Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
File: 8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa (raw, json)
Hash identifier: 8l/ap4kYjfCqiOz2d7npOZUWl/2R+pkeDy5P7f1xVSU=
Subject key identifier: DD:C5:71:9B:87:F4:54:CC:D4:7A:30:D9:E0:94:BB:42:2A:B3:D0:70
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584E428F2871B0219C1664728640
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
Signing time: Mon 22 Jun 2026 21:00:12 +0000
ROA not before: Mon 22 Jun 2026 21:00:12 +0000
ROA not after: Sun 20 Sep 2026 21:00:12 +0000
asID: 26496
IP address blocks: 64.202.168.0/24 maxlen: 24
64.202.174.0/24 maxlen: 24
64.202.184.0/21 maxlen: 24
72.167.20.0/23 maxlen: 24
72.167.25.0/24 maxlen: 24
72.167.220.0/22 maxlen: 24
72.167.224.0/22 maxlen: 24
72.167.230.0/24 maxlen: 24
72.167.241.0/24 maxlen: 24
72.167.242.0/23 maxlen: 24
97.74.72.0/22 maxlen: 24
97.74.76.0/24 maxlen: 24
104.238.68.0/22 maxlen: 24
107.180.0.0/18 maxlen: 24
107.180.68.0/22 maxlen: 24
107.180.72.0/22 maxlen: 24
107.180.84.0/22 maxlen: 24
107.180.88.0/21 maxlen: 24
107.180.100.0/22 maxlen: 24
107.180.104.0/22 maxlen: 24
132.148.92.0/24 maxlen: 24
132.148.164.0/22 maxlen: 24
132.148.184.0/21 maxlen: 24
148.72.4.0/22 maxlen: 24
148.72.16.0/22 maxlen: 24
148.72.22.0/23 maxlen: 24
148.72.64.0/23 maxlen: 24
148.72.104.0/21 maxlen: 24
160.153.1.0/24 maxlen: 24
160.153.136.0/23 maxlen: 24
160.153.138.0/24 maxlen: 24
160.153.168.0/24 maxlen: 24
160.153.172.0/22 maxlen: 24
166.62.104.0/21 maxlen: 24
166.62.112.0/22 maxlen: 24
192.169.220.0/22 maxlen: 24
198.12.144.0/23 maxlen: 24
198.12.224.0/21 maxlen: 24
198.12.248.0/21 maxlen: 24
198.71.188.0/22 maxlen: 24
198.71.224.0/21 maxlen: 24
198.71.232.0/23 maxlen: 24
198.71.248.0/22 maxlen: 24
198.71.254.0/24 maxlen: 24
208.109.132.0/23 maxlen: 24
208.109.136.0/23 maxlen: 24
208.109.139.0/24 maxlen: 24
208.109.140.0/22 maxlen: 24
208.109.144.0/22 maxlen: 24
208.109.148.0/24 maxlen: 24
208.109.151.0/24 maxlen: 24
208.109.152.0/23 maxlen: 24
208.109.154.0/24 maxlen: 24
208.109.156.0/22 maxlen: 24
2603:4:1000::/47 maxlen: 48
2603:4:1004::/47 maxlen: 48
2603:4:100a::/47 maxlen: 48
2603:4:100c::/46 maxlen: 48
2603:4:1010::/46 maxlen: 48
2603:4:1014::/47 maxlen: 48
2603:4:1016::/48 maxlen: 48
2603:4:1019::/48 maxlen: 48
2603:4:101c::/46 maxlen: 48
2603:4:1500::/48 maxlen: 48
