Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
File: 8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa (raw, json)
Hash identifier: wKnCyTnClF9AAp2JnoAIYKlWep14ZoXMb493e3gvJJE=
Subject key identifier: 2D:A4:51:3C:BC:E7:59:E2:69:50:0A:0C:30:BA:18:F6:16:22:C6:50
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584EE4F1FA2AC7F2267FE371E200
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
Signing time: Thu 20 Aug 2026 01:00:12 +0000
ROA not before: Thu 20 Aug 2026 01:00:12 +0000
ROA not after: Wed 18 Nov 2026 02:00:12 +0000
asID: 26496
IP address blocks: 64.202.168.0/24 maxlen: 24
64.202.174.0/24 maxlen: 24
64.202.184.0/21 maxlen: 24
68.178.184.0/22 maxlen: 24
68.178.220.0/22 maxlen: 24
68.178.244.0/22 maxlen: 24
72.167.20.0/23 maxlen: 24
72.167.25.0/24 maxlen: 24
72.167.220.0/22 maxlen: 24
72.167.224.0/22 maxlen: 24
72.167.230.0/24 maxlen: 24
72.167.241.0/24 maxlen: 24
72.167.242.0/23 maxlen: 24
97.74.72.0/22 maxlen: 24
97.74.76.0/24 maxlen: 24
104.238.68.0/22 maxlen: 24
107.180.0.0/18 maxlen: 24
107.180.68.0/22 maxlen: 24
107.180.72.0/22 maxlen: 24
107.180.84.0/22 maxlen: 24
107.180.88.0/21 maxlen: 24
107.180.100.0/22 maxlen: 24
107.180.104.0/22 maxlen: 24
132.148.92.0/24 maxlen: 24
132.148.164.0/22 maxlen: 24
132.148.184.0/21 maxlen: 24
148.72.4.0/22 maxlen: 24
148.72.16.0/22 maxlen: 24
148.72.22.0/23 maxlen: 24
148.72.64.0/23 maxlen: 24
148.72.104.0/21 maxlen: 24
160.153.1.0/24 maxlen: 24
160.153.136.0/23 maxlen: 24
160.153.138.0/24 maxlen: 24
160.153.168.0/24 maxlen: 24
160.153.172.0/22 maxlen: 24
166.62.104.0/21 maxlen: 24
166.62.112.0/22 maxlen: 24
192.169.220.0/22 maxlen: 24
198.12.144.0/23 maxlen: 24
198.12.224.0/21 maxlen: 24
198.12.248.0/21 maxlen: 24
198.71.188.0/22 maxlen: 24
198.71.224.0/21 maxlen: 24
198.71.232.0/23 maxlen: 24
198.71.248.0/22 maxlen: 24
198.71.254.0/24 maxlen: 24
208.109.132.0/23 maxlen: 24
208.109.136.0/23 maxlen: 24
208.109.139.0/24 maxlen: 24
208.109.140.0/22 maxlen: 24
208.109.144.0/22 maxlen: 24
208.109.148.0/24 maxlen: 24
208.109.151.0/24 maxlen: 24
208.109.152.0/23 maxlen: 24
208.109.154.0/24 maxlen: 24
208.109.156.0/22 maxlen: 24
2603:4:1000::/47 maxlen: 48
2603:4:1004::/47 maxlen: 48
2603:4:100a::/47 maxlen: 48
2603:4:100c::/46 maxlen: 48
2603:4:1010::/46 maxlen: 48
2603:4:1014::/47 maxlen: 48
2603:4:1016::/48 maxlen: 48
2603:4:1019::/48 maxlen: 48
2603:4:101c::/46 maxlen: 48
2603:4:1500::/48 maxlen: 48
