=326095F4C639AA6B21F2F3EE02760F5E5E46A700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b6:d5:58:8e:6a:b3:01:fc:fe:f1:38:c2:74:
                    37:68:38:53:96:61:df:cf:01:de:e4:af:e2:67:ab:
                    37:30:8f:1a:25:fc:67:d1:ba:58:b3:eb:d3:a8:52:
                    31:c0:82:a0:b4:f8:bf:41:0c:a2:d5:ab:1c:53:da:
                    fb:55:e8:ca:ac:58:65:6a:c2:44:a3:de:81:02:03:
                    da:f2:47:90:46:24:c1:5e:4b:83:61:a2:e9:ad:fd:
                    68:2b:7b:7e:38:55:3d:0e:70:dc:6b:4e:5d:83:07:
                    ce:1d:1f:03:ab:c5:74:98:01:0e:ec:c9:e9:92:7a:
                    dd:c1:0a:2b:90:61:cc:e0:d4:b2:e4:3c:9e:93:a0:
                    df:bc:af:95:c2:58:13:3c:24:56:61:6a:7c:3a:7e:
                    65:df:67:48:81:7f:9a:cb:07:b2:7c:c8:4c:f6:b3:
                    0b:bb:34:81:9f:d0:bd:04:be:a2:1c:8c:92:ce:fc:
                    a2:ac:c8:5c:57:45:98:0f:87:34:92:f7:3c:6a:55:
                    56:b5:fc:34:36:dc:48:5b:7e:cf:76:de:3c:e9:b1:
                    e2:4d:21:02:fc:bd:13:d4:43:2e:17:f2:de:1b:24:
                    36:2c:06:98:d6:00:30:28:6d:38:2e:70:87:fe:3f:
                    8a:0c:92:41:77:53:69:97:a7:11:3a:6d:3d:16:74:
                    e1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:95:F4:C6:39:AA:6B:21:F2:F3:EE:02:76:0F:5E:5E:46:A7:00
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e35332e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:00:33:72:8b:fa:88:b2:f5:60:bf:2d:63:63:13:ce:f3:6f:
         75:69:39:1a:f7:b2:c7:69:4f:80:d3:07:5b:ed:c1:c5:0f:4b:
         a9:84:78:15:b6:9a:98:aa:e5:21:d6:3e:75:61:5e:1b:21:6f:
         2a:9c:3a:31:35:e3:50:30:04:6c:df:59:41:9c:fb:bd:25:07:
         b0:cf:8e:7b:1d:f2:b6:10:66:46:14:b7:b8:33:aa:2a:71:9c:
         d1:e8:3c:53:29:86:09:8a:f7:36:cf:fe:1d:cd:10:b9:0a:fd:
         35:db:80:5e:f3:ea:c9:a6:47:d0:54:99:a6:52:19:6d:66:2b:
         fc:c0:ad:7c:ae:da:7a:ee:05:cb:45:81:07:7c:c7:cf:f8:eb:
         17:93:eb:c8:6e:f5:f0:04:37:2f:98:5b:cc:03:f6:af:6c:13:
         87:ca:4c:d7:b5:cd:07:f8:2e:f0:3c:be:6d:70:d0:81:ad:e5:
         55:3f:08:ec:7f:3b:6b:8e:19:0d:70:8b:0d:e9:11:10:75:4a:
         67:a9:89:62:e9:4e:7a:2c:c9:f6:6a:b5:bd:e1:97:58:4d:fc:
         a6:23:57:74:0e:49:ee:f6:66:6e:3b:f1:e9:d7:ad:1c:32:ea:
         b3:db:34:96:90:58:fd:97:e7:31:ee:96:43:47:12:62:34:b6:
         af:30:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:08:36 2026 by rpki-client