Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/c8df01e7-3e13-3c93-908b-5a89ee54b342.roa
File: c8df01e7-3e13-3c93-908b-5a89ee54b342.roa (raw, json)
Hash identifier: BAOqd3OYgdv1s1Di16hpmNQT9F/CO9LUxLwGp1HG92o=
Subject key identifier: E6:AA:0A:23:9A:95:63:00:A8:00:2B:2C:4C:32:7D:2D:5E:DC:AF:6F
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F4328584E35FF13B288034973B6E76C80
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/c8df01e7-3e13-3c93-908b-5a89ee54b342.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 21887
IP address blocks: 43.243.84.0/22 maxlen: 24
45.78.64.0/20 maxlen: 24
46.254.88.0/22 maxlen: 24
64.64.224.0/19 maxlen: 24
65.49.130.0/23 maxlen: 24
65.49.132.0/22 maxlen: 24
65.49.144.0/23 maxlen: 24
65.49.150.0/23 maxlen: 24
65.49.192.0/19 maxlen: 24
65.49.224.0/20 maxlen: 24
66.98.112.0/20 maxlen: 24
67.216.192.0/19 maxlen: 24
67.218.128.0/19 maxlen: 24
67.230.160.0/19 maxlen: 24
68.168.128.0/20 maxlen: 24
69.171.64.0/20 maxlen: 24
69.194.8.0/21 maxlen: 24
74.82.192.0/19 maxlen: 24
74.120.168.0/21 maxlen: 24
74.211.96.0/19 maxlen: 24
80.251.208.0/20 maxlen: 24
89.208.240.0/20 maxlen: 24
93.179.96.0/21 maxlen: 24
93.179.112.0/21 maxlen: 24
93.179.124.0/22 maxlen: 24
94.103.4.0/22 maxlen: 24
95.163.192.0/20 maxlen: 24
95.169.0.0/19 maxlen: 24
95.181.188.0/22 maxlen: 24
96.45.176.0/20 maxlen: 24
97.64.16.0/20 maxlen: 24
97.64.32.0/20 maxlen: 24
97.64.80.0/22 maxlen: 24
97.64.104.0/21 maxlen: 24
97.64.120.0/21 maxlen: 24
98.142.128.0/20 maxlen: 24
104.36.64.0/21 maxlen: 24
104.36.184.0/22 maxlen: 24
104.129.180.0/22 maxlen: 24
104.129.184.0/22 maxlen: 24
104.153.96.0/21 maxlen: 24
104.225.144.0/20 maxlen: 24
104.225.232.0/21 maxlen: 24
104.243.16.0/20 maxlen: 24
104.244.88.0/21 maxlen: 24
104.245.40.0/21 maxlen: 24
104.245.188.0/22 maxlen: 24
107.182.16.0/20 maxlen: 24
144.34.128.0/17 maxlen: 24
150.242.88.0/22 maxlen: 24
162.211.220.0/22 maxlen: 24
162.219.120.0/21 maxlen: 24
162.244.240.0/22 maxlen: 24
172.93.32.0/20 maxlen: 24
172.96.16.0/22 maxlen: 24
172.96.192.0/18 maxlen: 24
173.242.112.0/20 maxlen: 24
174.137.48.0/20 maxlen: 24
176.122.128.0/18 maxlen: 24
184.170.208.0/20 maxlen: 24
185.180.16.0/22 maxlen: 24
185.199.240.0/22 maxlen: 24
185.205.180.0/22 maxlen: 24
185.212.56.0/22 maxlen: 24
192.69.88.0/21 maxlen: 24
198.181.32.0/20 maxlen: 24
198.181.56.0/22 maxlen: 24
199.19.104.0/21 maxlen: 24
199.115.228.0/22 maxlen: 24
199.168.136.0/21 maxlen: 24
199.180.112.0/21 maxlen: 24
199.193.124.0/22 maxlen: 24
206.190.232.0/21 maxlen: 24
216.24.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:35:ff:13:b2:88:03:49:73:b6:e7:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=50ab1bce-740c-46c8-87ca-dbe9a989b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:9f:30:6d:b0:c6:7b:91:8b:15:65:0e:75:
ae:f7:9e:79:ef:af:62:65:50:9f:ab:31:be:e7:b2:
ba:ad:17:77:aa:ca:bc:b1:84:94:a2:27:e1:d2:46:
c8:2f:a7:28:2f:85:4e:af:a6:6e:a2:73:52:e2:63:
