Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa
File: 37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa (raw, json)
Hash identifier: TZgbdWxeQv8Yfd9ZMSiaY2ch7gjyv8N8h5sjajwkoi8=
Subject key identifier: F3:B1:0E:81:B4:2E:80:A1:29:E3:EA:22:32:F0:A8:EC:4C:9D:27:7B
Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial: 010D0C9F4328584F655E6C3E8E290C8E96B1E200
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 11776
IP address blocks: 23.244.144.0/23 maxlen: 23
23.244.149.0/24 maxlen: 24
23.244.150.0/23 maxlen: 23
23.244.152.0/23 maxlen: 23
23.244.154.0/23 maxlen: 23
23.244.156.0/23 maxlen: 23
23.244.158.0/23 maxlen: 23
23.244.212.0/23 maxlen: 23
23.244.214.0/24 maxlen: 24
23.244.216.0/23 maxlen: 23
23.244.220.0/23 maxlen: 23
23.245.12.0/23 maxlen: 23
23.245.14.0/23 maxlen: 23
23.245.24.0/23 maxlen: 23
23.245.26.0/23 maxlen: 23
23.245.28.0/23 maxlen: 23
23.245.30.0/23 maxlen: 23
24.145.92.0/24 maxlen: 24
24.145.93.0/24 maxlen: 24
24.145.94.0/24 maxlen: 24
24.145.112.0/22 maxlen: 22
24.145.116.0/22 maxlen: 22
24.153.32.0/23 maxlen: 23
24.153.35.0/24 maxlen: 24
24.153.38.0/23 maxlen: 23
24.153.40.0/22 maxlen: 22
24.153.48.0/23 maxlen: 23
24.153.50.0/23 maxlen: 23
24.153.52.0/24 maxlen: 24
24.153.53.0/24 maxlen: 24
24.153.54.0/23 maxlen: 23
24.153.56.0/21 maxlen: 21
24.233.200.0/24 maxlen: 24
24.233.201.0/24 maxlen: 24
24.233.206.0/23 maxlen: 23
24.233.208.0/23 maxlen: 23
24.233.210.0/23 maxlen: 23
24.233.215.0/24 maxlen: 24
24.233.219.0/24 maxlen: 24
24.233.221.0/24 maxlen: 24
24.233.222.0/24 maxlen: 24
24.233.223.0/24 maxlen: 24
24.245.96.0/22 maxlen: 22
24.245.100.0/23 maxlen: 23
24.245.102.0/23 maxlen: 23
24.245.104.0/24 maxlen: 24
24.245.105.0/24 maxlen: 24
24.245.106.0/23 maxlen: 23
24.245.108.0/24 maxlen: 24
24.245.120.0/23 maxlen: 23
24.245.122.0/23 maxlen: 23
24.245.126.0/23 maxlen: 23
65.99.96.0/20 maxlen: 20
65.99.112.0/24 maxlen: 24
65.99.113.0/24 maxlen: 24
65.99.114.0/24 maxlen: 24
65.99.115.0/24 maxlen: 24
65.99.121.0/24 maxlen: 24
65.99.122.0/24 maxlen: 24
65.99.123.0/24 maxlen: 24
65.99.124.0/23 maxlen: 23
65.99.126.0/24 maxlen: 24
66.85.5.0/24 maxlen: 24
69.161.80.0/20 maxlen: 20
69.161.98.0/24 maxlen: 24
69.161.99.0/24 maxlen: 24
69.161.102.0/24 maxlen: 24
69.161.103.0/24 maxlen: 24
69.161.104.0/22 maxlen: 22
69.161.108.0/24 maxlen: 24
69.161.109.0/24 maxlen: 24
69.161.110.0/24 maxlen: 24
69.161.111.0/24 maxlen: 24
137.103.88.0/22 maxlen: 22
209.42.139.0/24 maxlen: 24
209.42.140.0/24 maxlen: 24
209.42.141.0/24 maxlen: 24
209.42.142.0/23 maxlen: 23
209.42.150.0/24 maxlen: 24
209.42.151.0/24 maxlen: 24
209.42.152.0/24 maxlen: 24
209.42.153.0/24 maxlen: 24
209.42.156.0/24 maxlen: 24
209.42.157.0/24 maxlen: 24
209.42.159.0/24 maxlen: 24
209.203.208.0/22 maxlen: 22
216.10.161.0/24 maxlen: 24
216.10.174.0/24 maxlen: 24
216.10.175.0/24 maxlen: 24
216.10.182.0/24 maxlen: 24
216.10.183.0/24 maxlen: 24
216.10.184.0/24 maxlen: 24
216.10.185.0/24 maxlen: 24
216.10.186.0/24 maxlen: 24
216.10.187.0/24 maxlen: 24
216.10.188.0/24 maxlen: 24
216.10.189.0/24 maxlen: 24
216.36.0.0/21 maxlen: 21
216.36.8.0/22 maxlen: 22
216.36.12.0/23 maxlen: 23