2603:4:1504::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:42:8f:28:71:b0:21:9c:16:64:72:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jun 22 21:00:12 2026 GMT
Not After : Sep 20 21:00:12 2026 GMT
Subject: CN=25966759-9946-473b-8f67-b16b027a4488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:06:67:87:0a:42:41:57:89:89:a7:19:73:
8d:25:5d:a2:7a:1c:69:66:26:a2:6d:1c:ab:7c:48:
73:2b:26:ab:71:a8:b7:d3:5d:cd:98:36:1c:ad:a7:
ae:01:c9:8a:40:ee:97:05:76:27:f9:53:11:4f:ac:
7f:74:74:de:c9:3f:64:b6:20:8a:31:24:2b:7c:59:
f4:db:1d:17:3f:f0:81:d2:c5:62:35:09:74:7f:78:
4d:47:fe:1e:55:fb:39:13:fb:48:0e:2e:d2:e1:f7:
91:8f:99:2a:50:7d:5a:11:9e:1d:4b:79:22:a9:4b:
c9:73:44:25:e5:2a:2c:a3:b6:11:a0:74:4b:b0:9b:
e6:cc:56:bf:ac:d4:e0:d8:a1:f7:d0:b2:cb:c1:d9:
e4:e9:65:b6:a4:77:af:23:12:2e:8e:bc:14:f5:db:
d2:e2:a0:ff:54:dc:9e:42:c1:7f:6c:59:7c:d1:57:
0f:ef:20:00:9c:5c:6a:d6:f4:4a:28:01:d0:a5:28:
1e:85:a8:a9:24:72:b7:3e:2a:c6:93:93:de:cd:43:
d2:f7:2c:57:df:88:6d:b9:78:45:f2:bd:01:8a:dc:
3d:fd:de:ac:84:ae:8b:aa:01:ff:0f:58:b8:05:ef:
25:0c:da:ee:f9:09:bc:d9:bd:ec:c5:7b:1b:02:87:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C5:71:9B:87:F4:54:CC:D4:7A:30:D9:E0:94:BB:42:2A:B3:D0:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.202.168.0/24
64.202.174.0/24
64.202.184.0/21
72.167.20.0/23
72.167.25.0/24
72.167.220.0-72.167.227.255
72.167.230.0/24
72.167.241.0-72.167.243.255
97.74.72.0-97.74.76.255
104.238.68.0/22
107.180.0.0/18
107.180.68.0-107.180.75.255
107.180.84.0-107.180.95.255
107.180.100.0-107.180.107.255
132.148.92.0/24
132.148.164.0/22
132.148.184.0/21
148.72.4.0/22
148.72.16.0/22
148.72.22.0/23
148.72.64.0/23
148.72.104.0/21
160.153.1.0/24
160.153.136.0-160.153.138.255
160.153.168.0/24
160.153.172.0/22
166.62.104.0-166.62.115.255
192.169.220.0/22
198.12.144.0/23
198.12.224.0/21
198.12.248.0/21
198.71.188.0/22
198.71.224.0-198.71.233.255
198.71.248.0/22
198.71.254.0/24
208.109.132.0/23
208.109.136.0/23
208.109.139.0-208.109.148.255
208.109.151.0-208.109.154.255
208.109.156.0/22
IPv6:
2603:4:1000::/47
2603:4:1004::/47
2603:4:100a::-2603:4:1016:ffff:ffff:ffff:ffff:ffff
2603:4:1019::/48
2603:4:101c::/46
2603:4:1500::/48
2603:4:1504::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:a3:e6:05:79:64:be:a0:a6:54:9a:46:3b:5b:09:69:5e:eb:
03:ed:9e:16:df:ac:c0:36:43:05:39:ee:a2:d1:e4:7b:79:39:
95:2b:94:30:b4:34:c3:2d:fb:a2:6a:0e:54:9b:f4:a6:f9:5f:
17:09:fc:dc:4e:97:47:67:dd:19:8d:80:0a:93:5b:37:f8:aa:
f3:c7:65:c0:ea:26:0e:35:e7:47:e1:c5:75:ca:63:5a:22:74:
