Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa
File: 75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa (raw, json)
Hash identifier: /O1OlDaaSaYgHpvMGKzEG7BOvT3GYcKY/dyCRrDOSYw=
Subject key identifier: 6D:92:F0:D2:26:3E:7C:00:64:36:32:9D:BE:22:D7:55:17:1B:A1:42
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F4328584CC7773189930AED16E7E25100
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa
Signing time: Sat 07 Feb 2026 02:00:31 +0000
ROA not before: Sat 07 Feb 2026 02:00:31 +0000
ROA not after: Fri 08 May 2026 01:00:31 +0000
asID: 30644
IP address blocks: 205.178.176.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:77:31:89:93:0a:ed:16:e7:e2:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Feb 7 02:00:31 2026 GMT
Not After : May 8 01:00:31 2026 GMT
Subject: CN=f1c29f07-5aa8-4e03-93c4-fe5c9249620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:22:9f:8e:69:5d:31:3f:8c:66:76:66:c0:
60:2c:26:a2:61:f6:77:40:f0:e3:08:eb:3a:f1:4e:
5c:2b:bb:84:f1:4c:fe:b9:d4:2b:22:33:fb:1a:be:
32:32:00:a4:8a:ec:fd:bd:cf:4a:68:15:49:a6:0b:
59:07:83:3a:77:c4:7b:8f:50:0a:9c:ed:ef:46:09:
ed:6a:cd:7e:46:c8:fc:b2:60:29:9c:ca:21:bf:70:
a9:9f:64:fd:62:b2:30:56:4e:18:d0:a7:2c:d2:c0:
38:a8:5f:cf:1b:85:fc:48:eb:52:95:f8:4c:87:5a:
c5:a3:c2:28:aa:27:ca:47:8f:5b:51:1c:52:2f:82:
09:52:1a:88:3e:50:5e:1e:51:38:0f:7a:38:9c:7a:
23:37:64:ec:05:03:fe:b0:d6:da:f2:d7:e9:3c:0f:
05:17:7c:6f:10:90:9c:38:48:ef:9e:a1:9f:d6:a1:
c9:11:de:d8:4c:d4:93:31:63:f5:47:0a:d5:15:0b:
91:b6:d0:20:8a:db:27:90:f3:90:33:3e:f3:f7:93:
de:91:a8:ca:1e:54:27:c7:63:6b:f2:96:7e:1a:9c:
c6:9f:73:55:cc:9a:9c:06:5e:c1:6a:f0:0c:b5:12:
06:d1:ce:67:91:8b:13:c2:dc:06:98:90:64:ec:56:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:92:F0:D2:26:3E:7C:00:64:36:32:9D:BE:22:D7:55:17:1B:A1:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
205.178.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:fe:37:5f:c3:da:d4:ef:1b:be:91:d0:e3:48:d2:84:37:87:
c5:88:78:21:13:98:15:1e:e7:6a:69:54:94:90:95:4d:5d:47:
e2:12:f5:cf:20:d2:2d:35:bc:79:ce:8b:f7:05:9d:cb:bb:36:
6d:a9:cd:ac:77:f7:78:aa:2d:9d:68:95:c4:bd:25:f5:52:35:
8d:a8:c0:7c:61:61:f0:1a:ed:3f:bb:f2:23:e6:ae:3f:34:8b:
86:1a:25:69:2b:7f:c1:42:7f:c4:1a:82:aa:a6:b2:36:06:a5:
29:b7:0a:18:ea:c4:72:1f:3d:df:55:ef:0c:7e:a2:02:0b:18:
5d:cc:3f:d4:ec:3a:55:b7:c3:99:7c:b0:7e:8b:80:4e:1b:a0:
64:4b:13:ba:7f:2a:09:c6:55:54:85:9b:49:0d:b7:03:e6:39:
0f:3b:94:28:61:e7:d4:5a:50:f9:2d:15:e7:83:66:43:8f:4c:
24:6a:40:e3:0e:df:58:a5:7c:70:08:b0:40:46:0c:9e:5d:33:
11:7e:1f:37:f3:b1:a7:f6:76:78:f5:21:fa:09:99:9f:75:df:
c3:1f:85:19:1f:43:84:e8:5c:f0:49:a7:d9:6e:a1:f4:31:fe:
4c:ea:a3:6f:47:ff:99:f8:4a:11:e2:61:dc:fe:51:d1:67:18:
46:8f:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:10:27 2026 by rpki-client