2603:4:1504::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:f1:fa:2a:c7:f2:26:7f:e3:71:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Aug 20 01:00:12 2026 GMT
Not After : Nov 18 02:00:12 2026 GMT
Subject: CN=2aa241b1-77e8-4237-a95c-d3fdd6c98cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:8f:5c:30:90:6b:50:03:ea:2e:fa:78:f4:
3f:4c:c0:19:2f:ba:87:c3:46:67:32:3e:12:15:8f:
39:07:6f:d7:c6:90:6a:a5:3f:99:f1:f1:4a:8a:5e:
d9:22:0c:f8:68:61:53:26:7f:6e:3c:ae:c4:76:c9:
b0:62:c8:2d:11:7f:d7:a3:72:e7:ec:34:bf:54:3b:
09:eb:ea:e6:86:4d:3d:ff:1f:98:3f:07:9d:71:c8:
a8:22:62:9b:98:a6:2e:c3:f6:dd:87:ba:b6:6c:ce:
d4:1f:ef:ab:67:8e:38:07:60:a7:8c:3a:e3:74:a6:
1d:90:a0:6f:fa:b4:bc:33:dd:9f:b0:64:30:2a:eb:
16:80:d9:cc:64:60:1e:5a:b8:af:16:f6:89:fe:b9:
10:a0:c4:7e:dc:02:ce:8f:0b:93:9c:e4:9e:2e:83:
18:72:0d:73:88:58:55:c8:f1:27:94:47:08:90:46:
76:52:09:b4:12:24:63:c8:0c:ba:87:08:50:58:77:
3f:f2:f5:d6:e7:82:61:bf:ec:61:86:f4:d2:c0:39:
1d:c7:54:8f:2c:ba:e6:f4:88:c9:27:8c:1f:08:c5:
95:f3:e6:b6:af:e4:4e:34:34:ab:d2:ba:fb:6a:6e:
21:74:b2:02:0e:ee:28:4a:58:52:6e:86:0a:42:36:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:51:3C:BC:E7:59:E2:69:50:0A:0C:30:BA:18:F6:16:22:C6:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.202.168.0/24
64.202.174.0/24
64.202.184.0/21
68.178.184.0/22
68.178.220.0/22
68.178.244.0/22
72.167.20.0/23
72.167.25.0/24
72.167.220.0-72.167.227.255
72.167.230.0/24
72.167.241.0-72.167.243.255
97.74.72.0-97.74.76.255
104.238.68.0/22
107.180.0.0/18
107.180.68.0-107.180.75.255
107.180.84.0-107.180.95.255
107.180.100.0-107.180.107.255
132.148.92.0/24
132.148.164.0/22
132.148.184.0/21
148.72.4.0/22
148.72.16.0/22
148.72.22.0/23
148.72.64.0/23
148.72.104.0/21
160.153.1.0/24
160.153.136.0-160.153.138.255
160.153.168.0/24
160.153.172.0/22
166.62.104.0-166.62.115.255
192.169.220.0/22
198.12.144.0/23
198.12.224.0/21
198.12.248.0/21
198.71.188.0/22
198.71.224.0-198.71.233.255
198.71.248.0/22
198.71.254.0/24
208.109.132.0/23
208.109.136.0/23
208.109.139.0-208.109.148.255
208.109.151.0-208.109.154.255
208.109.156.0/22
IPv6:
2603:4:1000::/47
2603:4:1004::/47
2603:4:100a::-2603:4:1016:ffff:ffff:ffff:ffff:ffff
2603:4:1019::/48
2603:4:101c::/46
2603:4:1500::/48
2603:4:1504::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:35:57:dc:b7:43:8d:ab:43:7c:12:c4:12:51:fc:80:79:1a:
e7:23:e6:c9:04:c9:9b:03:1c:70:f2:5f:bd:5f:02:c3:61:0e:
ea:e7:93:0b:10:a3:7f:1c:81:6e:58:70:c4:af:cc:32:f3:81:
75:ef:9e:47:93:93:71:26:74:a5:3c:42:3e:46:c1:68:2d:1b:
