Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26042.roa
File:                     AS26042.roa (raw, json)
Hash identifier:          rV1jkt7FJ7cig2BShaLDQgrhYkHGgCHMpAJZC5cSXoY=
Subject key identifier:   8E:B6:66:C3:81:66:45:2C:1F:73:44:70:C1:69:C5:26:F4:CA:DC:F8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0CAC25BFB4AD010CB1A0AFD0FC2DF7369FFDCD46
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26042.roa
Signing time:             Tue 24 Mar 2026 18:54:21 +0000
ROA not before:           Tue 24 Mar 2026 18:49:21 +0000
ROA not after:            Tue 23 Mar 2027 18:54:21 +0000
asID:                     26042
IP address blocks:        157.254.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ac:25:bf:b4:ad:01:0c:b1:a0:af:d0:fc:2d:f7:36:9f:fd:cd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 24 18:49:21 2026 GMT
            Not After : Mar 23 18:54:21 2027 GMT
        Subject: CN=8EB666C38166452C1F734470C169C526F4CADCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:47:16:76:ef:c3:a9:b4:8e:81:1c:a9:2b:
                    5b:1d:ca:3b:3c:84:eb:60:a5:ee:71:e1:4a:de:69:
                    cb:27:18:71:c1:96:28:35:77:21:b3:ed:1d:64:eb:
                    40:8a:cd:ed:df:4a:1f:6b:4d:61:88:c9:42:7b:0e:
                    60:0d:a2:48:ab:89:6b:b5:fe:97:84:20:9e:ca:b5:
                    09:77:45:e1:ad:f1:22:ab:9f:b7:ef:47:a0:c1:e5:
                    d7:de:ad:6a:a5:61:28:41:44:40:1e:4d:7a:76:1a:
                    5c:94:c2:85:47:35:0d:59:6c:f9:f8:8b:98:c6:b4:
                    09:45:88:7a:ab:e9:4c:0e:d1:9b:40:ca:52:f2:79:
                    56:3a:ba:a6:2f:d3:81:9f:5e:75:b2:74:4d:ac:f0:
                    b2:8f:f7:64:3d:01:5a:95:7e:19:0c:b8:f9:fb:f3:
                    13:28:cc:55:b6:08:2c:59:e6:74:5e:a3:cf:e0:94:
                    10:98:f2:40:64:ad:9a:cb:b1:40:c7:a6:fb:d1:8d:
                    db:a6:29:a7:88:fd:36:e4:23:70:cd:bc:54:65:32:
                    68:c9:f3:6f:e4:a4:37:25:ac:c1:c9:19:2e:cd:79:
                    8e:62:93:a3:3f:ac:0d:ea:14:9d:9e:0b:0c:c3:ed:
                    45:ca:c7:8c:40:f7:75:06:98:98:77:69:d3:bb:d1:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:66:C3:81:66:45:2C:1F:73:44:70:C1:69:C5:26:F4:CA:DC:F8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:9d:72:43:78:50:11:4c:0d:86:42:ea:94:11:52:af:4c:c7:
         1b:1b:13:e1:70:e9:24:63:a8:73:2f:45:be:e8:0b:18:e2:21:
         94:11:9c:68:1d:05:1a:b3:97:18:f0:8e:d0:4b:ac:66:36:f6:
         53:41:ea:61:65:70:b2:04:5a:5f:3f:b4:5f:54:0c:8a:8d:1c:
         e1:1f:44:57:2e:5b:0a:d1:03:bd:27:2a:ce:10:8c:53:34:dd:
         7d:5a:7a:f2:e3:36:09:a5:73:42:eb:d7:c9:db:45:09:d6:18:
         8c:64:4c:8f:53:cf:03:51:cf:0c:cb:5a:d9:94:e2:3d:e4:a3:
         40:84:fb:62:aa:37:89:95:f5:f2:c1:83:d5:6e:6e:68:b9:2d:
         6d:18:98:1c:b9:41:43:0f:b4:91:23:6f:bb:b7:7b:8c:2a:23:
         da:51:79:11:00:09:d2:75:e5:7f:1c:96:d7:76:fb:e1:86:a5:
         bf:e1:5b:14:d4:86:42:b7:35:0b:c0:a5:6c:a5:7f:34:40:bb:
         61:db:bb:a6:ef:b2:30:cf:2b:89:52:1c:4f:52:db:2c:e9:fe:
         5f:9a:6f:3c:53:f2:8b:84:9c:2d:db:00:35:bc:ed:a9:ac:ca:
         83:42:c0:c1:e0:42:98:00:b5:ce:f0:2a:6a:ec:a2:75:88:12:
         1c:4b:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:44:45 2026 by rpki-client