Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa
File:                     26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa (raw, json)
Hash identifier:          nBmw7ixWDyRSlusGidcIwFM7lQD5Qi2AdCUR90+FNEQ=
Subject key identifier:   14:18:56:69:DB:F7:53:F9:28:4D:76:D2:F0:A8:23:A8:F8:03:3D:7F
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584F7BB2FB09C2590FB09D6FE220
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     12129
IP address blocks:        74.126.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:fb:09:c2:59:0f:b0:9d:6f:e2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=5d82fcc0-5990-43fa-92db-b1007946ddb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:39:8c:ed:ca:f5:38:fa:41:ea:d3:34:7c:5e:
                    b4:41:79:fc:5b:0b:7c:ba:91:5f:8e:61:a0:73:b1:
                    a1:81:f8:2d:c1:3f:8d:5d:6d:ce:4e:d1:f8:81:13:
                    a2:ac:af:7d:82:2a:c2:ee:c7:fa:36:34:75:b4:4e:
                    04:19:73:ef:c4:25:74:e3:e5:62:90:c4:9e:5c:61:
                    e6:2d:7a:2b:70:80:2f:4c:e3:12:66:19:e1:cc:b0:
                    b4:fc:c5:dd:a5:3d:b9:44:42:5a:7f:60:44:ce:ba:
                    a0:71:84:e9:41:2f:bc:ea:d6:6d:c2:14:e8:b2:33:
                    94:12:92:4f:4e:6e:5e:c4:12:cf:45:cb:8d:67:f3:
                    38:30:ae:3a:5b:d6:d0:91:68:80:ac:8e:58:54:45:
                    f4:d7:6d:47:cf:bd:17:c6:92:56:e7:f9:f8:b7:58:
                    a5:1b:54:5f:f0:b8:38:aa:a0:3e:a6:a7:f9:7b:70:
                    71:4b:5d:35:d9:99:28:c6:4f:64:dc:79:68:a7:f7:
                    9a:13:a4:54:4d:c0:3c:0c:31:d9:1f:48:fd:b2:2d:
                    1e:e0:07:fc:40:d2:64:8d:0c:00:4e:0f:94:ed:b4:
                    85:5b:59:90:de:66:68:95:fa:22:3c:e8:99:b4:df:
                    46:33:0c:1a:8e:02:91:68:df:0b:32:e4:30:20:c7:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:56:69:DB:F7:53:F9:28:4D:76:D2:F0:A8:23:A8:F8:03:3D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:df:0a:83:0f:cf:e7:09:e1:67:8d:40:10:52:8d:f7:05:08:
         a4:a4:2a:a3:b6:53:7b:82:cb:78:e3:ff:7a:97:9d:3f:8c:92:
         32:3e:1d:05:d3:5b:df:ac:e9:32:46:78:ad:f9:84:aa:fc:a8:
         ad:7c:0a:75:02:85:0d:62:fd:0f:e3:90:22:d8:a3:2c:9c:98:
         ac:1e:da:ff:db:f7:9e:80:38:b3:3a:ab:7f:6a:df:f8:8f:30:
         e1:03:07:e5:8e:34:47:29:e3:2c:6c:cd:07:84:78:e7:61:fc:
         80:62:a2:89:26:cc:2f:4c:82:2b:25:43:47:78:7d:f2:f7:d0:
         a5:78:69:ae:8a:8a:67:8c:6a:e0:9d:bd:03:38:05:f6:dc:94:
         2b:e3:2e:13:14:01:d8:a2:58:3c:5d:51:d7:33:b6:c2:6f:9f:
         48:08:d9:85:4f:2f:31:fc:63:ea:6f:d3:71:55:cb:dd:a8:5d:
         d7:ae:1a:42:0e:7c:7d:23:1f:c9:e3:ff:dc:31:6f:a4:eb:57:
         34:26:f9:a7:5c:c2:f9:ac:a4:f7:97:85:ae:4e:74:6f:b5:a3:
         32:cc:11:21:5e:d4:cd:5a:a4:98:51:fb:5b:c2:86:67:5b:59:
         58:2e:d4:8e:16:10:d2:ac:05:ba:88:2a:a7:2f:0f:27:53:14:
         79:7b:b1:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svsJwlkPsJ1v4iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk
NWQ4MmZjYzAtNTk5MC00M2ZhLTkyZGItYjEwMDc5NDZkZGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjmM7cr1OPpB6tM0fF60QXn8Wwt8upFfjmGg
c7GhgfgtwT+NXW3OTtH4gROirK99girC7sf6NjR1tE4EGXPvxCV04+VikMSeXGHm
LXorcIAvTOMSZhnhzLC0/MXdpT25REJaf2BEzrqgcYTpQS+86tZtwhTosjOUEpJP
Tm5exBLPRcuNZ/M4MK46W9bQkWiArI5YVEX0121Hz70XxpJW5/n4t1ilG1Rf8Lg4
qqA+pqf5e3BxS1012Zkoxk9k3Hlop/eaE6RUTcA8DDHZH0j9si0e4Af8QNJkjQwA
Tg+U7bSFW1mQ3mZolfoiPOiZtN9GMwwajgKRaN8LMuQwIMf/CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQYVmnb91P5KE120vCoI6j4Az1/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMjYzMjRhYjEtN2E2My0z
ZmUwLWJmMjgtZTFmNTFlNzMxMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSn4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXfCoMPz+cJ4WeNQBBSjfcFCKSkKqO2U3uCy3jj/3qXnT+MkjI+HQXT
W9+s6TJGeK35hKr8qK18CnUChQ1i/Q/jkCLYoyycmKwe2v/b956AOLM6q39q3/iP
MOEDB+WONEcp4yxszQeEeOdh/IBiookmzC9MgislQ0d4ffL30KV4aa6KimeMauCd
vQM4BfbclCvjLhMUAdiiWDxdUdcztsJvn0gI2YVPLzH8Y+pv03FVy92oXdeuGkIO
fH0jH8nj/9wxb6TrVzQm+adcwvmspPeXha5OdG+1ozLMESFe1M1apJhR+1vChmdb
WVgu1I4WENKsBbqIKqcvDydTFHl7sVo=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:48:02 2026 by rpki-client