Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/82c375a1-9586-3208-b6d1-3fd283e4cc99.roa
File: 82c375a1-9586-3208-b6d1-3fd283e4cc99.roa (raw, json)
Hash identifier: f1m5YmHgaevZQ7Tuy5j3dq4JFeraKyR03FkV0sYFrDo=
Subject key identifier: 49:37:89:99:FB:04:B3:72:73:46:90:3C:E3:14:80:CF:2F:3B:D4:4B
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F4328584CC07C99AEA704AFBF7713C180
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/82c375a1-9586-3208-b6d1-3fd283e4cc99.roa
Signing time: Wed 04 Feb 2026 14:00:39 +0000
ROA not before: Wed 04 Feb 2026 14:00:39 +0000
ROA not after: Tue 05 May 2026 13:00:39 +0000
asID: 396998
IP address blocks: 136.175.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c0:7c:99:ae:a7:04:af:bf:77:13:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Feb 4 14:00:39 2026 GMT
Not After : May 5 13:00:39 2026 GMT
Subject: CN=7b1c11bb-9af8-4b81-9ae9-bb25a5404f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:75:bd:0e:e6:51:f7:84:eb:c1:04:3d:33:26:
b8:03:e9:73:d9:d4:eb:b1:81:c3:c0:01:bf:90:67:
a4:48:2a:17:69:13:0b:b5:62:2a:59:31:8e:aa:30:
05:c8:be:af:30:03:8b:70:7e:57:51:c7:75:47:a1:
b4:3c:4d:df:47:8e:01:9b:4c:79:3f:f3:31:aa:1e:
33:b3:24:58:52:4b:cd:f4:23:75:3b:25:b3:03:cc:
61:09:f8:98:5a:1b:89:7f:a0:aa:b2:05:41:13:50:
e8:51:70:49:7b:15:cb:22:0b:06:7e:37:a3:76:5e:
82:35:b3:83:ba:1a:66:61:34:da:80:e7:db:83:92:
d5:56:5c:c9:d6:6e:41:3d:8d:e0:a1:c3:69:d8:31:
7d:a8:f0:ba:a7:3c:ae:95:35:53:57:04:9a:98:9b:
c9:17:01:b3:1f:6b:c3:bf:62:ae:67:ab:86:48:58:
1e:9c:4d:4a:8c:74:33:4d:d8:79:da:54:32:a1:4d:
39:05:96:c8:04:5f:89:88:a4:95:72:d4:d2:8c:c9:
23:47:73:c2:fd:df:8b:d2:95:74:ab:d2:42:69:0b:
ca:78:00:aa:e7:ac:d7:0a:62:6f:65:d5:de:7c:4b:
79:8c:a2:2c:29:3a:cb:45:fb:73:85:9f:70:22:09:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:37:89:99:FB:04:B3:72:73:46:90:3C:E3:14:80:CF:2F:3B:D4:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/82c375a1-9586-3208-b6d1-3fd283e4cc99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:2c:04:c8:d2:e4:f6:7a:cb:b8:17:28:3b:79:06:c4:47:ca:
7e:6d:e8:74:a1:d5:0f:5d:39:5b:3e:14:e6:60:ed:5c:e6:ba:
dd:2c:7f:1a:b1:f8:e6:71:97:15:fc:a0:9a:e7:1e:77:06:ca:
c8:b5:91:de:12:50:37:f4:ce:f0:53:a4:4c:0c:70:d6:82:d4:
43:0f:23:b5:30:84:8b:97:a5:a2:53:dc:49:28:6b:8f:40:45:
54:c4:4b:de:97:e0:d1:6a:21:96:be:e5:7b:3d:75:09:a3:04:
c6:c6:85:5a:1b:0a:19:cc:b4:2d:32:54:5c:28:7e:7e:9d:b3:
4c:72:d0:67:e6:d1:5c:05:6f:2c:07:8a:07:e4:fd:e9:52:84:
27:46:06:7c:f8:1c:de:d8:51:ae:98:80:c5:1c:b0:0d:19:78:
46:0e:ff:2f:97:06:6c:72:96:17:28:33:4d:a0:6d:00:9e:be:
08:c0:84:8f:12:67:9b:4d:de:b0:62:48:ee:f1:3f:de:b8:8a:
5a:eb:66:bd:8e:c9:bb:5c:f0:5c:5e:dc:65:44:b3:12:e4:a4:
dc:8d:56:3b:35:c6:f0:29:db:15:c2:e5:26:31:69:7f:8d:ee:
32:ba:97:6d:5b:ea:73:de:35:5a:59:cd:5a:0b:82:a4:56:d3:
96:d1:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 17:34:42 2026 by rpki-client