Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
File: 8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa (raw, json)
Hash identifier: 3laCVBqD8bQpaidtMGaPXjwaiMM+KAvo+OaXxWZIfak=
Subject key identifier: FF:D5:51:17:09:07:C1:14:B5:26:58:E6:D3:7D:B2:B6:35:EB:DA:B0
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584D624A651C74AE147E82FAFA00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
Signing time: Fri 03 Apr 2026 13:00:30 +0000
ROA not before: Fri 03 Apr 2026 13:00:30 +0000
ROA not after: Thu 02 Jul 2026 13:00:30 +0000
asID: 26496
IP address blocks: 64.202.168.0/24 maxlen: 24
64.202.174.0/24 maxlen: 24
64.202.184.0/21 maxlen: 24
72.167.20.0/23 maxlen: 24
72.167.25.0/24 maxlen: 24
72.167.220.0/22 maxlen: 24
72.167.224.0/22 maxlen: 24
72.167.230.0/24 maxlen: 24
72.167.241.0/24 maxlen: 24
72.167.242.0/23 maxlen: 24
97.74.72.0/22 maxlen: 24
97.74.76.0/24 maxlen: 24
104.238.68.0/22 maxlen: 24
107.180.0.0/18 maxlen: 24
107.180.68.0/22 maxlen: 24
107.180.72.0/22 maxlen: 24
107.180.84.0/22 maxlen: 24
107.180.88.0/21 maxlen: 24
107.180.100.0/22 maxlen: 24
107.180.104.0/22 maxlen: 24
132.148.92.0/24 maxlen: 24
132.148.164.0/22 maxlen: 24
132.148.184.0/21 maxlen: 24
148.72.4.0/22 maxlen: 24
148.72.16.0/22 maxlen: 24
148.72.22.0/23 maxlen: 24
148.72.64.0/23 maxlen: 24
148.72.104.0/21 maxlen: 24
160.153.1.0/24 maxlen: 24
160.153.136.0/23 maxlen: 24
160.153.138.0/24 maxlen: 24
160.153.168.0/24 maxlen: 24
160.153.172.0/22 maxlen: 24
166.62.104.0/21 maxlen: 24
166.62.112.0/22 maxlen: 24
192.169.220.0/22 maxlen: 24
198.12.144.0/23 maxlen: 24
198.12.224.0/21 maxlen: 24
198.12.248.0/21 maxlen: 24
198.71.188.0/22 maxlen: 24
198.71.224.0/21 maxlen: 24
198.71.232.0/23 maxlen: 24
198.71.248.0/22 maxlen: 24
198.71.254.0/24 maxlen: 24
208.109.132.0/23 maxlen: 24
208.109.136.0/23 maxlen: 24
208.109.139.0/24 maxlen: 24
208.109.140.0/22 maxlen: 24
208.109.144.0/22 maxlen: 24
208.109.148.0/24 maxlen: 24
208.109.151.0/24 maxlen: 24
208.109.152.0/23 maxlen: 24
208.109.154.0/24 maxlen: 24
208.109.156.0/22 maxlen: 24
2603:4:1000::/47 maxlen: 48
2603:4:1004::/47 maxlen: 48
2603:4:100a::/47 maxlen: 48
2603:4:100c::/46 maxlen: 48
2603:4:1010::/46 maxlen: 48
2603:4:1014::/47 maxlen: 48
2603:4:1016::/48 maxlen: 48
2603:4:1019::/48 maxlen: 48
2603:4:101c::/46 maxlen: 48
2603:4:1500::/48 maxlen: 48
2603:4:1504::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:62:4a:65:1c:74:ae:14:7e:82:fa:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Apr 3 13:00:30 2026 GMT
Not After : Jul 2 13:00:30 2026 GMT
Subject: CN=a8020734-5d52-4a00-abe1-56fb065e879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:cc:f0:07:e2:4f:a0:fe:29:48:da:d6:27:
05:aa:cb:6d:8b:5a:81:ab:7e:ed:33:8c:70:14:03:
