Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS26127.roa
File:                     AS26127.roa (raw, json)
Hash identifier:          RoXatxApAuqvezmck3MIbGcNmo8v2ghfBRLysR9A+Q0=
Subject key identifier:   1D:36:C8:60:43:CB:88:C4:F6:80:BF:7B:E4:80:01:8A:66:6A:56:02
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       5ED22E98617EF8F60006779677E7402010F1CF40
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS26127.roa
Signing time:             Tue 09 Sep 2025 13:03:17 +0000
ROA not before:           Tue 09 Sep 2025 12:58:17 +0000
ROA not after:            Tue 08 Sep 2026 13:03:17 +0000
asID:                     26127
IP address blocks:        50.104.124.0/24 maxlen: 24
                          50.104.168.0/24 maxlen: 24
                          50.106.84.0/24 maxlen: 24
                          50.121.2.0/24 maxlen: 24
                          50.127.127.0/24 maxlen: 24
                          74.40.22.0/24 maxlen: 24
                          184.19.239.0/24 maxlen: 24
                          2001:1960:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 12:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:2e:98:61:7e:f8:f6:00:06:77:96:77:e7:40:20:10:f1:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Sep  9 12:58:17 2025 GMT
            Not After : Sep  8 13:03:17 2026 GMT
        Subject: CN=1D36C86043CB88C4F680BF7BE480018A666A5602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:c1:ad:6b:36:c4:06:7f:37:6a:0b:94:1b:
                    17:9c:b6:bf:c0:44:58:c4:f3:24:2a:e4:12:cf:87:
                    40:13:3d:b9:4d:73:eb:38:f4:47:cb:5a:61:18:42:
                    96:ea:8c:9f:a0:a2:b3:54:c7:71:6a:df:74:55:ff:
                    53:33:b8:a4:56:00:fc:be:0c:27:fa:68:1a:c7:a8:
                    4b:4d:00:69:79:e8:1d:22:c3:fb:ee:59:cf:39:bc:
                    08:90:7e:05:68:fd:11:69:83:cc:93:f1:57:0b:5d:
                    55:58:83:c3:41:4f:2d:3d:eb:68:c9:35:86:06:36:
                    cc:28:6d:c5:c1:57:21:2e:22:1f:aa:e7:f3:44:b2:
                    c4:c9:55:eb:5d:44:24:c6:0e:ac:6c:b7:95:2c:79:
                    11:92:a4:1a:54:54:cc:e1:cc:83:85:5f:25:01:d8:
                    10:23:f9:e9:b8:80:0d:3b:10:5d:bc:fb:8a:7c:12:
                    1a:3e:fa:c4:57:6a:ae:44:a1:c7:6d:57:c0:a1:97:
                    e5:d0:a4:72:41:24:a7:6b:15:89:d7:f0:aa:5e:40:
                    57:94:15:44:2e:dd:dd:f9:8d:0b:6d:e3:a3:33:31:
                    c3:70:d8:03:b3:4c:8a:7b:38:03:b7:bc:ff:29:d5:
                    3e:ff:3b:ce:4b:dd:28:26:f3:55:0a:2f:44:04:ee:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:C8:60:43:CB:88:C4:F6:80:BF:7B:E4:80:01:8A:66:6A:56:02
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS26127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.104.124.0/24
                  50.104.168.0/24
                  50.106.84.0/24
                  50.121.2.0/24
                  50.127.127.0/24
                  74.40.22.0/24
                  184.19.239.0/24
                IPv6:
                  2001:1960:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:3c:0c:b3:c9:32:ba:ff:45:b8:e6:f8:dc:ba:74:dc:23:
         7b:46:7a:90:1e:5e:df:30:82:58:c1:8c:c3:09:ac:90:c4:ba:
         16:e5:21:d2:cb:17:9e:1e:0b:76:ae:ab:36:ce:86:47:bd:39:
         8f:30:3d:66:24:32:1d:7b:82:20:7d:78:a8:cc:5d:49:07:66:
         df:a0:0d:f8:6c:b9:6a:96:66:b8:98:ce:ee:c7:39:10:6b:1f:
         3e:65:e9:86:41:45:d2:24:bf:6c:b3:26:13:cc:ef:56:f4:f2:
         c2:e9:68:80:4a:4c:74:41:27:c6:f9:24:1a:3f:b0:3f:2c:7d:
         a0:0a:8f:a4:e6:6f:30:81:a7:82:f3:f7:8b:40:37:06:20:bd:
         d8:5e:6a:3b:41:f3:2c:c3:30:1b:ae:12:8c:23:59:bb:01:60:
         9a:eb:45:f1:98:13:31:e1:96:95:d1:d3:dd:80:15:20:bc:e2:
         92:f6:5d:db:32:1c:9f:2a:7f:a8:19:7c:5a:e1:2b:68:7d:6e:
         29:ce:fa:ae:34:98:dd:02:8f:83:bc:a5:0c:9e:e8:28:1d:16:
         a3:a8:3f:df:2a:a5:9e:84:c0:e0:d9:31:1c:8a:82:a2:9c:e6:
         ca:07:24:be:59:1a:29:0f:3c:97:90:84:02:87:36:34:42:58:
         14:ce:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:45:08 2025 by rpki-client