Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f6cf9c05-aee8-3266-be7f-1c75e52c696d.roa
File: f6cf9c05-aee8-3266-be7f-1c75e52c696d.roa (raw, json)
Hash identifier: 4QgOKObM3racdJyUbaqzVWmtVLo7leg+LhO0lezhZf4=
Subject key identifier: 09:2C:C6:EB:63:9F:2D:B6:D3:0B:66:DC:57:6E:B3:71:C1:66:7E:39
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584F37D60623AFDFABF710A119C0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f6cf9c05-aee8-3266-be7f-1c75e52c696d.roa
Signing time: Fri 18 Sep 2026 17:36:08 +0000
ROA not before: Fri 18 Sep 2026 17:36:08 +0000
ROA not after: Wed 16 Dec 2026 17:33:51 +0000
asID: 64267
IP address blocks: 16.217.112.0/24 maxlen: 24
16.217.113.0/24 maxlen: 24
16.217.114.0/24 maxlen: 24
16.217.115.0/24 maxlen: 24
136.162.128.0/24 maxlen: 24
136.162.131.0/24 maxlen: 24
136.162.144.0/24 maxlen: 24
136.162.147.0/24 maxlen: 24
136.162.156.0/24 maxlen: 24
136.162.159.0/24 maxlen: 24
136.162.163.0/24 maxlen: 24
136.162.167.0/24 maxlen: 24
136.162.169.0/24 maxlen: 24
136.162.171.0/24 maxlen: 24
136.162.174.0/24 maxlen: 24
136.162.176.0/24 maxlen: 24
136.162.178.0/24 maxlen: 24
136.162.180.0/24 maxlen: 24
136.162.183.0/24 maxlen: 24
136.162.188.0/24 maxlen: 24
136.162.191.0/24 maxlen: 24
136.162.224.0/24 maxlen: 24
136.162.227.0/24 maxlen: 24
136.162.230.0/24 maxlen: 24
136.162.237.0/24 maxlen: 24
136.162.239.0/24 maxlen: 24
136.162.244.0/24 maxlen: 24
136.162.247.0/24 maxlen: 24
136.162.249.0/24 maxlen: 24
136.162.251.0/24 maxlen: 24
161.114.4.0/24 maxlen: 24
161.114.20.0/24 maxlen: 24
161.114.28.0/24 maxlen: 24
161.114.32.0/24 maxlen: 24
161.114.36.0/24 maxlen: 24
161.114.43.0/24 maxlen: 24
161.114.68.0/24 maxlen: 24
161.114.74.0/24 maxlen: 24
161.114.79.0/24 maxlen: 24
161.114.92.0/24 maxlen: 24
161.114.102.0/24 maxlen: 24
161.114.107.0/24 maxlen: 24
161.114.111.0/24 maxlen: 24
161.114.117.0/24 maxlen: 24
161.114.123.0/24 maxlen: 24
161.114.129.0/24 maxlen: 24
161.114.135.0/24 maxlen: 24
161.114.167.0/24 maxlen: 24
161.114.171.0/24 maxlen: 24
161.114.175.0/24 maxlen: 24
161.114.195.0/24 maxlen: 24
161.114.199.0/24 maxlen: 24
161.114.207.0/24 maxlen: 24
161.114.215.0/24 maxlen: 24
161.114.219.0/24 maxlen: 24
161.114.223.0/24 maxlen: 24
192.26.59.0/24 maxlen: 24
192.132.148.0/24 maxlen: 24
192.132.151.0/24 maxlen: 24
192.132.153.0/24 maxlen: 24
192.132.155.0/24 maxlen: 24
192.132.157.0/24 maxlen: 24
192.132.159.0/24 maxlen: 24
192.132.161.0/24 maxlen: 24
192.132.162.0/24 maxlen: 24
192.132.163.0/24 maxlen: 24
192.132.164.0/24 maxlen: 24
192.132.165.0/24 maxlen: 24
192.132.166.0/24 maxlen: 24
192.132.167.0/24 maxlen: 24
192.132.168.0/24 maxlen: 24
192.132.169.0/24 maxlen: 24
192.132.170.0/24 maxlen: 24
192.132.171.0/24 maxlen: 24
192.132.172.0/24 maxlen: 24
192.132.173.0/24 maxlen: 24
192.132.174.0/24 maxlen: 24
192.132.175.0/24 maxlen: 24
192.132.180.0/24 maxlen: 24
192.132.181.0/24 maxlen: 24
192.132.182.0/24 maxlen: 24
192.132.184.0/24 maxlen: 24
192.132.187.0/24 maxlen: 24
198.29.80.0/24 maxlen: 24
198.29.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:d6:06:23:af:df:ab:f7:10:a1:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Sep 18 17:36:08 2026 GMT