cc:43:6c:85:d8:34:1f:9e:c8:7a:dd:96:61:62:ac:
e1:fa:2c:a0:16:f7:e6:53:ee:10:29:a0:c4:26:4a:
f5:f7:69:e1:7d:bb:96:e5:7c:94:77:36:93:3b:00:
4b:0a:46:28:98:66:8e:d5:93:39:1f:80:5a:6d:97:
44:3a:77:11:a1:9b:8f:02:b4:f8:8a:fe:27:a7:f3:
64:7d:d4:7f:7c:1c:02:22:07:bf:af:b7:dd:01:19:
67:1f:44:09:c0:b5:88:d7:ac:bc:54:7e:f2:cc:75:
7b:9d:24:de:72:c7:f6:5b:63:13:f5:6a:7e:f0:79:
9e:60:e0:d1:34:cc:a9:18:94:76:d5:6d:6e:63:a6:
06:39:68:81:24:6e:d0:52:71:b8:3b:4a:e0:02:39:
65:cd:36:5e:e7:8a:29:48:1a:7b:0a:c9:3d:7c:5d:
53:31:8a:47:50:f8:c8:f5:71:47:e8:cc:23:96:f1:
db:8b:7b:37:8a:bf:df:cb:3c:bd:14:e0:0e:f2:96:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:0A:23:9A:95:63:00:A8:00:2B:2C:4C:32:7D:2D:5E:DC:AF:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/c8df01e7-3e13-3c93-908b-5a89ee54b342.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
43.243.84.0/22
45.78.64.0/20
46.254.88.0/22
64.64.224.0/19
65.49.130.0-65.49.135.255
65.49.144.0/23
65.49.150.0/23
65.49.192.0-65.49.239.255
66.98.112.0/20
67.216.192.0/19
67.218.128.0/19
67.230.160.0/19
68.168.128.0/20
69.171.64.0/20
69.194.8.0/21
74.82.192.0/19
74.120.168.0/21
74.211.96.0/19
80.251.208.0/20
89.208.240.0/20
93.179.96.0/21
93.179.112.0/21
93.179.124.0/22
94.103.4.0/22
95.163.192.0/20
95.169.0.0/19
95.181.188.0/22
96.45.176.0/20
97.64.16.0-97.64.47.255
97.64.80.0/22
97.64.104.0/21
97.64.120.0/21
98.142.128.0/20
104.36.64.0/21
104.36.184.0/22
104.129.180.0-104.129.187.255
104.153.96.0/21
104.225.144.0/20
104.225.232.0/21
104.243.16.0/20
104.244.88.0/21
104.245.40.0/21
104.245.188.0/22
107.182.16.0/20
144.34.128.0/17
150.242.88.0/22
162.211.220.0/22
162.219.120.0/21
162.244.240.0/22
172.93.32.0/20
172.96.16.0/22
172.96.192.0/18
173.242.112.0/20
174.137.48.0/20
176.122.128.0/18
184.170.208.0/20
185.180.16.0/22
185.199.240.0/22
185.205.180.0/22
185.212.56.0/22
192.69.88.0/21
198.181.32.0/20
198.181.56.0/22
199.19.104.0/21
199.115.228.0/22
199.168.136.0/21
199.180.112.0/21
199.193.124.0/22
206.190.232.0/21
216.24.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:56:85:bc:d0:85:d4:ac:95:84:79:dc:da:27:95:da:ea:0c:
ad:10:86:df:77:0f:50:73:32:af:30:a3:ff:d5:4b:cd:1c:84:
0f:0e:f6:22:9e:e3:d6:18:97:09:b3:02:4d:ad:17:e9:24:09:
40:77:81:03:17:8d:a2:c8:65:46:a4:3a:da:53:c0:7a:21:00:
0e:9a:92:21:1d:72:6d:ba:5a:fc:20:b4:1d:e5:77:7d:41:0a:
03:c8:c6:0b:77:42:17:91:97:19:0d:9e:81:f2:4c:b1:52:92:
05:75:31:62:95:55:da:b3:f0:49:36:db:aa:f3:22:2a:ea:52:
fa:1b:5e:d4:73:a1:6d:19:ce:e4:6c:23:5e:2b:b1:0e:ac:3f:
ac:bb:ee:93:90:38:b7:22:e9:be:eb:19:b5:85:b1:a5:7d:59:
a0:91:da:6d:7d:68:59:23:d2:43:cf:6e:53:84:51:ca:a1:83:
a6:34:9f:e0:ab:89:42:90:70:39:8f:b6:e5:0b:88:b1:ff:61:
24:21:87:cc:89:36:ea:95:d9:db:b0:81:30:89:d9:5d:c4:c2:
81:72:cc:7c:2c:b9:8d:bc:33:55:ac:f8:39:35:c3:e8:c0:02:
f6:f9:e6:40:4c:9a:2d:d7:22:e3:8b:ac:ea:05:99:cf:73:50:
66:80:39:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 13 15:03:49 2026 by rpki-client