Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b77f288-ec0b-35b0-824c-abf63efec212.roa
File: 6b77f288-ec0b-35b0-824c-abf63efec212.roa (raw, json)
Hash identifier: CBWYFQPr7OEkQmz7nFIgovGl9Yd5mYYKCR3RDRlreCw=
Subject key identifier: A9:3E:A4:D1:2F:DB:4F:92:F4:CB:BC:1C:49:77:F6:1C:FD:FE:F5:64
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584F6CD779759F8F7EC0740489C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b77f288-ec0b-35b0-824c-abf63efec212.roa
Signing time: Wed 07 Oct 2026 17:16:54 +0000
ROA not before: Wed 07 Oct 2026 17:16:54 +0000
ROA not after: Tue 05 Jan 2027 18:00:15 +0000
asID: 3949
IP address blocks: 128.121.23.0/24 maxlen: 24
128.121.26.0/24 maxlen: 24
128.121.39.0/24 maxlen: 24
130.94.194.0/24 maxlen: 24
130.94.200.0/24 maxlen: 24
140.174.14.0/24 maxlen: 24
157.238.178.0/24 maxlen: 24
157.238.210.0/24 maxlen: 24
165.254.7.0/24 maxlen: 24
165.254.9.0/24 maxlen: 24
165.254.22.0/24 maxlen: 24
165.254.25.0/24 maxlen: 24
165.254.29.0/24 maxlen: 24
165.254.31.0/24 maxlen: 24
165.254.54.0/24 maxlen: 24
165.254.56.0/24 maxlen: 24
165.254.59.0/24 maxlen: 24
165.254.88.0/24 maxlen: 24
165.254.90.0/24 maxlen: 24
165.254.91.0/24 maxlen: 24
165.254.97.0/24 maxlen: 24
198.63.240.0/24 maxlen: 24
198.87.183.0/24 maxlen: 24
198.88.217.0/24 maxlen: 24
198.107.140.0/24 maxlen: 24
198.107.194.0/24 maxlen: 24
198.138.207.0/24 maxlen: 24
198.138.210.0/24 maxlen: 24
198.170.188.0/24 maxlen: 24
198.170.193.0/24 maxlen: 24
198.170.198.0/24 maxlen: 24
198.172.91.0/24 maxlen: 24
198.173.10.0/24 maxlen: 24
198.173.173.0/24 maxlen: 24
198.173.200.0/24 maxlen: 24
198.173.212.0/24 maxlen: 24
199.4.105.0/24 maxlen: 24
199.4.111.0/24 maxlen: 24
199.224.11.0/24 maxlen: 24
199.234.91.0/24 maxlen: 24
204.0.61.0/24 maxlen: 24
204.2.38.0/24 maxlen: 24
204.2.41.0/24 maxlen: 24
204.2.48.0/24 maxlen: 24
204.2.55.0/24 maxlen: 24
204.2.58.0/24 maxlen: 24
204.2.133.0/24 maxlen: 24
204.2.137.0/24 maxlen: 24
204.2.179.0/24 maxlen: 24
204.2.184.0/24 maxlen: 24
204.2.186.0/24 maxlen: 24
204.2.189.0/24 maxlen: 24
204.2.198.0/24 maxlen: 24
204.2.205.0/24 maxlen: 24
204.2.208.0/24 maxlen: 24
204.2.210.0/24 maxlen: 24
204.2.214.0/24 maxlen: 24
204.2.216.0/24 maxlen: 24
204.2.218.0/24 maxlen: 24
204.2.222.0/24 maxlen: 24
204.2.225.0/24 maxlen: 24
204.2.227.0/24 maxlen: 24