Not After : Dec 16 17:33:51 2026 GMT
Subject: CN=fb9cf0bf-14a2-4cc9-bba3-e2ae378abf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:e8:dc:da:af:54:4b:74:15:7d:4d:70:05:
18:b4:5c:c3:80:87:1b:d3:93:05:a6:f3:be:cb:bc:
80:d6:fa:4f:6a:b0:3b:93:e0:41:79:8e:3d:32:de:
f9:35:4c:79:88:bd:e4:6c:84:1c:c1:6a:34:fe:ef:
b6:5b:56:f1:1b:e1:df:11:b4:51:10:63:0a:05:fb:
aa:a4:67:89:40:66:a9:33:43:93:86:1e:96:27:7b:
62:4d:37:40:f1:fe:93:41:06:f8:ff:6a:55:63:17:
ca:93:c8:3b:bf:57:c2:07:48:6d:7f:1f:21:78:7c:
3e:a1:4c:d5:30:3d:db:2a:53:36:81:7b:16:97:36:
82:0f:0e:22:13:d5:88:90:73:1a:0f:2e:76:46:2b:
c2:32:2d:cd:67:91:fe:5e:4c:36:87:a4:25:43:81:
65:de:ab:46:a5:07:e0:60:e9:db:66:44:50:fa:25:
d5:1a:88:f0:5e:b5:27:c5:89:14:3d:e7:72:86:1c:
28:6c:3d:5b:a1:39:c4:b7:58:08:1f:c3:cb:fe:05:
b9:8c:4b:55:8a:c4:e3:0f:54:64:44:2e:18:81:35:
a6:9e:fc:b0:fc:0a:9e:30:b0:59:32:3c:6e:8c:24:
52:9f:2c:98:bc:e8:53:b3:7a:64:bc:a8:c1:a0:59:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:C6:EB:63:9F:2D:B6:D3:0B:66:DC:57:6E:B3:71:C1:66:7E:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f6cf9c05-aee8-3266-be7f-1c75e52c696d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.217.112.0/22
136.162.128.0/24
136.162.131.0/24
136.162.144.0/24
136.162.147.0/24
136.162.156.0/24
136.162.159.0/24
136.162.163.0/24
136.162.167.0/24
136.162.169.0/24
136.162.171.0/24
136.162.174.0/24
136.162.176.0/24
136.162.178.0/24
136.162.180.0/24
136.162.183.0/24
136.162.188.0/24
136.162.191.0/24
136.162.224.0/24
136.162.227.0/24
136.162.230.0/24
136.162.237.0/24
136.162.239.0/24
136.162.244.0/24
136.162.247.0/24
136.162.249.0/24
136.162.251.0/24
161.114.4.0/24
161.114.20.0/24
161.114.28.0/24
161.114.32.0/24
161.114.36.0/24
161.114.43.0/24
161.114.68.0/24
161.114.74.0/24
161.114.79.0/24
161.114.92.0/24
161.114.102.0/24
161.114.107.0/24
161.114.111.0/24
161.114.117.0/24
161.114.123.0/24
161.114.129.0/24
161.114.135.0/24
161.114.167.0/24
161.114.171.0/24
161.114.175.0/24
161.114.195.0/24
161.114.199.0/24
161.114.207.0/24
161.114.215.0/24
161.114.219.0/24
161.114.223.0/24
192.26.59.0/24
192.132.148.0/24
192.132.151.0/24
192.132.153.0/24
192.132.155.0/24
192.132.157.0/24
192.132.159.0/24
192.132.161.0-192.132.175.255
192.132.180.0-192.132.182.255
192.132.184.0/24
192.132.187.0/24
198.29.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:08:19:53:a5:71:a4:74:bd:e2:8a:7e:e7:07:bb:e1:5e:11:
f7:53:a3:fa:cc:0b:54:45:7c:3a:d3:a1:15:0c:84:56:b7:2b:
33:78:9b:02:c0:5a:f5:5d:2f:1f:28:5e:ab:52:1b:72:44:3f:
54:fc:dc:76:a0:6f:91:fa:72:16:04:46:c9:fa:d0:18:eb:1e:
e8:6c:42:df:be:2e:24:98:2a:8d:bd:c8:78:07:f9:52:66:44:
96:ab:9a:c1:95:fb:eb:7a:32:16:6a:cd:38:de:8f:94:0a:6f:
f0:ef:0a:d7:c8:a1:13:45:74:9f:06:38:5c:fe:d9:9d:4f:c9:
6b:df:5d:f9:cc:b6:0f:32:2e:99:b7:d3:a8:ca:79:ff:78:c7:
96:e3:b0:ec:92:be:64:07:f6:d1:4c:20:fc:53:0f:33:03:b4:
ff:32:9d:ba:ac:e0:0c:a6:c7:cc:f3:c4:b4:d6:92:35:45:f8:
c1:83:8e:d0:52:61:03:a8:c7:07:3f:1b:60:da:9c:f0:24:bb:
96:77:58:cd:ac:ed:2d:90:76:e0:46:be:80:34:dd:e5:75:3b:
bd:d1:4d:2c:89:1d:5b:86:9a:01:db:ee:86:cf:98:15:16:42:
21:1f:79:67:2b:7f:b6:a2:d0:ca:ae:11:52:51:dd:81:f1:d2:
38:3d:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:27:12 2026 by rpki-client