Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/deac5ff1-a7ec-317b-9fed-849a5554b344.roa
File: deac5ff1-a7ec-317b-9fed-849a5554b344.roa (raw, json)
Hash identifier: ffnNqmkxzwB7OR2VpicPQcm+FX3BMBrc1HmCRM2oFhc=
Subject key identifier: A0:D7:F9:25:ED:DA:1C:DA:68:EB:C2:1B:22:7A:38:2D:06:D7:D0:D9
Certificate issuer: /CN=e6c8b293-20a5-43d7-a664-742958ffa853
Certificate serial: 010D0C9F4328584A8840AB9D0DB3A18A7C915000
Authority key identifier: 69:A3:B1:CF:9F:6C:CE:B3:D9:3F:7B:67:34:99:4C:4B:D1:3F:67:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/deac5ff1-a7ec-317b-9fed-849a5554b344.roa
Signing time: Wed 16 Jul 2025 01:00:49 +0000
ROA not before: Wed 16 Jul 2025 01:00:49 +0000
ROA not after: Tue 14 Oct 2025 01:00:49 +0000
asID: 0
IP address blocks: 207.180.14.0/24 maxlen: 24
207.180.18.0/24 maxlen: 24
207.180.19.0/24 maxlen: 24
207.180.21.0/24 maxlen: 24
207.180.22.0/24 maxlen: 24
207.180.23.0/24 maxlen: 24
207.180.26.0/24 maxlen: 24
207.180.27.0/24 maxlen: 24
207.180.28.0/24 maxlen: 24
207.180.29.0/24 maxlen: 24
207.180.38.0/24 maxlen: 24
207.180.41.0/24 maxlen: 24
207.180.43.0/24 maxlen: 24
207.180.44.0/24 maxlen: 24
207.180.45.0/24 maxlen: 24
207.180.46.0/24 maxlen: 24
207.180.47.0/24 maxlen: 24
207.180.48.0/24 maxlen: 24
207.180.49.0/24 maxlen: 24
207.180.52.0/24 maxlen: 24
207.180.53.0/24 maxlen: 24
207.180.54.0/24 maxlen: 24
216.75.129.0/24 maxlen: 24
216.75.133.0/24 maxlen: 24
216.75.134.0/24 maxlen: 24
216.75.147.0/24 maxlen: 24
216.75.154.0/24 maxlen: 24
216.75.156.0/24 maxlen: 24
216.75.157.0/24 maxlen: 24
216.75.158.0/24 maxlen: 24
216.75.159.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:88:40:ab:9d:0d:b3:a1:8a:7c:91:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c8b293-20a5-43d7-a664-742958ffa853
Validity
Not Before: Jul 16 01:00:49 2025 GMT
Not After : Oct 14 01:00:49 2025 GMT
Subject: CN=1bef71fa-a671-4b33-b05c-5ac4c0602cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:43:b1:95:b6:db:cf:c0:8e:b1:44:c3:8e:
ae:26:0c:36:aa:b9:ac:3d:76:fc:a4:c5:c4:06:da:
d6:13:b9:70:1f:df:b1:77:79:b0:d0:9f:9b:e3:c8:
87:81:b4:59:1b:10:90:3c:3a:66:61:94:da:5d:c0:
b7:21:4b:be:b1:7b:ad:ae:23:19:9f:9e:da:0d:b3:
11:ed:ee:f8:49:35:18:78:d5:4b:0b:41:72:4a:7d:
ce:70:e5:e4:60:e1:4b:ce:dd:08:c3:1f:e4:4c:39:
75:90:fc:7f:53:56:f6:50:55:0b:1f:be:3f:74:c6:
60:56:94:fb:31:81:04:d1:d1:0f:0c:f4:cd:16:38:
52:03:b8:42:81:a9:18:d1:06:66:ab:ec:3e:a7:2d:
d2:c0:c7:ac:14:ba:2d:e1:6e:e2:08:92:f7:44:5d:
68:77:53:47:21:ea:9b:0e:3c:23:ba:d9:0b:f9:47:
b8:f8:49:e5:12:60:11:3a:92:5c:95:8e:89:d9:ea:
88:14:69:17:b6:fe:8e:56:b5:a9:d0:65:fb:09:7f:
94:de:7c:8b:c8:8b:26:e8:9d:8b:7e:22:98:3c:af:
63:9f:72:b5:dc:c6:79:12:a7:5a:63:9d:56:ee:02:
e0:21:da:a8:38:a4:da:c6:6c:46:88:d2:93:31:e0:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D7:F9:25:ED:DA:1C:DA:68:EB:C2:1B:22:7A:38:2D:06:D7:D0:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/deac5ff1-a7ec-317b-9fed-849a5554b344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/e6c8b293-20a5-43d7-a664-742958ffa853.crl
X509v3 Authority Key Identifier:
keyid:69:A3:B1:CF:9F:6C:CE:B3:D9:3F:7B:67:34:99:4C:4B:D1:3F:67:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853.cer
sbgp-ipAddrBlock: critical
IPv4:
207.180.14.0/24
207.180.18.0/23
207.180.21.0-207.180.23.255
207.180.26.0-207.180.29.255
207.180.38.0/24
207.180.41.0/24
207.180.43.0-207.180.49.255
207.180.52.0-207.180.54.255
216.75.129.0/24
216.75.133.0-216.75.134.255
216.75.147.0/24
216.75.154.0/24
216.75.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:c9:e7:c2:96:17:9e:7a:87:ee:61:28:38:7b:db:04:68:76:
ee:25:d8:9c:07:10:68:5b:03:c5:1a:54:cb:a5:b8:d9:fd:d0:
f4:2a:86:c3:0e:5e:d8:f5:76:66:1a:4c:16:f0:c7:39:69:b9:
e0:67:35:e7:04:f6:3b:ec:05:37:ee:ef:af:62:af:9e:35:46:
d8:e1:86:30:1f:69:cc:14:3c:a2:f0:ef:3c:d6:4b:be:1f:97:
fc:20:8e:21:a0:c2:b5:c0:bf:db:c9:da:7a:da:b8:69:f5:75:
bd:ae:c8:bf:4e:f8:c0:1b:3b:57:37:1c:f1:1b:39:bd:67:ae:
79:28:39:9e:68:2d:b5:4b:c4:5f:0d:ce:3c:9c:be:63:b7:a9:
db:4b:b9:1f:3a:ee:59:e8:23:9f:39:25:d3:af:da:83:1c:7d:
54:82:f8:39:fe:d6:86:a1:ca:f4:39:a7:9f:36:e3:40:2a:32:
00:15:6d:26:40:90:b3:01:32:93:c0:f8:17:cc:85:fa:1c:61:
80:fe:b5:fe:bb:2a:1d:b5:4e:71:40:6e:97:45:14:8f:43:9e:
0e:16:39:2f:27:69:97:41:fb:47:ba:51:0c:4d:2d:75:81:b7:
ec:96:54:68:87:a9:23:31:aa:dc:26:03:53:e7:81:26:36:ab:
b5:7b:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 18:46:22 2025 by rpki-client