Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26666.roa
File:                     AS26666.roa (raw, json)
Hash identifier:          Zo2BNYhCfHgVVegwY74cSOhQ9Md1QdwHg4c2o35uhg4=
Subject key identifier:   89:79:48:4E:C0:9B:04:E6:67:25:74:BC:AE:A0:02:2D:15:35:46:7C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       D68899F3EA89331C9E34335F734C25255FDADD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26666.roa
Signing time:             Thu 13 Aug 2026 09:41:12 +0000
ROA not before:           Thu 13 Aug 2026 09:36:12 +0000
ROA not after:            Thu 12 Aug 2027 09:41:12 +0000
asID:                     26666
IP address blocks:        104.234.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d6:88:99:f3:ea:89:33:1c:9e:34:33:5f:73:4c:25:25:5f:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 13 09:36:12 2026 GMT
            Not After : Aug 12 09:41:12 2027 GMT
        Subject: CN=8979484EC09B04E6672574BCAEA0022D1535467C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:aa:69:a2:82:24:e2:33:92:d9:dc:fb:c7:
                    2c:f7:78:66:39:f6:1d:9b:66:db:5f:10:e7:a2:83:
                    37:cc:a7:e9:93:47:fa:f7:b3:86:9d:72:9c:3a:2b:
                    cb:74:d4:4a:26:c6:54:50:89:0e:f3:33:a9:42:3f:
                    33:19:eb:f9:b3:8b:b0:da:75:47:85:9f:57:b9:f7:
                    cb:33:12:54:ed:56:17:33:c2:4b:b7:0a:99:1c:82:
                    a5:e4:7a:ff:78:90:00:9c:2a:47:23:00:9b:60:04:
                    e3:70:51:85:65:54:57:ac:98:83:73:46:7e:92:32:
                    54:93:a3:7d:fe:da:e1:88:3a:0a:92:e2:5f:d5:50:
                    e6:12:e8:26:7c:0e:94:23:81:17:ff:60:80:32:25:
                    fe:85:46:d6:17:98:b6:b7:b8:5b:e0:8a:5c:3a:01:
                    5a:ad:b2:7f:e6:15:d3:99:3c:1d:7d:4f:3d:1b:a5:
                    af:b5:24:dc:ef:47:55:d4:2c:b6:04:67:d0:54:b5:
                    f0:03:5b:e4:19:3d:95:db:0d:11:7d:02:a1:c1:d1:
                    e5:f3:d8:ac:27:0c:e1:96:94:29:51:5b:9d:e0:59:
                    c3:c4:4a:d0:6e:c4:41:97:52:43:b0:d1:87:85:cd:
                    86:63:b6:4c:2e:49:51:f0:e3:3f:01:5b:b3:41:a0:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:79:48:4E:C0:9B:04:E6:67:25:74:BC:AE:A0:02:2D:15:35:46:7C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26666.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:03:f6:32:f3:90:62:d1:64:d6:35:a1:40:90:b1:d5:05:19:
         8f:8b:c6:de:ff:c5:bd:6e:c9:d3:fc:1f:63:64:63:1c:64:e0:
         ee:18:f2:14:5c:cc:ca:39:57:46:96:1f:b3:86:07:b0:f6:a6:
         a8:dd:3f:c6:7d:31:e0:32:fa:fa:54:bb:d7:b3:3c:f2:6f:d3:
         71:55:d2:f8:00:78:08:1e:a4:79:5f:c6:62:b6:1a:63:3a:9f:
         89:a1:ad:fa:37:2c:0b:7b:03:7d:69:df:55:21:8c:d0:75:c4:
         2a:37:02:b4:0d:62:46:37:34:86:ed:b1:20:75:2e:82:ef:1f:
         27:98:fe:6b:80:bd:e6:e7:cc:de:1b:b8:88:96:87:d2:1e:95:
         08:61:45:e8:9e:f9:b1:fe:3a:7e:04:3b:d7:af:13:5a:fc:31:
         a6:33:9c:fa:9b:b9:88:76:53:e8:23:69:df:75:41:41:22:1c:
         f4:0d:b1:d0:61:4c:54:32:03:fa:02:d6:75:ab:6f:c5:5e:47:
         fb:17:8a:a9:0c:20:c8:d9:89:30:68:2c:4a:ab:d8:82:f7:05:
         7e:8b:23:c2:69:ce:ea:aa:7b:01:ad:75:63:37:74:00:8a:1c:
         4b:13:bf:cf:15:c2:e5:5e:ed:8b:ed:6b:a4:f0:b7:b6:fb:1b:
         97:42:a7:1b
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUANaImfPqiTMcnjQzX3NMJSVf2t0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwODEzMDkzNjEyWhcNMjcwODEyMDk0MTEy
WjAzMTEwLwYDVQQDEyg4OTc5NDg0RUMwOUIwNEU2NjcyNTc0QkNBRUEwMDIyRDE1
MzU0NjdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12eqaaKCJOIz
ktnc+8cs93hmOfYdm2bbXxDnooM3zKfpk0f697OGnXKcOivLdNRKJsZUUIkO8zOp
Qj8zGev5s4uw2nVHhZ9XuffLMxJU7VYXM8JLtwqZHIKl5Hr/eJAAnCpHIwCbYATj
cFGFZVRXrJiDc0Z+kjJUk6N9/trhiDoKkuJf1VDmEugmfA6UI4EX/2CAMiX+hUbW
F5i2t7hb4IpcOgFarbJ/5hXTmTwdfU89G6WvtSTc70dV1Cy2BGfQVLXwA1vkGT2V
2w0RfQKhwdHl89isJwzhlpQpUVud4FnDxErQbsRBl1JDsNGHhc2GY7ZMLklR8OM/
AVuzQaD2rQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIl5SE7AmwTmZyV0vK6gAi0V
NUZ8MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI2NjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpdMA0GCSqGSIb3DQEBCwUAA4IB
AQCCA/Yy85Bi0WTWNaFAkLHVBRmPi8be/8W9bsnT/B9jZGMcZODuGPIUXMzKOVdG
lh+zhgew9qao3T/GfTHgMvr6VLvXszzyb9NxVdL4AHgIHqR5X8ZithpjOp+Joa36
NywLewN9ad9VIYzQdcQqNwK0DWJGNzSG7bEgdS6C7x8nmP5rgL3m58zeG7iIlofS
HpUIYUXonvmx/jp+BDvXrxNa/DGmM5z6m7mIdlPoI2nfdUFBIhz0DbHQYUxUMgP6
AtZ1q2/FXkf7F4qpDCDI2YkwaCxKq9iC9wV+iyPCac7qqnsBrXVjN3QAihxLE7/P
FcLlXu2L7Wuk8Le2+xuXQqcb
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:53:17 2026 by rpki-client