Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa
File:                     AS26042.roa (raw, json)
Hash identifier:          C9gR85+Y4lRkn1aZD5RmHXjK5eNnSMnbdHPm+04ZuQc=
Subject key identifier:   BE:C2:50:CC:74:2C:CD:8F:8F:55:CA:B9:6C:32:F3:17:88:BA:CF:20
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4064B88058EE796EFD86652ABAF1293942CAB4F7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa
Signing time:             Tue 28 Jul 2026 00:05:48 +0000
ROA not before:           Tue 28 Jul 2026 00:00:48 +0000
ROA not after:            Tue 27 Jul 2027 00:05:48 +0000
asID:                     26042
IP address blocks:        104.234.142.0/24 maxlen: 24
                          104.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 02:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:64:b8:80:58:ee:79:6e:fd:86:65:2a:ba:f1:29:39:42:ca:b4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 28 00:00:48 2026 GMT
            Not After : Jul 27 00:05:48 2027 GMT
        Subject: CN=BEC250CC742CCD8F8F55CAB96C32F31788BACF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:bd:e7:ce:67:13:ac:ed:00:73:f4:5b:2e:
                    9a:15:f6:d0:cc:6c:65:b8:61:3d:c6:78:f4:69:82:
                    75:17:58:7e:fe:d7:a9:b4:e3:c7:da:62:b5:a0:b2:
                    75:96:87:5f:50:3b:0f:6d:b0:68:48:d7:98:34:63:
                    60:c9:a9:ea:d8:71:b3:5f:d5:41:87:31:9b:e8:ef:
                    16:5c:37:85:df:67:9d:e7:fe:76:6d:54:2b:73:d2:
                    dd:9c:2c:0c:c2:82:1e:46:3a:e6:1c:53:53:05:3f:
                    b0:3d:3d:0c:e0:fe:31:12:64:86:87:92:37:ba:cb:
                    15:4c:21:2d:97:b1:4a:55:79:af:82:9e:78:ce:be:
                    cf:7a:c5:4a:98:35:62:3a:12:fc:90:2e:13:e8:45:
                    e8:c3:a9:5e:59:6d:10:dc:6c:28:ea:c8:df:e7:c0:
                    8d:7d:e1:b1:ec:f1:d0:fa:28:e5:e7:60:08:15:86:
                    8f:60:62:3b:72:6c:b8:ef:94:10:4c:b2:ba:0a:19:
                    0f:80:2e:3c:b4:cb:18:a7:a0:fc:ae:41:73:e4:5d:
                    45:58:69:87:30:a7:bc:4d:c4:07:96:26:a3:17:07:
                    01:08:5a:88:1c:8e:34:84:9c:9d:9a:fd:42:2c:16:
                    9d:46:97:70:29:e0:2e:2c:d4:5c:1a:81:ab:82:2b:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C2:50:CC:74:2C:CD:8F:8F:55:CA:B9:6C:32:F3:17:88:BA:CF:20
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.142.0/24
                  104.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:bf:1b:70:a4:1c:d7:59:b0:1b:1a:5f:1c:2b:ec:f7:d0:77:
         e9:29:ff:35:2f:ba:8b:70:0a:ac:06:47:8f:c5:13:15:7f:5b:
         ea:99:19:18:0a:0c:e7:82:26:75:b6:e6:d6:56:b8:cf:9c:c3:
         2c:e5:db:0b:64:43:21:78:f3:c8:4f:66:ec:8a:1e:54:d4:85:
         f3:52:2a:2c:d1:69:41:33:41:4b:07:fd:d3:61:d9:9f:01:ff:
         41:6a:30:07:9c:7c:dd:d6:3c:5e:f2:56:1a:72:9d:5e:3e:1f:
         c7:65:e3:ca:4e:cc:a8:49:c2:19:05:e6:8d:f3:8f:25:fa:3b:
         22:0b:92:33:18:2b:32:75:81:31:07:ed:70:47:9c:c3:2b:06:
         25:ad:cf:17:12:98:bd:2b:9f:d2:f3:44:ae:be:c1:b5:99:1a:
         9f:80:b3:aa:71:87:76:dc:17:4b:a8:86:ea:8b:9a:53:26:23:
         d4:1f:d4:42:71:d1:11:03:21:b7:91:7a:96:e4:e3:5a:0f:95:
         e4:55:de:2e:fb:1c:88:56:22:b3:fa:04:fc:91:1a:df:71:5c:
         2e:62:72:a3:db:87:fc:ca:5e:ec:7f:39:26:64:03:20:ff:9e:
         73:9b:96:e2:30:67:10:00:04:83:df:34:c7:ef:1d:14:ac:92:
         c6:ff:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:50 2026 by rpki-client