ea:64:08:ea:82:d9:c1:cd:73:b5:41:51:27:04:8c:
10:db:0b:37:f3:44:a5:b5:f3:11:08:c4:59:c8:c6:
13:0b:0a:30:4d:b2:5c:fb:94:d7:00:29:cc:40:b4:
e3:b7:7a:39:0a:03:2c:b6:5f:86:6b:27:90:28:de:
ce:b5:08:a8:39:f3:af:2b:b9:1f:42:65:ee:28:be:
b9:f9:e9:5b:92:39:59:a3:6c:c8:18:33:85:42:37:
28:31:5d:c7:50:4d:41:11:c1:8a:5d:ff:9a:a5:9c:
b3:20:d4:9b:3f:19:0a:e7:d3:87:da:76:1e:94:52:
c7:9d:79:78:05:49:29:64:8c:ed:b8:42:ab:78:71:
c6:0a:93:a2:dc:f3:55:03:0e:1e:82:43:de:c0:0e:
99:17:20:3f:28:93:bb:ca:25:d2:0f:7b:a9:08:ce:
20:c2:e7:7b:01:cd:3d:8a:4f:00:33:be:7d:18:5b:
7c:f9:a4:72:e9:f5:4c:b4:cb:de:ab:46:b3:23:50:
ab:65:7f:81:a1:75:ef:81:3b:3b:18:ec:e8:9a:fe:
fb:21:0b:15:b9:d3:b9:47:14:a7:d4:33:dc:e0:cf:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:51:17:09:07:C1:14:B5:26:58:E6:D3:7D:B2:B6:35:EB:DA:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.202.168.0/24
64.202.174.0/24
64.202.184.0/21
72.167.20.0/23
72.167.25.0/24
72.167.220.0-72.167.227.255
72.167.230.0/24
72.167.241.0-72.167.243.255
97.74.72.0-97.74.76.255
104.238.68.0/22
107.180.0.0/18
107.180.68.0-107.180.75.255
107.180.84.0-107.180.95.255
107.180.100.0-107.180.107.255
132.148.92.0/24
132.148.164.0/22
132.148.184.0/21
148.72.4.0/22
148.72.16.0/22
148.72.22.0/23
148.72.64.0/23
148.72.104.0/21
160.153.1.0/24
160.153.136.0-160.153.138.255
160.153.168.0/24
160.153.172.0/22
166.62.104.0-166.62.115.255
192.169.220.0/22
198.12.144.0/23
198.12.224.0/21
198.12.248.0/21
198.71.188.0/22
198.71.224.0-198.71.233.255
198.71.248.0/22
198.71.254.0/24
208.109.132.0/23
208.109.136.0/23
208.109.139.0-208.109.148.255
208.109.151.0-208.109.154.255
208.109.156.0/22
IPv6:
2603:4:1000::/47
2603:4:1004::/47
2603:4:100a::-2603:4:1016:ffff:ffff:ffff:ffff:ffff
2603:4:1019::/48
2603:4:101c::/46
2603:4:1500::/48
2603:4:1504::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ad:45:1d:7c:71:56:d9:75:c0:a5:80:42:64:f5:91:f5:b6:
4a:69:59:d3:2f:59:cd:92:89:5b:b3:2f:88:e7:5f:18:f2:97:
ce:68:06:12:a6:bb:01:49:8f:d0:a1:13:f6:c5:38:1c:1c:ff:
17:b4:a9:3a:71:25:68:99:85:f1:4e:99:db:db:2f:dd:77:e6:
c0:9f:3b:50:cf:67:29:f6:b3:d9:c3:8f:49:b8:fd:bc:18:bf:
39:56:8d:08:f1:47:ee:0b:8c:67:86:93:66:54:89:73:6b:5e:
dd:bd:e6:4d:9e:a9:ba:de:ea:a8:71:d8:b1:3b:31:16:28:3f:
d2:79:b3:97:3a:58:b3:a9:ab:cd:fe:ff:80:80:07:c8:c2:ba:
d2:85:56:40:73:a7:84:83:91:82:bc:fa:c5:c4:54:4c:0a:c5:
c6:1b:9d:d5:e0:e9:50:ad:9d:d5:12:a8:e7:97:98:86:a6:02:
5c:70:af:cb:d6:f6:53:fb:e8:15:b8:f7:a2:65:00:be:33:f1:
1c:fc:e9:ea:7e:2e:3b:9a:1a:6f:95:46:10:26:31:25:1e:69:
7b:41:ca:5b:d7:21:a0:4c:95:34:b9:3c:44:00:77:5b:9e:da:
b6:d0:ad:60:5e:eb:9e:ec:b5:e2:e4:b1:a6:c6:73:7d:ac:4c:
3a:aa:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:46 2026 by rpki-client