7c:01:50:d7:fd:99:48:0c:86:df:aa:15:e3:24:80:01:31:46:
5c:37:2c:8b:40:6b:45:3c:18:6f:6b:8a:8c:e0:83:0d:4d:8f:
1e:9d:08:af:ca:81:28:32:1e:c3:d3:b3:39:7a:db:c4:4d:08:
27:01:75:31:be:07:03:0c:61:14:63:ff:23:60:bb:1a:70:b7:
cf:a0:dd:11:12:46:c8:c6:91:f6:20:af:f3:30:c6:50:fb:19:
7f:79:d3:5f:90:5e:4a:91:32:37:e6:d1:fd:42:a9:a3:59:1d:
35:61:f6:6f:a3:0f:11:db:3b:b5:04:67:04:1b:be:01:6a:e4:
e7:03:76:ad:77:ec:63:b4:54:d6:53:39:01:49:5c:41:20:1c:
64:7d:f0:43:42:f1:11:58:2e:69:f7:47:60:a1:f4:8a:22:a6:
3c:e1:2c:db
-----BEGIN CERTIFICATE-----
MIIH4TCCBsmgAwIBAgIUAQ0Mn0MoWE5CjyhxsCGcFmRyhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk
MjU5NjY3NTktOTk0Ni00NzNiLThmNjctYjE2YjAyN2E0NDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu38GZ4cKQkFXiYmnGXONJV2iehxpZiaibRyr
fEhzKyarcai3013NmDYcraeuAcmKQO6XBXYn+VMRT6x/dHTeyT9ktiCKMSQrfFn0
2x0XP/CB0sViNQl0f3hNR/4eVfs5E/tIDi7S4feRj5kqUH1aEZ4dS3kiqUvJc0Ql
5Soso7YRoHRLsJvmzFa/rNTg2KH30LLLwdnk6WW2pHevIxIujrwU9dvS4qD/VNye
QsF/bFl80VcP7yAAnFxq1vRKKAHQpSgehaipJHK3PirGk5PezUPS9yxX34htuXhF
8r0Bitw9/d6shK6LqgH/D1i4Be8lDNru+Qm82b3sxXsbAocBrwIDAQABo4IE8zCC
BO8wHQYDVR0OBBYEFN3FcZuH9FTM1How2eCUu0Iqs9BwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvOGQ2YTc0MzYtOWY5MS0z
MWJlLWFiOWItZTNhOGE0ZTBkNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMIIBuwYIKwYBBQUHAQcBAf8EggGqMIIBpjCCAVAEAgABMIIB
SAMEAEDKqAMEAEDKrgMEA0DKuAMEAUinFAMEAEinGTAMAwQCSKfcAwQCSKfgAwQA
SKfmMAwDBABIp/EDBAJIp/AwDAMEA2FKSAMEAGFKTAMEAmjuRAMEBmu0ADAMAwQC
a7REAwQCa7RIMAwDBAJrtFQDBAVrtEAwDAMEAmu0ZAMEAmu0aAMEAISUXAMEAoSU
pAMEA4SUuAMEApRIBAMEApRIEAMEAZRIFgMEAZRIQAMEA5RIaAMEAKCZATAMAwQD
oJmIAwQAoJmKAwQAoJmoAwQCoJmsMAwDBAOmPmgDBAKmPnADBALAqdwDBAHGDJAD
BAPGDOADBAPGDPgDBALGR7wwDAMEBcZH4AMEAcZH6AMEAsZH+AMEAMZH/gMEAdBt
hAMEAdBtiDAMAwQA0G2LAwQA0G2UMAwDBADQbZcDBADQbZoDBALQbZwwUAQCAAIw
SgMHASYDAAQQAAMHASYDAAQQBDASAwcBJgMABBAKAwcAJgMABBAWAwcAJgMABBAZ
AwcCJgMABBAcAwcAJgMABBUAAwcAJgMABBUEMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAaj5gV5ZL6gplSa
RjtbCWle6wPtnhbfrMA2QwU57qLR5Ht5OZUrlDC0NMMt+6JqDlSb9Kb5XxcJ/NxO
l0dn3RmNgAqTWzf4qvPHZcDqJg4150fhxXXKY1oidHwBUNf9mUgMht+qFeMkgAEx
Rlw3LItAa0U8GG9riozggw1Njx6dCK/KgSgyHsPTszl628RNCCcBdTG+BwMMYRRj
/yNguxpwt8+g3RESRsjGkfYgr/MwxlD7GX9501+QXkqRMjfm0f1CqaNZHTVh9m+j
DxHbO7UEZwQbvgFq5OcDdq137GO0VNZTOQFJXEEgHGR98ENC8RFYLmn3R2Ch9Ioi
pjzhLNs=
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:13:52 2026 by rpki-client