Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS26042.roa
File:                     AS26042.roa (raw, json)
Hash identifier:          KSf0OHihcUjwSZze0vavycvQqC28TQIWMLLuszPUgTE=
Subject key identifier:   5C:6B:07:84:A8:0B:A7:C3:75:E3:73:DE:26:C1:98:8D:06:1B:8F:95
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       20C8476FF28A2F5FB4636F814FDAB6597B351DA1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS26042.roa
Signing time:             Sat 14 Jun 2025 23:06:30 +0000
ROA not before:           Sat 14 Jun 2025 23:01:30 +0000
ROA not after:            Sat 13 Jun 2026 23:06:30 +0000
asID:                     26042
IP address blocks:        104.129.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c8:47:6f:f2:8a:2f:5f:b4:63:6f:81:4f:da:b6:59:7b:35:1d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 14 23:01:30 2025 GMT
            Not After : Jun 13 23:06:30 2026 GMT
        Subject: CN=5C6B0784A80BA7C375E373DE26C1988D061B8F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:b1:57:0d:4d:13:04:7f:c0:aa:96:0f:d7:
                    f2:30:e1:f7:b3:75:43:36:c4:7b:e2:8d:e8:89:48:
                    8b:7c:4c:aa:fc:16:42:9f:c8:0d:8c:39:f6:9a:3a:
                    c8:30:b2:5c:00:e9:22:08:9f:96:cf:08:2a:9b:53:
                    fe:74:d6:ee:c2:4d:78:a7:24:57:92:ff:be:1e:35:
                    81:9e:98:19:a0:86:f2:2b:3c:4a:ec:6f:e8:1f:1b:
                    62:d3:d9:77:9f:dc:90:dd:ea:d5:5e:97:5f:84:c3:
                    92:a7:ac:80:31:0e:e3:26:9a:3d:61:d6:fa:44:07:
                    a8:df:26:1e:0b:4f:f8:09:fc:c4:05:e0:83:e3:ef:
                    dc:92:c1:0c:9d:3a:af:6e:4e:05:27:32:aa:cd:f1:
                    bd:64:ea:de:74:5f:de:3f:68:c8:12:f1:7f:27:1b:
                    0d:c4:c5:b6:74:6e:41:9b:0d:aa:41:aa:6e:64:99:
                    f2:4d:ce:a8:66:ea:83:95:00:09:1b:85:3c:27:67:
                    23:0b:15:ce:f7:98:4d:d7:f0:8f:2f:9e:eb:33:d4:
                    d2:b5:ba:14:cd:c7:ca:e1:65:46:ba:7c:c8:d1:77:
                    c2:9d:f7:e6:c3:e5:4b:d6:1e:00:ef:c7:0d:f5:98:
                    d7:9c:d5:0c:37:60:07:79:e6:1b:34:5d:d6:fd:7a:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6B:07:84:A8:0B:A7:C3:75:E3:73:DE:26:C1:98:8D:06:1B:8F:95
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS26042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:58:ec:23:58:c5:6f:0a:bd:d8:fd:8b:4a:3c:c9:c1:db:
         a5:0f:76:d2:d9:f6:95:d1:bb:71:6c:46:b9:e1:39:ec:aa:10:
         6e:45:12:53:56:70:d1:1a:a7:7a:3b:6d:08:de:fd:56:7f:c2:
         fb:bd:1f:f1:23:83:c5:68:54:da:88:2a:7e:41:7d:3e:77:4f:
         a7:3f:79:83:b5:87:ac:16:b0:5f:78:9e:71:c6:cf:18:4e:2d:
         0d:eb:df:77:16:20:a4:80:e1:48:7b:e9:a3:93:d7:d8:a7:0a:
         49:2f:39:ac:fd:1c:28:36:ad:a1:2d:31:99:ec:11:97:3b:e9:
         37:13:5f:6f:6a:e7:d1:f5:d9:f4:49:03:1d:27:ce:99:0e:33:
         7f:7c:f2:33:e8:8b:ff:5e:bb:a6:da:ec:56:74:a5:6e:f9:ad:
         1a:a9:43:38:fe:22:fb:d0:4c:79:d3:5d:f7:03:be:c0:87:7b:
         9d:55:17:6d:2a:af:d2:42:84:4e:f3:b8:ca:43:3e:aa:b1:bb:
         99:44:0e:d7:12:07:6d:55:44:41:b7:3a:bb:5c:ae:11:17:e4:
         ac:80:a4:b6:f9:c0:73:cd:8b:c9:b9:37:8b:91:c9:73:ca:04:
         6f:6f:c6:f8:b2:5c:35:95:4f:58:b3:be:5b:77:d2:d7:11:6c:
         2d:71:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:44:42 2025 by rpki-client