Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS26666.roa
File:                     AS26666.roa (raw, json)
Hash identifier:          BW1PrbClK6GyPKxeUK0cGWrtB0TlSRfY+Lcsc631/DE=
Subject key identifier:   55:46:9B:3E:D4:0F:99:3B:EF:90:48:FA:66:E0:A6:BA:7E:85:E8:4F
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       44912A47666DB963377FB4B17E49D0F531A0A45D
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS26666.roa
Signing time:             Wed 06 May 2026 07:17:17 +0000
ROA not before:           Wed 06 May 2026 07:12:17 +0000
ROA not after:            Wed 05 May 2027 07:17:17 +0000
asID:                     26666
IP address blocks:        207.180.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:91:2a:47:66:6d:b9:63:37:7f:b4:b1:7e:49:d0:f5:31:a0:a4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:17 2026 GMT
            Not After : May  5 07:17:17 2027 GMT
        Subject: CN=55469B3ED40F993BEF9048FA66E0A6BA7E85E84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:1b:5b:d7:d0:80:7f:ca:7f:b4:10:2c:f1:
                    34:89:1b:87:b2:d0:be:70:d5:f1:62:65:19:e2:1a:
                    55:f4:da:ac:08:cc:15:ec:7a:f6:ec:e7:23:79:a9:
                    7d:ed:17:46:b5:8c:e4:12:2e:ba:d2:01:a8:19:22:
                    84:37:ca:e2:c5:32:34:d0:f6:9e:28:aa:eb:6a:9b:
                    2f:87:ed:51:a2:0a:ca:2a:cf:eb:ca:4f:99:7f:a4:
                    41:9e:11:bc:1b:13:90:ce:b8:ca:b0:c8:ef:cb:98:
                    56:ad:db:b8:5a:04:d5:1a:5d:6f:2b:42:a8:08:fb:
                    a2:24:93:15:e1:43:fb:fd:f7:8a:1c:ce:78:55:0a:
                    36:97:66:6f:a9:0d:aa:64:06:e8:fe:a0:ff:6f:17:
                    19:e5:02:9f:0c:b8:d2:b3:87:06:ea:43:92:f2:3f:
                    e8:f9:a5:79:4b:93:b0:c8:26:6b:96:a2:66:91:e4:
                    62:6f:9d:ec:7e:ff:1d:fa:4b:f0:fa:7b:08:44:a3:
                    9b:91:f7:34:38:74:4f:50:44:7d:6f:7f:6e:5c:19:
                    e5:c6:2a:4a:51:46:0e:3d:02:94:52:ff:f1:59:19:
                    ce:cd:18:60:9f:ca:c8:f7:56:6a:51:12:3f:49:b0:
                    63:bd:cc:3e:52:f3:13:52:af:0b:fa:55:cb:c9:ae:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:46:9B:3E:D4:0F:99:3B:EF:90:48:FA:66:E0:A6:BA:7E:85:E8:4F
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS26666.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:30:eb:34:27:86:38:59:b3:9e:db:08:ee:21:3e:e4:19:20:
         e6:d3:11:dc:07:e3:51:64:eb:43:20:eb:c6:d6:7b:77:9b:94:
         dd:74:5b:dc:e7:71:68:09:67:f6:03:5d:57:9a:bd:89:67:f9:
         d3:88:84:24:27:ba:a6:34:89:60:82:9e:89:88:08:08:64:3f:
         41:78:dd:bd:c1:6c:ac:ba:d2:74:06:07:f9:13:3b:22:67:34:
         ef:77:70:ea:9e:05:d1:d5:9c:6f:7f:d0:b4:99:83:08:79:b7:
         3a:82:af:3b:13:fb:1b:d4:5b:99:a7:1f:6b:6a:92:25:84:64:
         49:f6:e9:02:73:45:c4:a6:70:a6:21:fd:74:95:3d:ef:3e:e1:
         b5:da:a1:d0:f9:dd:07:3c:b5:e1:b3:1f:10:57:71:66:bd:15:
         16:19:13:84:b2:31:73:da:95:d4:5e:dd:5b:47:08:28:1c:5c:
         63:6b:6a:7c:f9:47:b7:0e:2d:a5:07:58:23:de:10:1a:a4:5c:
         1c:12:dc:57:80:58:aa:50:ee:f1:a5:20:03:49:10:08:0f:7f:
         cb:e6:3b:d4:1d:27:33:31:ab:5d:42:f1:15:d9:81:ee:21:6f:
         6d:cc:cd:ad:2d:98:80:a8:75:49:67:9d:58:8d:05:73:9c:a4:
         c8:28:9a:91
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIURJEqR2ZtuWM3f7SxfknQ9TGgpF0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE3WhcNMjcwNTA1MDcxNzE3
WjAzMTEwLwYDVQQDEyg1NTQ2OUIzRUQ0MEY5OTNCRUY5MDQ4RkE2NkUwQTZCQTdF
ODVFODRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ4bW9fQgH/K
f7QQLPE0iRuHstC+cNXxYmUZ4hpV9NqsCMwV7Hr27Ocjeal97RdGtYzkEi660gGo
GSKEN8rixTI00PaeKKrrapsvh+1RogrKKs/ryk+Zf6RBnhG8GxOQzrjKsMjvy5hW
rdu4WgTVGl1vK0KoCPuiJJMV4UP7/feKHM54VQo2l2ZvqQ2qZAbo/qD/bxcZ5QKf
DLjSs4cG6kOS8j/o+aV5S5OwyCZrlqJmkeRib53sfv8d+kvw+nsIRKObkfc0OHRP
UER9b39uXBnlxipKUUYOPQKUUv/xWRnOzRhgn8rI91ZqURI/SbBjvcw+UvMTUq8L
+lXLya7DdwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFVGmz7UD5k775BI+mbgprp+
hehPMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzI2NjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QoMA0GCSqGSIb3DQEBCwUAA4IB
AQAbMOs0J4Y4WbOe2wjuIT7kGSDm0xHcB+NRZOtDIOvG1nt3m5TddFvc53FoCWf2
A11Xmr2JZ/nTiIQkJ7qmNIlggp6JiAgIZD9BeN29wWysutJ0Bgf5EzsiZzTvd3Dq
ngXR1Zxvf9C0mYMIebc6gq87E/sb1FuZpx9rapIlhGRJ9ukCc0XEpnCmIf10lT3v
PuG12qHQ+d0HPLXhsx8QV3FmvRUWGROEsjFz2pXUXt1bRwgoHFxja2p8+Ue3Di2l
B1gj3hAapFwcEtxXgFiqUO7xpSADSRAID3/L5jvUHSczMatdQvEV2YHuIW9tzM2t
LZiAqHVJZ51YjQVznKTIKJqR
-----END CERTIFICATE-----
Generated at Thu May 7 04:13:03 2026 by rpki-client