Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/266f126f-3a96-37da-9fa8-3d748c6fb706.roa
File: 266f126f-3a96-37da-9fa8-3d748c6fb706.roa (raw, json)
Hash identifier: Rep59RtMoh321PNJHT3LN1x5AC8gbv+KvTH1IyoxKnA=
Subject key identifier: F9:E5:90:EE:9B:8F:D2:DC:54:4E:52:7D:16:1A:84:9D:15:B5:2C:3B
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584D6C0FD8360E304DD83873A360
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/266f126f-3a96-37da-9fa8-3d748c6fb706.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 20326
IP address blocks: 45.39.250.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:d8:36:0e:30:4d:d8:38:73:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=9b25c9ce-c121-492a-97c6-6ff47dee39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:74:ec:9a:44:a2:2c:0f:5d:be:65:65:b1:
52:0e:1d:f4:d7:5e:e1:af:7c:d0:5f:f7:0e:bf:40:
b3:e6:f7:79:ce:47:2d:a8:80:da:53:94:ad:da:fa:
51:db:f6:b6:5f:2c:a2:57:3c:62:37:00:01:b6:fc:
d6:47:71:17:58:28:3d:11:09:61:a4:89:07:fd:66:
27:e7:4e:47:f4:6c:47:b8:ea:07:ce:39:64:33:05:
18:c4:08:8f:13:47:e8:7e:90:a9:49:9b:78:98:be:
5d:77:92:f6:15:94:1a:6c:47:07:97:ae:72:28:a3:
8f:23:8b:36:b6:51:ac:92:c6:1e:b6:3a:da:01:ca:
74:bc:9c:eb:4c:a9:0d:a3:f0:70:b5:43:1f:dc:fd:
39:b6:a1:8f:61:9c:a1:9a:68:fc:f7:2c:e5:b8:9b:
28:e3:7d:ae:61:ac:7a:12:d3:fe:ed:59:55:d3:56:
8b:b7:f7:c9:88:0e:37:65:5f:eb:36:f3:9e:47:65:
fc:f5:f2:10:99:90:51:bc:f8:1c:fa:03:fe:94:fa:
75:8a:d9:b2:a1:1a:bd:02:04:f7:9c:ac:21:95:2b:
d1:9a:e8:4c:87:c4:cc:ce:43:5e:bf:39:bd:eb:52:
47:ba:76:9a:04:c5:78:ab:67:b1:0b:d1:f9:7b:93:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E5:90:EE:9B:8F:D2:DC:54:4E:52:7D:16:1A:84:9D:15:B5:2C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/266f126f-3a96-37da-9fa8-3d748c6fb706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.39.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c7:da:a7:1b:68:80:ce:f8:05:56:99:a6:8a:d4:76:47:6b:
98:f3:66:15:ae:08:94:d8:02:63:5b:18:70:1f:ea:a9:c8:43:
c7:78:fc:a4:38:b1:cc:34:78:a0:e7:e7:c4:12:e3:a1:0a:1c:
f4:21:7b:67:65:ba:ac:34:a9:ab:12:02:c7:37:16:e7:a2:d3:
ef:6b:08:13:95:8c:92:cb:19:8f:0e:92:c8:ea:34:78:7c:c3:
fc:a6:93:0f:29:73:16:f6:25:c3:ca:dd:e7:11:43:a5:22:b0:
44:21:21:37:bc:3b:f6:b8:d3:4a:70:8a:a1:02:c5:b5:d7:48:
36:0c:01:a5:b1:db:50:27:90:4d:4f:22:db:78:f1:f0:66:f7:
f1:16:2d:a0:f9:71:90:cd:1e:e1:33:74:48:10:48:cd:df:37:
65:ec:c6:25:50:b8:c8:52:ad:8b:30:e3:9b:32:96:d1:a2:ff:
37:6a:3e:bd:2c:2a:12:7c:fd:aa:59:90:6b:22:e4:57:98:46:
fd:75:a9:a7:e7:28:fb:69:85:5f:5c:ee:4c:7a:fb:07:20:20:
ef:49:87:ff:1b:48:c0:3b:56:f7:d1:97:29:f3:5d:ab:99:80:
fa:cc:e7:dc:54:e3:8d:03:c5:18:49:74:3c:62:c9:05:0a:dd:
5c:88:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 02:52:18 2026 by rpki-client