
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
File: eb65570a-6746-3330-9ec5-02810756b2a4.roa (raw, json)
Hash identifier: t3UlN0BMT5DEgBUnFQuIzsu2SM85dD8eDPjzZ1w0wyk=
Subject key identifier: DA:BE:48:1A:F9:B7:37:62:DE:B2:4E:4F:2A:AB:10:99:77:F5:8C:6C
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F4328584A03A555C066B1E8862377FA80
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
Signing time: Thu 29 May 2025 13:01:03 +0000
ROA not before: Thu 29 May 2025 13:01:03 +0000
ROA not after: Wed 27 Aug 2025 13:01:03 +0000
asID: 400981
IP address blocks: 23.83.224.0/19 maxlen: 24
43.243.84.0/22 maxlen: 24
45.78.64.0/20 maxlen: 24
46.254.88.0/22 maxlen: 24
64.64.224.0/19 maxlen: 24
65.49.130.0/23 maxlen: 24
65.49.132.0/22 maxlen: 24
65.49.144.0/23 maxlen: 24
65.49.150.0/23 maxlen: 24
65.49.192.0/19 maxlen: 24
65.49.224.0/20 maxlen: 24
66.98.112.0/20 maxlen: 24
67.216.192.0/19 maxlen: 24
67.218.128.0/19 maxlen: 24
67.230.160.0/19 maxlen: 24
68.168.128.0/20 maxlen: 24
69.171.64.0/20 maxlen: 24
69.194.8.0/21 maxlen: 24
74.82.192.0/19 maxlen: 24
74.120.168.0/21 maxlen: 24
74.211.96.0/19 maxlen: 24
80.251.208.0/20 maxlen: 24
89.208.240.0/20 maxlen: 24
93.179.96.0/21 maxlen: 24
93.179.112.0/21 maxlen: 24
93.179.124.0/22 maxlen: 24
94.103.4.0/22 maxlen: 24
95.163.192.0/20 maxlen: 24
95.169.0.0/19 maxlen: 24
95.181.188.0/22 maxlen: 24
96.45.176.0/20 maxlen: 24
97.64.16.0/20 maxlen: 24
97.64.32.0/20 maxlen: 24
97.64.80.0/22 maxlen: 24
97.64.104.0/21 maxlen: 24
97.64.120.0/21 maxlen: 24
98.142.128.0/20 maxlen: 24
104.36.64.0/21 maxlen: 24
104.36.184.0/22 maxlen: 24
104.129.180.0/22 maxlen: 24
104.129.184.0/22 maxlen: 24
104.153.96.0/21 maxlen: 24
104.225.144.0/20 maxlen: 24
104.225.232.0/21 maxlen: 24
104.243.16.0/20 maxlen: 24
104.244.88.0/21 maxlen: 24
104.245.40.0/21 maxlen: 24
104.245.188.0/22 maxlen: 24
107.182.16.0/20 maxlen: 24
144.34.128.0/17 maxlen: 24
150.242.88.0/22 maxlen: 24
162.211.220.0/22 maxlen: 24
162.219.120.0/21 maxlen: 24
162.244.240.0/22 maxlen: 24
172.93.32.0/20 maxlen: 24
172.96.16.0/22 maxlen: 24
172.96.192.0/18 maxlen: 24
173.242.112.0/20 maxlen: 24
174.137.48.0/20 maxlen: 24
176.122.128.0/18 maxlen: 24
184.170.208.0/20 maxlen: 24
185.180.16.0/22 maxlen: 24
185.199.240.0/22 maxlen: 24
185.205.180.0/22 maxlen: 24
185.212.56.0/22 maxlen: 24
192.69.88.0/21 maxlen: 24
198.181.32.0/20 maxlen: 24
198.181.56.0/22 maxlen: 24
199.19.104.0/21 maxlen: 24
199.115.228.0/22 maxlen: 24
199.168.136.0/21 maxlen: 24
199.180.112.0/21 maxlen: 24
199.193.124.0/22 maxlen: 24
206.190.232.0/21 maxlen: 24
216.24.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Jun 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:03:a5:55:c0:66:b1:e8:86:23:77:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: May 29 13:01:03 2025 GMT
Not After : Aug 27 13:01:03 2025 GMT
Subject: CN=55e90378-05c3-45e4-9b88-d10446ef4624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:f6:5f:5f:1f:b3:2a:78:c6:a6:18:a3:d0:
