Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS26042.roa
File:                     AS26042.roa (raw, json)
Hash identifier:          Wl+/piJMhz0D98Drb95oHt6aApnavWKXS9io3BfUxis=
Subject key identifier:   D8:1E:BD:96:ED:06:E6:E9:79:01:50:0B:3C:9F:0D:F5:4E:80:3D:02
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       235907A34DC3C7C75E7D673E871D8AFBA847136C
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS26042.roa
Signing time:             Thu 10 Sep 2026 19:33:48 +0000
ROA not before:           Thu 10 Sep 2026 19:28:48 +0000
ROA not after:            Thu 09 Sep 2027 19:33:48 +0000
asID:                     26042
IP address blocks:        216.75.150.0/24 maxlen: 24
                          216.75.154.0/24 maxlen: 24
                          216.75.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:59:07:a3:4d:c3:c7:c7:5e:7d:67:3e:87:1d:8a:fb:a8:47:13:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Sep 10 19:28:48 2026 GMT
            Not After : Sep  9 19:33:48 2027 GMT
        Subject: CN=D81EBD96ED06E6E97901500B3C9F0DF54E803D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:20:11:1d:f3:2e:e0:f8:71:a3:ad:1f:97:
                    93:d8:79:4f:43:ca:96:8f:5e:7f:9c:9f:c3:8c:a6:
                    f9:f8:35:b2:0f:52:90:2a:87:9d:c2:53:a7:21:4d:
                    a8:e6:b4:8d:4f:84:09:39:c9:8f:54:e6:84:7d:6e:
                    1f:3d:aa:9f:5a:50:63:25:f8:29:0a:5c:7c:bf:b9:
                    88:a0:58:8a:8c:b5:b6:f0:ed:7f:b7:6b:c8:3d:68:
                    ce:0b:f1:2c:ce:11:63:0c:fb:96:da:82:b0:49:a5:
                    d8:85:92:c1:e0:cf:57:bb:23:5f:7b:3a:fc:77:60:
                    c7:1e:a3:1b:af:75:29:69:61:1b:e8:9d:b0:59:af:
                    87:b2:05:fd:d6:90:e6:db:75:af:04:c0:ed:ca:d6:
                    bb:e5:d0:6e:46:f7:5f:8a:5d:85:9d:59:10:1e:9d:
                    50:51:e6:6e:ef:e1:34:a9:8a:07:de:a8:ca:57:26:
                    83:67:92:90:c7:c6:e5:5d:bc:07:16:cf:a8:55:0a:
                    0b:91:ec:19:05:12:c0:a2:28:ca:78:fa:0f:24:60:
                    18:f0:fa:1b:f3:17:a6:1d:19:fd:11:d2:aa:a7:c3:
                    9b:83:85:a7:af:ed:ad:03:e9:b0:8e:0d:1a:a3:0c:
                    26:64:f6:06:83:59:0e:b6:4c:73:85:af:47:e0:d3:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1E:BD:96:ED:06:E6:E9:79:01:50:0B:3C:9F:0D:F5:4E:80:3D:02
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS26042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.150.0/24
                  216.75.154.0/24
                  216.75.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f0:c3:aa:35:05:08:c1:f6:67:07:4a:6f:4f:f0:b8:e6:a1:
         21:6b:6a:c9:ef:8c:53:f9:ac:01:15:03:bd:0c:59:2d:4e:3a:
         83:77:a2:1e:a3:a1:1b:da:8b:d9:55:69:d5:6c:b8:b0:40:f1:
         0f:10:1b:f5:64:da:e2:4c:f8:ce:dd:dc:7c:8e:74:2a:a4:39:
         af:6e:24:16:2a:fe:5c:13:4f:f3:74:de:97:64:eb:63:1a:d9:
         b1:ab:6f:91:30:ee:bf:d6:26:ad:96:2d:ad:3b:2e:54:29:ed:
         f1:a5:ae:4e:f0:37:d2:f9:b5:93:88:71:97:2a:a9:c3:3a:f3:
         6a:ad:34:77:c5:6c:40:6a:2a:b4:aa:23:da:a8:69:b5:f7:77:
         83:2f:29:5c:ed:55:5d:e5:97:a0:7e:59:9b:06:f4:5c:21:e5:
         8c:03:81:de:44:14:de:aa:74:f6:e2:a9:26:94:71:59:22:51:
         71:b3:45:27:cd:8b:39:f3:43:e5:7f:e5:12:ba:f9:58:a8:08:
         b7:52:82:7d:a6:9b:b3:e2:4d:24:fc:d0:97:cf:ef:03:54:37:
         e4:67:ad:b7:4a:e0:cc:3a:e5:99:83:e8:0a:b0:9d:a8:6d:87:
         3e:c0:0d:41:95:f3:42:05:ac:9e:33:0e:89:c9:7d:05:96:20:
         e8:e2:b4:bb
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUI1kHo03Dx8defWc+hx2K+6hHE2wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwOTEwMTkyODQ4WhcNMjcwOTA5MTkzMzQ4
WjAzMTEwLwYDVQQDEyhEODFFQkQ5NkVEMDZFNkU5NzkwMTUwMEIzQzlGMERGNTRF
ODAzRDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU8gER3zLuD4
caOtH5eT2HlPQ8qWj15/nJ/DjKb5+DWyD1KQKoedwlOnIU2o5rSNT4QJOcmPVOaE
fW4fPaqfWlBjJfgpClx8v7mIoFiKjLW28O1/t2vIPWjOC/EszhFjDPuW2oKwSaXY
hZLB4M9XuyNfezr8d2DHHqMbr3UpaWEb6J2wWa+HsgX91pDm23WvBMDtyta75dBu
Rvdfil2FnVkQHp1QUeZu7+E0qYoH3qjKVyaDZ5KQx8blXbwHFs+oVQoLkewZBRLA
oijKePoPJGAY8Pob8xemHRn9EdKqp8Obg4Wnr+2tA+mwjg0aowwmZPYGg1kOtkxz
ha9H4NO8wwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNgevZbtBubpeQFQCzyfDfVO
gD0CMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzI2MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2EuWAwQA2EuaAwQA2EueMA0GCSqG
SIb3DQEBCwUAA4IBAQAB8MOqNQUIwfZnB0pvT/C45qEha2rJ74xT+awBFQO9DFkt
TjqDd6Ieo6Eb2ovZVWnVbLiwQPEPEBv1ZNriTPjO3dx8jnQqpDmvbiQWKv5cE0/z
dN6XZOtjGtmxq2+RMO6/1iatli2tOy5UKe3xpa5O8DfS+bWTiHGXKqnDOvNqrTR3
xWxAaiq0qiPaqGm193eDLylc7VVd5ZegflmbBvRcIeWMA4HeRBTeqnT24qkmlHFZ
IlFxs0UnzYs580Plf+USuvlYqAi3UoJ9ppuz4k0k/NCXz+8DVDfkZ623SuDMOuWZ
g+gKsJ2obYc+wA1BlfNCBayeMw6JyX0FliDo4rS7
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:08:25 2026 by rpki-client