21:be:fe:fa:92:6b:93:b3:86:7c:4a:20:68:78:e1:e6:ba:2d:
fa:c1:51:05:ed:c4:bf:89:4f:91:ac:9f:af:bc:da:9d:90:08:
d6:d6:f4:5b:da:bd:28:20:f9:1d:17:37:90:85:84:ac:96:ee:
75:6e:23:b8:0c:a0:21:1b:65:88:86:13:79:d1:2a:02:d8:fb:
4d:6d:4c:d7:f5:7a:e4:0e:41:73:49:68:f1:25:9b:7a:e9:b8:
e5:55:9f:eb:d5:df:4c:c4:7f:4f:ec:70:6d:7e:79:64:fa:a1:
c6:a6:4e:c2:e6:88:9a:ef:61:03:1a:54:ec:42:ff:3a:8a:b8:
7d:e7:f4:b7:a1:71:48:e9:23:13:7f:ea:65:bb:42:cc:e6:2d:
d9:09:30:36:31:76:c1:c2:ab:82:c0:14:69:88:68:89:b5:10:
77:4c:9a:2c:0a:a5:35:97:81:0d:cd:6e:d2:76:2d:95:64:1e:
a1:38:25:68
-----BEGIN CERTIFICATE-----
MIIH8zCCBtugAwIBAgIUAQ0Mn0MoWE7k8foqx/Imf+Nx4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
MmFhMjQxYjEtNzdlOC00MjM3LWE5NWMtZDNmZGQ2Yzk4Y2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWuPXDCQa1AD6i76ePQ/TMAZL7qHw0ZnMj4S
FY85B2/XxpBqpT+Z8fFKil7ZIgz4aGFTJn9uPK7EdsmwYsgtEX/Xo3Ln7DS/VDsJ
6+rmhk09/x+YPwedccioImKbmKYuw/bdh7q2bM7UH++rZ444B2CnjDrjdKYdkKBv
+rS8M92fsGQwKusWgNnMZGAeWrivFvaJ/rkQoMR+3ALOjwuTnOSeLoMYcg1ziFhV
yPEnlEcIkEZ2Ugm0EiRjyAy6hwhQWHc/8vXW54Jhv+xhhvTSwDkdx1SPLLrm9IjJ
J4wfCMWV8+a2r+RONDSr0rr7am4hdLICDu4oSlhSboYKQjblgwIDAQABo4IFBTCC
BQEwHQYDVR0OBBYEFC2kUTy851niaVAKDDC6GPYWIsZQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvOGQ2YTc0MzYtOWY5MS0z
MWJlLWFiOWItZTNhOGE0ZTBkNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMIIBzQYIKwYBBQUHAQcBAf8EggG8MIIBuDCCAWIEAgABMIIB
WgMEAEDKqAMEAEDKrgMEA0DKuAMEAkSyuAMEAkSy3AMEAkSy9AMEAUinFAMEAEin
GTAMAwQCSKfcAwQCSKfgAwQASKfmMAwDBABIp/EDBAJIp/AwDAMEA2FKSAMEAGFK
TAMEAmjuRAMEBmu0ADAMAwQCa7REAwQCa7RIMAwDBAJrtFQDBAVrtEAwDAMEAmu0
ZAMEAmu0aAMEAISUXAMEAoSUpAMEA4SUuAMEApRIBAMEApRIEAMEAZRIFgMEAZRI
QAMEA5RIaAMEAKCZATAMAwQDoJmIAwQAoJmKAwQAoJmoAwQCoJmsMAwDBAOmPmgD
BAKmPnADBALAqdwDBAHGDJADBAPGDOADBAPGDPgDBALGR7wwDAMEBcZH4AMEAcZH
6AMEAsZH+AMEAMZH/gMEAdBthAMEAdBtiDAMAwQA0G2LAwQA0G2UMAwDBADQbZcD
BADQbZoDBALQbZwwUAQCAAIwSgMHASYDAAQQAAMHASYDAAQQBDASAwcBJgMABBAK
AwcAJgMABBAWAwcAJgMABBAZAwcCJgMABBAcAwcAJgMABBUAAwcAJgMABBUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC41V9y3Q42rQ3wSxBJR/IB5Gucj5skEyZsDHHDyX71fAsNhDurnkwsQ
o38cgW5YcMSvzDLzgXXvnkeTk3EmdKU8Qj5GwWgtGyG+/vqSa5OzhnxKIGh44ea6
LfrBUQXtxL+JT5Gsn6+82p2QCNbW9FvavSgg+R0XN5CFhKyW7nVuI7gMoCEbZYiG
E3nRKgLY+01tTNf1euQOQXNJaPElm3rpuOVVn+vV30zEf0/scG1+eWT6ocamTsLm
iJrvYQMaVOxC/zqKuH3n9LehcUjpIxN/6mW7QszmLdkJMDYxdsHCq4LAFGmIaIm1
EHdMmiwKpTWXgQ3NbtJ2LZVkHqE4JWg=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:02:06 2026 by rpki-client