Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
File: 0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa (raw, json)
Hash identifier: NGJro6Zz1ghmqcwMWG9uygl+kwM1H9uKVd6ZUrl8ZBA=
Subject key identifier: E7:82:B4:EF:32:FE:A7:07:D9:0D:A4:C1:9A:64:D0:30:60:C9:08:0F
Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial: 010D0C9F4328584F66C2BA7697CA9674FA00DF80
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
Signing time: Mon 05 Oct 2026 13:00:13 +0000
ROA not before: Mon 05 Oct 2026 13:00:13 +0000
ROA not after: Sun 03 Jan 2027 14:00:13 +0000
asID: 11776
IP address blocks: 138.207.128.0/21 maxlen: 21
138.207.136.0/22 maxlen: 22
138.207.140.0/23 maxlen: 23
138.207.142.0/23 maxlen: 23
138.207.169.0/24 maxlen: 24
138.207.170.0/23 maxlen: 23
138.207.232.0/22 maxlen: 22
138.207.236.0/22 maxlen: 22
138.207.240.0/21 maxlen: 21
138.207.248.0/23 maxlen: 23
138.207.250.0/23 maxlen: 23
146.168.192.0/23 maxlen: 23
146.168.194.0/23 maxlen: 23
146.168.196.0/23 maxlen: 23
146.168.198.0/23 maxlen: 23
146.168.200.0/23 maxlen: 23
146.168.202.0/23 maxlen: 23
146.168.204.0/24 maxlen: 24
146.168.205.0/24 maxlen: 24
146.168.206.0/23 maxlen: 23
146.168.208.0/23 maxlen: 23
146.168.210.0/23 maxlen: 23
146.168.212.0/23 maxlen: 23
146.168.214.0/23 maxlen: 23
146.168.216.0/24 maxlen: 24
146.168.217.0/24 maxlen: 24
146.168.218.0/24 maxlen: 24
146.168.219.0/24 maxlen: 24
146.168.220.0/24 maxlen: 24
146.168.222.0/23 maxlen: 23
159.250.32.0/23 maxlen: 23
159.250.34.0/23 maxlen: 23
159.250.36.0/23 maxlen: 23
159.250.38.0/23 maxlen: 23
159.250.40.0/23 maxlen: 23
159.250.42.0/23 maxlen: 23
159.250.44.0/23 maxlen: 23
159.250.46.0/23 maxlen: 23
159.250.48.0/23 maxlen: 23
159.250.50.0/23 maxlen: 23
159.250.52.0/23 maxlen: 23
159.250.54.0/23 maxlen: 23
159.250.56.0/23 maxlen: 23
159.250.58.0/23 maxlen: 23
159.250.60.0/23 maxlen: 23
159.250.62.0/23 maxlen: 23
159.250.95.0/24 maxlen: 24
159.250.144.0/23 maxlen: 23
159.250.146.0/23 maxlen: 23
159.250.148.0/23 maxlen: 23
159.250.150.0/23 maxlen: 23
162.218.17.0/24 maxlen: 24
162.218.18.0/23 maxlen: 23
172.85.0.0/22 maxlen: 22
174.140.64.0/21 maxlen: 21
174.140.72.0/21 maxlen: 21
174.140.80.0/22 maxlen: 22
174.140.84.0/24 maxlen: 24
174.140.85.0/24 maxlen: 24
174.140.86.0/24 maxlen: 24
174.140.88.0/23 maxlen: 23
174.140.90.0/24 maxlen: 24
174.140.91.0/24 maxlen: 24
174.140.92.0/22 maxlen: 22
174.140.112.0/20 maxlen: 20
192.158.216.0/21 maxlen: 21
204.195.128.0/22 maxlen: 22
204.195.132.0/22 maxlen: 22
204.195.140.0/24 maxlen: 24
204.195.141.0/24 maxlen: 24
204.195.142.0/24 maxlen: 24
204.195.143.0/24 maxlen: 24
204.195.160.0/20 maxlen: 20