204.141.89.0/24 maxlen: 24
204.141.235.0/24 maxlen: 24
204.141.237.0/24 maxlen: 24
204.143.60.0/24 maxlen: 24
204.143.68.0/24 maxlen: 24
204.143.89.0/24 maxlen: 24
204.170.34.0/24 maxlen: 24
204.170.209.0/24 maxlen: 24
204.171.60.0/24 maxlen: 24
204.201.161.0/24 maxlen: 24
204.203.93.0/24 maxlen: 24
204.233.234.0/24 maxlen: 24
204.233.243.0/24 maxlen: 24
204.245.131.0/24 maxlen: 24
204.245.206.0/24 maxlen: 24
204.247.58.0/24 maxlen: 24
205.157.137.0/24 maxlen: 24
205.238.24.0/24 maxlen: 24
206.14.124.0/24 maxlen: 24
206.184.16.0/24 maxlen: 24
206.239.6.0/24 maxlen: 24
207.21.120.0/24 maxlen: 24
207.55.139.0/24 maxlen: 24
207.67.131.0/24 maxlen: 24
207.67.136.0/24 maxlen: 24
207.91.96.0/24 maxlen: 24
207.198.131.0/24 maxlen: 24
207.241.30.0/24 maxlen: 24
207.241.83.0/24 maxlen: 24
207.241.92.0/24 maxlen: 24
209.57.33.0/24 maxlen: 24
209.70.241.0/24 maxlen: 24
209.168.125.0/24 maxlen: 24
209.189.34.0/24 maxlen: 24
209.212.237.0/24 maxlen: 24
216.42.130.0/24 maxlen: 24
216.42.133.0/24 maxlen: 24
216.44.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:d7:79:75:9f:8f:7e:c0:74:04:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Oct 7 17:16:54 2026 GMT
Not After : Jan 5 18:00:15 2027 GMT
Subject: CN=2c84de5c-99b6-40a7-a4e1-2d222e3c783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:91:1f:a9:85:70:d9:f2:4d:4d:bc:3a:46:
82:1e:4e:4c:ce:92:c0:47:53:4a:6d:51:e3:9c:7f:
2f:09:c1:9d:00:59:91:9b:bc:62:6d:2e:b7:cf:82:
1f:17:f2:30:bc:6a:a8:ab:f7:df:3a:d9:2b:8f:da:
9d:91:fa:6c:5b:6d:3b:d0:42:9b:0e:9f:b6:21:6f:
22:ae:3e:25:25:42:0a:90:4d:72:e4:0e:ad:a2:92:
44:e8:a7:0d:29:29:86:7a:ab:53:c6:20:c6:bc:1e:
90:64:31:ef:d3:6b:52:cf:50:10:ce:6e:54:55:05:
04:59:49:f1:fc:c1:01:18:fe:59:f7:98:ac:87:0a:
18:61:a4:fa:79:2a:5d:4d:30:a9:cb:54:91:6a:cc:
b3:b7:da:9a:b7:dc:80:bc:d0:fe:c4:4a:79:5b:9e:
43:ae:cc:e9:53:dc:08:25:51:ad:9f:d6:92:71:2c:
b9:20:97:0e:82:9f:b6:b3:f2:35:63:31:03:a9:06:
48:31:a8:bd:90:13:32:86:5d:18:7e:d7:b6:36:81:
2c:15:20:ba:97:a9:ca:42:17:3f:d1:4f:ee:56:97:
6a:4f:30:a1:64:a5:97:37:b1:b6:18:f5:5e:9c:9e:
0b:89:8f:84:df:bf:a5:dc:ac:2d:85:47:66:b7:3f:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:A4:D1:2F:DB:4F:92:F4:CB:BC:1C:49:77:F6:1C:FD:FE:F5:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b77f288-ec0b-35b0-824c-abf63efec212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.23.0/24
