Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/26e0e118-f049-3428-9e95-48dc0a8c4741.roa
File:                     26e0e118-f049-3428-9e95-48dc0a8c4741.roa (raw, json)
Hash identifier:          LUcrNv/4uEo+KhKn4/03z4gX7cmH1AF28Hqi9l4ZnY4=
Subject key identifier:   18:B6:DC:09:95:D0:F0:B9:E4:93:8C:5D:9F:83:60:5E:F3:38:F7:45
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F5B97FE54CB90CFC845AE7AC8
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/26e0e118-f049-3428-9e95-48dc0a8c4741.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     16740
IP address blocks:        74.126.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fe:54:cb:90:cf:c8:45:ae:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=901111ae-09bd-4666-a83c-dbb8a76b9cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:09:1b:34:49:75:8c:ef:e0:64:e7:83:6d:fa:
                    96:1a:b8:c5:bf:a8:58:d1:70:8f:9c:0f:6a:b4:0d:
                    20:30:53:5e:7f:67:60:22:6b:28:bc:ee:f0:a5:e3:
                    f2:9f:cc:7a:e4:f5:e6:16:20:ff:ba:89:8d:7d:2f:
                    ec:6a:fd:4e:ab:d3:60:7d:c1:4f:63:20:46:ff:d9:
                    f0:1c:56:0c:3f:6c:83:10:e1:1e:75:37:aa:cf:ef:
                    3b:f9:3f:0e:ab:bb:af:37:a9:52:33:3a:da:79:15:
                    a8:1f:d2:f7:da:96:97:bb:52:c3:27:23:a1:74:37:
                    43:d3:69:95:79:56:20:b8:26:79:ec:7d:5d:85:bd:
                    54:89:bf:7a:c2:e6:59:a8:92:9d:cf:e2:f5:4b:30:
                    c4:6e:3f:af:92:4e:17:d9:36:49:d1:ec:6f:14:d1:
                    b6:f7:0b:5f:a4:99:80:f9:85:16:03:6f:89:ba:45:
                    15:86:f7:11:0f:b1:98:66:b4:31:51:0d:18:01:81:
                    92:35:f1:04:d2:36:d1:0d:a3:48:04:fe:83:31:f9:
                    df:f0:bf:7e:35:ae:1d:bf:c2:1d:71:7a:82:c9:14:
                    56:0c:e9:a3:1f:ef:56:dc:60:50:ab:1f:05:9f:ad:
                    81:18:cc:49:0f:5b:5a:f7:31:f8:8e:5b:64:db:b8:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:DC:09:95:D0:F0:B9:E4:93:8C:5D:9F:83:60:5E:F3:38:F7:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/26e0e118-f049-3428-9e95-48dc0a8c4741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:bb:30:70:43:86:fc:5d:02:fd:6b:c1:d9:bb:8f:d9:6d:
         07:d5:92:2a:23:9b:12:37:e3:21:27:1f:46:bd:a3:f0:3a:91:
         87:d7:c7:db:2e:ac:f1:0a:26:a6:aa:f6:c6:10:eb:12:a4:f4:
         76:cd:8d:36:5e:59:ce:00:3d:e3:d8:ff:74:ee:6e:98:18:8e:
         9d:c3:54:51:b1:87:c4:ee:8b:aa:95:29:d7:f1:9f:d7:6c:a5:
         5c:77:2c:da:e6:71:5a:2c:b8:01:36:2e:e7:e7:41:8f:9a:78:
         db:5e:5f:d6:13:b6:89:27:9b:e1:05:7f:79:49:88:d4:fd:52:
         b4:9e:dd:a1:0e:53:54:87:51:ee:b0:72:d4:00:e0:40:6b:46:
         b1:d3:23:70:87:ab:70:54:9e:31:95:fb:eb:5d:54:cf:5b:f4:
         fa:d5:27:c2:51:31:fb:58:93:e9:78:b6:06:91:50:d6:42:3a:
         11:0d:3f:52:ae:68:93:be:43:a4:4d:25:d7:b4:fb:60:89:ce:
         59:d2:be:dd:cd:46:2e:4e:9c:70:ba:98:16:c5:27:d2:fc:6f:
         02:d3:dd:df:78:b9:30:c4:16:c2:96:d2:e9:aa:b0:87:5e:16:
         16:50:77:29:99:15:95:06:ce:1a:84:9d:1a:fa:53:2d:7f:07:
         b6:92:4b:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/5Uy5DPyEWuesgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk
OTAxMTExYWUtMDliZC00NjY2LWE4M2MtZGJiOGE3NmI5Y2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwkbNEl1jO/gZOeDbfqWGrjFv6hY0XCPnA9q
tA0gMFNef2dgImsovO7wpePyn8x65PXmFiD/uomNfS/sav1Oq9NgfcFPYyBG/9nw
HFYMP2yDEOEedTeqz+87+T8Oq7uvN6lSMzraeRWoH9L32paXu1LDJyOhdDdD02mV
eVYguCZ57H1dhb1Uib96wuZZqJKdz+L1SzDEbj+vkk4X2TZJ0exvFNG29wtfpJmA
+YUWA2+JukUVhvcRD7GYZrQxUQ0YAYGSNfEE0jbRDaNIBP6DMfnf8L9+Na4dv8Id
cXqCyRRWDOmjH+9W3GBQqx8Fn62BGMxJD1ta9zH4jltk27iikwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBi23AmV0PC55JOMXZ+DYF7zOPdFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMjZlMGUxMTgtZjA0OS0z
NDI4LTllOTUtNDhkYzBhOGM0NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFquzBwQ4b8XQL9a8HZu4/ZbQfVkiojmxI34yEnH0a9o/A6kYfXx9su
rPEKJqaq9sYQ6xKk9HbNjTZeWc4APePY/3TubpgYjp3DVFGxh8Tui6qVKdfxn9ds
pVx3LNrmcVosuAE2LufnQY+aeNteX9YTtoknm+EFf3lJiNT9UrSe3aEOU1SHUe6w
ctQA4EBrRrHTI3CHq3BUnjGV++tdVM9b9PrVJ8JRMftYk+l4tgaRUNZCOhENP1Ku
aJO+Q6RNJde0+2CJzlnSvt3NRi5OnHC6mBbFJ9L8bwLT3d94uTDEFsKW0umqsIde
FhZQdymZFZUGzhqEnRr6Uy1/B7aSSzg=
-----END CERTIFICATE-----
Generated at Sat Oct 3 10:53:36 2026 by rpki-client