207.255.4.0/24 maxlen: 24
207.255.5.0/24 maxlen: 24
207.255.6.0/24 maxlen: 24
207.255.7.0/24 maxlen: 24
207.255.8.0/23 maxlen: 23
207.255.10.0/23 maxlen: 23
207.255.12.0/23 maxlen: 23
207.255.14.0/23 maxlen: 23
207.255.16.0/22 maxlen: 22
207.255.24.0/24 maxlen: 24
207.255.27.0/24 maxlen: 24
207.255.32.0/23 maxlen: 23
207.255.34.0/23 maxlen: 23
207.255.36.0/22 maxlen: 22
207.255.40.0/21 maxlen: 21
207.255.48.0/23 maxlen: 23
207.255.50.0/23 maxlen: 23
207.255.56.0/22 maxlen: 22
207.255.60.0/22 maxlen: 22
207.255.64.0/19 maxlen: 19
207.255.97.0/24 maxlen: 24
207.255.98.0/24 maxlen: 24
207.255.99.0/24 maxlen: 24
207.255.100.0/23 maxlen: 23
207.255.102.0/23 maxlen: 23
207.255.104.0/23 maxlen: 23
207.255.106.0/23 maxlen: 23
207.255.108.0/23 maxlen: 23
207.255.114.0/24 maxlen: 24
207.255.115.0/24 maxlen: 24
207.255.116.0/24 maxlen: 24
207.255.117.0/24 maxlen: 24
207.255.118.0/24 maxlen: 24
207.255.120.0/21 maxlen: 21
207.255.130.0/23 maxlen: 23
207.255.132.0/22 maxlen: 22
207.255.136.0/21 maxlen: 21
207.255.145.0/24 maxlen: 24
207.255.146.0/24 maxlen: 24
207.255.147.0/24 maxlen: 24
207.255.150.0/24 maxlen: 24
207.255.152.0/21 maxlen: 21
207.255.161.0/24 maxlen: 24
207.255.162.0/24 maxlen: 24
207.255.163.0/24 maxlen: 24
207.255.164.0/22 maxlen: 22
207.255.169.0/24 maxlen: 24
207.255.170.0/24 maxlen: 24
207.255.171.0/24 maxlen: 24
207.255.172.0/22 maxlen: 22
207.255.193.0/24 maxlen: 24
207.255.194.0/24 maxlen: 24
207.255.195.0/24 maxlen: 24
207.255.196.0/22 maxlen: 22
207.255.200.0/22 maxlen: 22
207.255.204.0/23 maxlen: 23
207.255.206.0/23 maxlen: 23
207.255.208.0/21 maxlen: 21
207.255.216.0/23 maxlen: 23
207.255.218.0/23 maxlen: 23
207.255.220.0/23 maxlen: 23
207.255.222.0/23 maxlen: 23
207.255.228.0/22 maxlen: 22
207.255.232.0/24 maxlen: 24
207.255.233.0/24 maxlen: 24
207.255.238.0/24 maxlen: 24
207.255.239.0/24 maxlen: 24
207.255.240.0/23 maxlen: 23
207.255.242.0/23 maxlen: 23
207.255.244.0/22 maxlen: 22
207.255.249.0/24 maxlen: 24
207.255.250.0/24 maxlen: 24
207.255.251.0/24 maxlen: 24
209.203.192.0/21 maxlen: 21
209.203.200.0/22 maxlen: 22
209.203.204.0/22 maxlen: 22
209.203.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:c2:ba:76:97:ca:96:74:fa:00:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Validity
Not Before: Oct 5 13:00:13 2026 GMT
Not After : Jan 3 14:00:13 2027 GMT
Subject: CN=f3e29eef-a4b5-4030-ad9a-e0e9d24e82af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:16:43:51:34:5e:6c:a6:32:e4:a5:84:42:
7b:f9:6d:0a:07:32:a5:c5:b9:5d:de:af:2a:23:43:
07:63:15:15:87:5d:62:84:52:75:ff:07:4f:7d:54:
31:01:aa:fc:7f:15:22:01:64:a4:29:0c:1e:08:c4:
