Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS26042.roa
File:                     AS26042.roa (raw, json)
Hash identifier:          A57ZkIIgvBmumk+Tmpi09npscpSNPAm6AC5yHqkblxI=
Subject key identifier:   49:10:B0:66:CC:C4:05:A0:53:B7:87:3D:34:65:2A:0F:1A:92:B7:62
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2E8C8A4D7AC9C05248DD77AF9217A2209E3538BC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS26042.roa
Signing time:             Fri 26 Jun 2026 13:32:06 +0000
ROA not before:           Fri 26 Jun 2026 13:27:06 +0000
ROA not after:            Fri 25 Jun 2027 13:32:06 +0000
asID:                     26042
IP address blocks:        66.63.189.0/24 maxlen: 24
                          209.200.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8c:8a:4d:7a:c9:c0:52:48:dd:77:af:92:17:a2:20:9e:35:38:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 26 13:27:06 2026 GMT
            Not After : Jun 25 13:32:06 2027 GMT
        Subject: CN=4910B066CCC405A053B7873D34652A0F1A92B762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:6e:c6:f1:6d:7b:2f:7a:10:ec:91:3c:dd:
                    16:70:80:44:68:56:ce:93:ff:0b:b3:20:90:5c:14:
                    32:4a:1b:c7:7f:fc:ff:ee:a0:2b:cd:59:c4:5b:1b:
                    5e:9f:46:b0:36:76:c5:d4:77:dd:8d:90:51:a5:0d:
                    e9:c5:7f:c4:5a:0a:8e:0f:7c:ab:0a:14:2e:2b:06:
                    82:53:ba:b0:13:8b:5e:f6:93:ed:c6:69:a3:32:fc:
                    16:45:a1:20:9b:02:7e:33:68:f2:57:78:19:66:0f:
                    ca:92:b2:58:b4:b0:1b:67:e1:4a:30:cd:c9:fc:59:
                    3e:f3:fa:19:5c:58:3c:0b:03:ff:4a:45:06:ff:bf:
                    38:af:46:8d:b2:bb:6e:7c:18:35:75:39:62:50:b9:
                    46:78:5c:85:5f:be:e0:0b:3f:bd:72:0a:3c:4c:b8:
                    95:48:f2:21:43:f7:2e:49:4e:ca:13:88:be:6d:f7:
                    a2:e7:ef:b2:d1:60:29:8f:b4:01:8a:ec:1e:e1:e4:
                    16:a8:fa:97:68:a8:2e:ac:12:63:08:9d:6a:d7:e0:
                    52:e2:5b:24:bb:65:fb:e1:6e:69:34:50:19:42:c6:
                    1a:a0:00:43:f9:b7:88:fb:e9:e0:08:07:3f:7b:d8:
                    7e:37:69:49:2a:d7:14:0f:fb:72:63:7e:a9:05:a4:
                    7e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:B0:66:CC:C4:05:A0:53:B7:87:3D:34:65:2A:0F:1A:92:B7:62
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS26042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.189.0/24
                  209.200.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:66:fb:17:c3:53:af:35:d0:6d:83:e3:36:1c:d9:ff:bc:fe:
         54:4c:e9:34:c8:c3:03:df:f4:67:f8:9b:d1:62:c8:21:aa:e9:
         e9:30:fd:c7:1e:67:3f:a1:fe:e8:2a:6b:86:7e:0f:c3:32:05:
         f4:42:2e:d3:7a:e0:12:70:1e:6c:31:ad:8a:5e:38:a9:5c:41:
         1a:12:4b:40:0f:48:ef:47:7b:7b:8c:e9:e9:d7:75:1e:aa:33:
         37:9b:74:6f:df:01:26:9a:33:50:a0:7f:0f:75:71:31:21:7c:
         ec:8d:a8:cd:0d:3d:87:a1:51:bb:00:94:66:39:f4:b2:f0:fd:
         c4:72:87:53:8c:12:2e:4f:e8:40:de:b8:50:d0:06:11:a4:99:
         8b:45:9b:28:a5:46:ed:c7:6e:98:a7:9a:77:4f:b2:0c:20:29:
         35:99:f0:20:87:e8:35:2f:9f:63:69:26:42:6e:19:f0:c6:cc:
         7d:2e:7a:c5:18:bf:3f:43:9b:54:e4:d9:b3:79:55:ce:37:a3:
         59:36:19:c8:b9:cc:bd:84:1b:b0:4f:40:56:88:9d:03:87:32:
         8f:e4:20:a1:db:53:6c:0a:ea:2e:ec:fd:9c:3b:63:86:e0:23:
         1b:85:02:85:d0:f1:a5:5b:1e:3e:d5:ce:52:53:a6:9e:39:1a:
         ba:18:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:52:17 2026 by rpki-client