216.36.14.0/24 maxlen: 24
216.36.15.0/24 maxlen: 24
216.36.16.0/24 maxlen: 24
216.36.17.0/24 maxlen: 24
216.36.18.0/23 maxlen: 23
216.36.20.0/22 maxlen: 22
216.36.24.0/24 maxlen: 24
216.36.25.0/24 maxlen: 24
216.36.26.0/24 maxlen: 24
216.36.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5e:6c:3e:8e:29:0c:8e:96:b1:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=6b6da568-9065-4870-ae6c-ea3081b52f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:51:ae:61:03:4f:ec:62:39:91:42:2f:0d:
c4:b5:1c:a4:76:83:79:04:01:68:91:11:65:4e:8c:
1a:84:65:75:2d:3b:8b:9a:08:be:32:f2:e5:f0:e1:
09:6b:ce:66:b9:c8:39:3a:a3:90:a9:81:ba:d5:0c:
25:2a:0d:60:41:e1:0b:45:4a:43:3c:5f:88:9a:c2:
e3:76:54:88:ea:ce:13:a6:35:3b:3b:bf:5d:de:19:
4c:41:ee:0f:cd:94:c8:25:db:98:b2:f2:29:84:d9:
06:31:38:23:15:b6:18:b8:c6:8b:7f:3f:d2:a2:05:
15:35:6e:c9:3f:dc:fd:8d:35:71:ed:c2:63:12:d0:
33:39:a5:e2:50:bc:3f:57:00:97:5b:9a:0e:b7:5d:
ba:c4:79:00:90:b3:65:d4:60:5e:0a:0a:be:b1:15:
35:12:7e:d2:49:9e:61:3d:5c:aa:ae:c4:5c:1e:50:
5e:ab:17:6d:32:77:bd:4f:21:4d:91:7f:94:08:fe:
ff:d1:28:65:31:92:86:29:1f:3f:51:7f:f6:bb:29:
b4:54:a3:9a:2f:51:0e:2c:cd:df:4f:3a:52:ee:e8:
22:b5:af:2d:d3:87:7e:7b:ae:f0:de:37:a3:49:25:
c9:02:79:a4:74:b8:5f:95:86:2c:56:4e:2c:03:4d:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:0E:81:B4:2E:80:A1:29:E3:EA:22:32:F0:A8:EC:4C:9D:27:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
X509v3 Authority Key Identifier:
keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.244.144.0/23
23.244.149.0-23.244.159.255
23.244.212.0-23.244.214.255
23.244.216.0/23
23.244.220.0/23
23.245.12.0/22
23.245.24.0/21
24.145.92.0-24.145.94.255
24.145.112.0/21
24.153.32.0/23
24.153.35.0/24
24.153.38.0-24.153.43.255
24.153.48.0/20
24.233.200.0/23
24.233.206.0-24.233.211.255
24.233.215.0/24
24.233.219.0/24
24.233.221.0-24.233.223.255
24.245.96.0-24.245.108.255
24.245.120.0/22
24.245.126.0/23
65.99.96.0-65.99.115.255
65.99.121.0-65.99.126.255
66.85.5.0/24
69.161.80.0/20
69.161.98.0/23
69.161.102.0-69.161.111.255
137.103.88.0/22
209.42.139.0-209.42.143.255
209.42.150.0-209.42.153.255
209.42.156.0/23
209.42.159.0/24
209.203.208.0/22
216.10.161.0/24
216.10.174.0/23
216.10.182.0-216.10.189.255
216.36.0.0-216.36.27.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e3:db:a6:54:ab:6f:4d:80:9a:d4:8f:6f:f6:ad:81:6a:61:
ea:a9:5c:62:88:44:bf:63:fa:d5:b7:4c:0b:4f:c9:96:13:27:
da:4a:5f:79:d2:d2:e0:f0:60:51:fb:1e:ea:c1:96:99:b6:fa:
89:b6:60:4f:0e:da:21:c3:c4:1b:8e:01:47:4f:72:9a:c1:dd:
c9:1f:65:be:08:86:03:c2:e3:f9:0a:43:2b:93:7c:29:2d:f0:
72:48:5c:5d:99:8d:7d:d6:6f:6e:3e:d3:e3:ca:82:ce:88:c1:
c7:e4:1b:39:bb:f2:05:a3:84:d9:2a:a2:b8:35:b5:f4:a2:5a:
58:3c:79:d9:cb:f2:7b:20:68:25:65:fb:5a:89:b3:2b:0c:70:
0f:ef:3a:d6:98:ce:c3:5c:b3:23:51:4a:0a:85:ae:b5:f0:ba:
5b:96:97:90:f4:50:37:fc:af:82:d1:9e:ce:39:50:f0:b4:36:
e6:34:1d:0e:0b:66:27:7f:60:75:e2:20:dd:de:14:b6:56:e5:
a0:f8:77:b5:e1:5a:3c:9a:60:4e:04:c0:49:96:c8:23:a9:f4:
67:8f:41:28:10:31:47:e6:85:23:17:41:bd:ef:93:35:0b:e9:
08:10:73:81:99:91:60:9e:7e:40:62:13:21:64:bc:c8:ad:62:
2e:78:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:37 2026 by rpki-client