23:6b:46:ff:66:b3:f7:3f:f7:42:14:f1:38:1a:28:
60:e9:4f:e4:e6:64:dc:0c:a4:b5:51:d9:91:bc:3e:
66:07:1c:74:bc:8a:e6:20:5b:d4:51:2b:bd:a9:14:
e0:37:7e:71:eb:d0:d5:1c:b3:00:32:01:17:5d:b4:
fe:3a:0e:c6:29:72:49:2b:d4:da:ff:7c:d7:67:01:
ce:f5:0e:76:da:af:c8:26:96:45:41:60:71:bf:50:
ec:c6:a3:3a:d6:40:6b:b3:a6:86:45:2d:6b:cb:77:
34:12:a2:d5:a7:e1:99:38:b2:ac:a4:c0:3f:e1:76:
86:7a:8a:68:de:09:17:3a:21:32:54:8a:13:49:3d:
2e:54:b7:7c:36:82:4f:45:c7:40:58:a9:68:2c:c9:
b5:2a:44:38:ce:ea:9b:5f:7e:f9:26:fb:3a:4f:41:
13:ef:6c:40:46:e9:f2:d3:d3:19:28:24:0f:11:64:
ad:fc:b9:82:c2:1e:e8:1e:fd:15:1f:b9:65:79:42:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:B4:EF:32:FE:A7:07:D9:0D:A4:C1:9A:64:D0:30:60:C9:08:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
X509v3 Authority Key Identifier:
keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
sbgp-ipAddrBlock: critical
IPv4:
138.207.128.0/20
138.207.169.0-138.207.171.255
138.207.232.0-138.207.251.255
146.168.192.0-146.168.220.255
146.168.222.0/23
159.250.32.0/19
159.250.95.0/24
159.250.144.0/21
162.218.17.0-162.218.19.255
172.85.0.0/22
174.140.64.0-174.140.86.255
174.140.88.0/21
174.140.112.0/20
192.158.216.0/21
204.195.128.0/21
204.195.140.0/22
204.195.160.0/20
207.255.4.0-207.255.19.255
207.255.24.0/24
207.255.27.0/24
207.255.32.0-207.255.51.255
207.255.56.0-207.255.95.255
207.255.97.0-207.255.109.255
207.255.114.0-207.255.118.255
207.255.120.0/21
207.255.130.0-207.255.143.255
207.255.145.0-207.255.147.255
207.255.150.0/24
207.255.152.0/21
207.255.161.0-207.255.167.255
207.255.169.0-207.255.175.255
207.255.193.0-207.255.223.255
207.255.228.0-207.255.233.255
207.255.238.0-207.255.247.255
207.255.249.0-207.255.251.255
209.203.192.0/20
209.203.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:cb:8a:b7:b2:c7:a0:e4:26:9b:89:71:24:e0:b5:92:cb:c3:
b4:c8:75:a5:ce:75:ee:03:83:f6:a4:69:87:fa:75:55:32:11:
7e:93:bd:3d:9a:bb:57:be:c5:04:80:8b:98:8a:50:63:38:0c:
3e:ba:58:b8:9d:14:e6:c8:80:c8:de:60:37:4a:aa:48:56:ca:
62:2f:c4:a0:27:a4:be:d3:ca:e0:e1:19:39:3d:76:ff:2c:57:
bc:44:d7:f0:aa:f1:ff:a8:32:fc:10:e5:b3:e2:23:5f:14:e7:
f6:2c:d6:b8:48:b6:19:53:44:12:77:96:fe:4c:12:5f:13:52:
dd:33:67:00:fa:2b:ce:f8:84:22:38:91:f7:36:f3:78:e0:e6:
5e:e3:6d:e4:2d:3d:cd:92:8b:98:2a:65:e0:4b:1f:63:a2:22:
52:0c:db:30:dd:38:26:47:35:f4:77:cb:5f:86:2a:53:4b:ac:
77:22:26:fb:1a:8a:40:d1:b0:80:e8:75:48:34:78:1a:4b:db:
13:26:73:e7:49:9d:29:06:41:31:00:9f:5e:d7:17:4a:69:ce:
66:50:45:61:d0:1c:3b:db:27:91:67:db:e0:23:cf:0e:d6:69:
07:9a:00:1d:06:20:6d:89:b3:84:08:b3:8d:26:d7:30:eb:36:
0c:7b:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:14:33 2026 by rpki-client