fa:21:6b:c5:30:35:2b:e0:24:bc:50:01:46:2b:9e:
da:e7:6b:3f:e6:59:3e:91:d8:31:8c:02:d2:24:f9:
23:43:7a:25:a3:7d:2a:f0:23:dd:b6:4c:a8:e8:cf:
17:56:3b:3a:84:82:f6:c7:8e:c9:e4:41:02:3d:71:
cd:37:b6:17:34:c6:b1:dc:66:13:fa:de:ad:a2:27:
87:c6:0f:5d:50:4f:91:15:46:aa:49:e7:89:4a:18:
78:89:e7:33:18:2a:21:f5:0e:f1:cb:cd:20:9b:81:
bd:bb:e9:9e:8e:7a:1a:a6:3c:56:2d:66:f0:27:1c:
6a:c2:72:f1:f6:67:46:31:b3:2d:09:12:ad:3e:a2:
56:a2:ad:f0:40:28:b1:5e:7e:7c:a8:b0:65:81:7e:
3b:a2:8e:3b:3e:3f:90:08:88:99:01:5b:a9:ed:51:
59:63:18:1b:ee:cc:1b:e1:f7:10:d9:6c:6d:47:1f:
b7:16:28:73:cc:54:ca:9f:8d:70:31:b4:92:06:92:
17:d3:42:5c:dc:a6:3a:ee:21:03:28:21:46:c4:34:
61:2a:17:63:50:13:73:5c:63:7b:32:cc:8e:b4:07:
e5:48:7b:a9:b4:f7:9a:27:00:34:fb:a1:b1:a0:28:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BE:48:1A:F9:B7:37:62:DE:B2:4E:4F:2A:AB:10:99:77:F5:8C:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.224.0/19
43.243.84.0/22
45.78.64.0/20
46.254.88.0/22
64.64.224.0/19
65.49.130.0-65.49.135.255
65.49.144.0/23
65.49.150.0/23
65.49.192.0-65.49.239.255
66.98.112.0/20
67.216.192.0/19
67.218.128.0/19
67.230.160.0/19
68.168.128.0/20
69.171.64.0/20
69.194.8.0/21
74.82.192.0/19
74.120.168.0/21
74.211.96.0/19
80.251.208.0/20
89.208.240.0/20
93.179.96.0/21
93.179.112.0/21
93.179.124.0/22
94.103.4.0/22
95.163.192.0/20
95.169.0.0/19
95.181.188.0/22
96.45.176.0/20
97.64.16.0-97.64.47.255
97.64.80.0/22
97.64.104.0/21
97.64.120.0/21
98.142.128.0/20
104.36.64.0/21
104.36.184.0/22
104.129.180.0-104.129.187.255
104.153.96.0/21
104.225.144.0/20
104.225.232.0/21
104.243.16.0/20
104.244.88.0/21
104.245.40.0/21
104.245.188.0/22
107.182.16.0/20
144.34.128.0/17
150.242.88.0/22
162.211.220.0/22
162.219.120.0/21
162.244.240.0/22
172.93.32.0/20
172.96.16.0/22
172.96.192.0/18
173.242.112.0/20
174.137.48.0/20
176.122.128.0/18
184.170.208.0/20
185.180.16.0/22
185.199.240.0/22
185.205.180.0/22
185.212.56.0/22
192.69.88.0/21
198.181.32.0/20
198.181.56.0/22
199.19.104.0/21
199.115.228.0/22
199.168.136.0/21
199.180.112.0/21
199.193.124.0/22
206.190.232.0/21
216.24.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b7:4b:b8:31:cb:13:9f:f4:e4:e0:be:20:fe:11:a5:ab:32:
c8:1b:1b:69:ca:ea:e8:a0:e4:d4:da:1b:92:5a:05:66:bd:aa:
c2:6f:4b:b1:d7:14:d9:cb:5f:1a:2b:10:33:8e:eb:3d:83:f2:
0d:b6:ea:5e:54:ea:c4:72:8d:dd:e3:b7:74:c0:49:33:c7:a8:
d8:d5:52:ac:5c:4c:7f:3a:de:35:e4:00:7c:5a:a7:c3:a2:87:
6f:26:78:a0:13:c3:a2:e2:31:5e:1b:9d:6d:71:97:f4:34:26:
fe:b7:54:17:43:91:fc:f8:ef:3f:93:1b:f2:b5:46:00:c5:1c:
a3:27:91:f9:db:67:7e:80:3d:ee:07:eb:ca:2a:77:16:c2:1a:
2a:c1:e7:bb:00:a8:60:d4:7c:2c:7c:f0:0a:76:82:24:9b:16:
16:f1:40:dd:bb:51:8d:81:c8:51:8e:05:71:dd:ca:ab:56:af:
51:45:30:1d:b4:6a:4d:e1:7f:de:25:1b:7e:c0:d8:04:6c:ed:
73:ab:d9:63:85:73:d5:57:47:6f:fc:07:83:f0:b8:b6:77:dc:
37:69:a0:17:63:22:87:f9:fa:ee:ff:7c:50:c7:3f:88:74:7d:
cc:2b:d9:27:be:80:f4:f2:35:64:e9:80:99:c7:09:8d:17:74:
0d:bd:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:52:36 2025 by rpki-client