128.121.26.0/24
128.121.39.0/24
130.94.194.0/24
130.94.200.0/24
140.174.14.0/24
157.238.178.0/24
157.238.210.0/24
165.254.7.0/24
165.254.9.0/24
165.254.22.0/24
165.254.25.0/24
165.254.29.0/24
165.254.31.0/24
165.254.54.0/24
165.254.56.0/24
165.254.59.0/24
165.254.88.0/24
165.254.90.0/23
165.254.97.0/24
198.63.240.0/24
198.87.183.0/24
198.88.217.0/24
198.107.140.0/24
198.107.194.0/24
198.138.207.0/24
198.138.210.0/24
198.170.188.0/24
198.170.193.0/24
198.170.198.0/24
198.172.91.0/24
198.173.10.0/24
198.173.173.0/24
198.173.200.0/24
198.173.212.0/24
199.4.105.0/24
199.4.111.0/24
199.224.11.0/24
199.234.91.0/24
204.0.61.0/24
204.2.38.0/24
204.2.41.0/24
204.2.48.0/24
204.2.55.0/24
204.2.58.0/24
204.2.133.0/24
204.2.137.0/24
204.2.179.0/24
204.2.184.0/24
204.2.186.0/24
204.2.189.0/24
204.2.198.0/24
204.2.205.0/24
204.2.208.0/24
204.2.210.0/24
204.2.214.0/24
204.2.216.0/24
204.2.218.0/24
204.2.222.0/24
204.2.225.0/24
204.2.227.0/24
204.141.89.0/24
204.141.235.0/24
204.141.237.0/24
204.143.60.0/24
204.143.68.0/24
204.143.89.0/24
204.170.34.0/24
204.170.209.0/24
204.171.60.0/24
204.201.161.0/24
204.203.93.0/24
204.233.234.0/24
204.233.243.0/24
204.245.131.0/24
204.245.206.0/24
204.247.58.0/24
205.157.137.0/24
205.238.24.0/24
206.14.124.0/24
206.184.16.0/24
206.239.6.0/24
207.21.120.0/24
207.55.139.0/24
207.67.131.0/24
207.67.136.0/24
207.91.96.0/24
207.198.131.0/24
207.241.30.0/24
207.241.83.0/24
207.241.92.0/24
209.57.33.0/24
209.70.241.0/24
209.168.125.0/24
209.189.34.0/24
209.212.237.0/24
216.42.130.0/24
216.42.133.0/24
216.44.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:72:a7:f3:15:0a:66:e5:17:bc:f7:58:03:b7:42:fa:10:5e:
a9:58:75:da:a2:7a:40:d6:3d:d2:67:58:eb:7e:d8:34:87:59:
32:61:cc:3d:49:4b:9e:8f:23:e0:8b:8f:11:3e:59:79:f7:6a:
82:be:6f:2e:e4:43:3a:92:3b:63:81:07:70:f8:af:b6:ca:87:
c9:23:06:b6:a3:bb:f5:75:e0:dd:de:a7:4a:2b:12:08:ab:db:
cb:6e:7a:2d:b9:70:34:54:69:26:52:b7:53:9e:f9:ce:62:dc:
8b:74:7c:b5:1f:6c:ea:07:af:3e:6c:94:de:0a:70:8b:ed:bd:
f6:c7:8e:e2:14:3f:06:3b:99:86:11:94:87:23:36:11:9f:a2:
34:9c:23:6e:ad:b0:1e:a1:1c:d1:35:18:4c:ea:5c:67:bb:46:
97:fa:e8:1d:fa:98:2c:e2:ec:61:d0:3a:13:a2:c2:18:77:ca:
78:74:f5:63:7a:ec:27:36:c8:7d:5e:33:8f:e7:1e:04:44:76:
d8:16:20:a4:f2:66:cb:e0:7b:e8:0d:95:8d:5b:25:4c:88:d6:
8d:5a:61:69:81:30:f2:ff:e7:82:6e:18:40:17:89:a1:9a:e2:
6e:09:07:2a:54:7d:4e:7e:1a:05:a6:7a:a6:14:77:a3:fc:cf:
dd:e7:fb:59
-----BEGIN CERTIFICATE-----
MIIImTCCB4GgAwIBAgIUAQ0Mn0MoWE9s13l1n49+wHQEicAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MTAwNzE3MTY1NFoXDTI3MDEwNTE4MDAxNVowLzEtMCsGA1UEAxMk
MmM4NGRlNWMtOTliNi00MGE3LWE0ZTEtMmQyMjJlM2M3ODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigORH6mFcNnyTU28OkaCHk5MzpLAR1NKbVHj
nH8vCcGdAFmRm7xibS63z4IfF/IwvGqoq/ffOtkrj9qdkfpsW2070EKbDp+2IW8i
rj4lJUIKkE1y5A6topJE6KcNKSmGeqtTxiDGvB6QZDHv02tSz1AQzm5UVQUEWUnx
/MEBGP5Z95ishwoYYaT6eSpdTTCpy1SRasyzt9qat9yAvND+xEp5W55DrszpU9wI
JVGtn9aScSy5IJcOgp+2s/I1YzEDqQZIMai9kBMyhl0Yfte2NoEsFSC6l6nKQhc/
0U/uVpdqTzChZKWXN7G2GPVenJ4LiY+E37+l3KwthUdmtz/T6wIDAQABo4IFqzCC
BacwHQYDVR0OBBYEFKk+pNEv20+S9Mu8HEl39hz9/vVkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmI3N2YyODgtZWMwYi0z
NWIwLTgyNGMtYWJmNjNlZmVjMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMIICcwYIKwYBBQUHAQcBAf8EggJiMIICXjCCAloEAgABMIIC
UgMEAIB5FwMEAIB5GgMEAIB5JwMEAIJewgMEAIJeyAMEAIyuDgMEAJ3usgMEAJ3u
0gMEAKX+BwMEAKX+CQMEAKX+FgMEAKX+GQMEAKX+HQMEAKX+HwMEAKX+NgMEAKX+
OAMEAKX+OwMEAKX+WAMEAaX+WgMEAKX+YQMEAMY/8AMEAMZXtwMEAMZY2QMEAMZr
jAMEAMZrwgMEAMaKzwMEAMaK0gMEAMaqvAMEAMaqwQMEAMaqxgMEAMasWwMEAMat
CgMEAMatrQMEAMatyAMEAMat1AMEAMcEaQMEAMcEbwMEAMfgCwMEAMfqWwMEAMwA
PQMEAMwCJgMEAMwCKQMEAMwCMAMEAMwCNwMEAMwCOgMEAMwChQMEAMwCiQMEAMwC
swMEAMwCuAMEAMwCugMEAMwCvQMEAMwCxgMEAMwCzQMEAMwC0AMEAMwC0gMEAMwC
1gMEAMwC2AMEAMwC2gMEAMwC3gMEAMwC4QMEAMwC4wMEAMyNWQMEAMyN6wMEAMyN
7QMEAMyPPAMEAMyPRAMEAMyPWQMEAMyqIgMEAMyq0QMEAMyrPAMEAMzJoQMEAMzL
XQMEAMzp6gMEAMzp8wMEAMz1gwMEAMz1zgMEAMz3OgMEAM2diQMEAM3uGAMEAM4O
fAMEAM64EAMEAM7vBgMEAM8VeAMEAM83iwMEAM9DgwMEAM9DiAMEAM9bYAMEAM/G
gwMEAM/xHgMEAM/xUwMEAM/xXAMEANE5IQMEANFG8QMEANGofQMEANG9IgMEANHU
7QMEANgqggMEANgqhQMEANgsNzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAncqfzFQpm5Re891gDt0L6EF6p
WHXaonpA1j3SZ1jrftg0h1kyYcw9SUuejyPgi48RPll592qCvm8u5EM6kjtjgQdw
+K+2yofJIwa2o7v1deDd3qdKKxIIq9vLbnotuXA0VGkmUrdTnvnOYtyLdHy1H2zq
B68+bJTeCnCL7b32x47iFD8GO5mGEZSHIzYRn6I0nCNurbAeoRzRNRhM6lxnu0aX
+ugd+pgs4uxh0DoTosIYd8p4dPVjeuwnNsh9XjOP5x4ERHbYFiCk8mbL4HvoDZWN
WyVMiNaNWmFpgTDy/+eCbhhAF4mhmuJuCQcqVH1OfhoFpnqmFHej/M/d5/tZ
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:03:23 2026 by rpki-client