Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
File: 0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa (raw, json)
Hash identifier: jj2NdhnGL/rdBNgmpLFGq/GjWCkPwwmZRQrhiPnSFdg=
Subject key identifier: 08:7B:0B:52:73:60:B8:A9:05:4A:9D:A0:FE:62:85:A7:6E:5D:3C:F1
Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial: 010D0C9F4328584EC4D7192886DDB4DD001E5380
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
Signing time: Sat 08 Aug 2026 13:00:11 +0000
ROA not before: Sat 08 Aug 2026 13:00:11 +0000
ROA not after: Fri 06 Nov 2026 14:00:11 +0000
asID: 11776
IP address blocks: 138.207.128.0/21 maxlen: 21
138.207.136.0/22 maxlen: 22
138.207.140.0/23 maxlen: 23
138.207.142.0/23 maxlen: 23
138.207.169.0/24 maxlen: 24
138.207.170.0/23 maxlen: 23
138.207.232.0/22 maxlen: 22
138.207.236.0/22 maxlen: 22
138.207.240.0/21 maxlen: 21
138.207.248.0/23 maxlen: 23
138.207.250.0/23 maxlen: 23
146.168.192.0/23 maxlen: 23
146.168.194.0/23 maxlen: 23
146.168.196.0/23 maxlen: 23
146.168.198.0/23 maxlen: 23
146.168.200.0/23 maxlen: 23
146.168.202.0/23 maxlen: 23
146.168.204.0/24 maxlen: 24
146.168.205.0/24 maxlen: 24
146.168.206.0/23 maxlen: 23
146.168.208.0/23 maxlen: 23
146.168.210.0/23 maxlen: 23
146.168.212.0/23 maxlen: 23
146.168.214.0/23 maxlen: 23
146.168.216.0/24 maxlen: 24
146.168.217.0/24 maxlen: 24
146.168.218.0/24 maxlen: 24
146.168.219.0/24 maxlen: 24
146.168.220.0/24 maxlen: 24
146.168.222.0/23 maxlen: 23
159.250.32.0/23 maxlen: 23
159.250.34.0/23 maxlen: 23
159.250.36.0/23 maxlen: 23
159.250.38.0/23 maxlen: 23
159.250.40.0/23 maxlen: 23
159.250.42.0/23 maxlen: 23
159.250.44.0/23 maxlen: 23
159.250.46.0/23 maxlen: 23
159.250.48.0/23 maxlen: 23
159.250.50.0/23 maxlen: 23
159.250.52.0/23 maxlen: 23
159.250.54.0/23 maxlen: 23
159.250.56.0/23 maxlen: 23
159.250.58.0/23 maxlen: 23
159.250.60.0/23 maxlen: 23
159.250.62.0/23 maxlen: 23
159.250.95.0/24 maxlen: 24
159.250.144.0/23 maxlen: 23
159.250.146.0/23 maxlen: 23
159.250.148.0/23 maxlen: 23
159.250.150.0/23 maxlen: 23
162.218.17.0/24 maxlen: 24
162.218.18.0/23 maxlen: 23
172.85.0.0/22 maxlen: 22
174.140.64.0/21 maxlen: 21
174.140.72.0/21 maxlen: 21
174.140.80.0/22 maxlen: 22
174.140.84.0/24 maxlen: 24
174.140.85.0/24 maxlen: 24
174.140.86.0/24 maxlen: 24
174.140.88.0/23 maxlen: 23
174.140.90.0/24 maxlen: 24
174.140.91.0/24 maxlen: 24
174.140.92.0/22 maxlen: 22
174.140.112.0/20 maxlen: 20
192.158.216.0/21 maxlen: 21
204.195.128.0/22 maxlen: 22
204.195.132.0/22 maxlen: 22
204.195.140.0/24 maxlen: 24
204.195.141.0/24 maxlen: 24
204.195.142.0/24 maxlen: 24
204.195.143.0/24 maxlen: 24
204.195.160.0/20 maxlen: 20
207.255.4.0/24 maxlen: 24
207.255.5.0/24 maxlen: 24
207.255.6.0/24 maxlen: 24
207.255.7.0/24 maxlen: 24
207.255.8.0/23 maxlen: 23
207.255.10.0/23 maxlen: 23
207.255.12.0/23 maxlen: 23
207.255.14.0/23 maxlen: 23
207.255.16.0/22 maxlen: 22
207.255.24.0/24 maxlen: 24
207.255.27.0/24 maxlen: 24
207.255.32.0/23 maxlen: 23
207.255.34.0/23 maxlen: 23
207.255.36.0/22 maxlen: 22
207.255.40.0/21 maxlen: 21
207.255.48.0/23 maxlen: 23
207.255.50.0/23 maxlen: 23
207.255.56.0/22 maxlen: 22
207.255.60.0/22 maxlen: 22
207.255.64.0/19 maxlen: 19
207.255.97.0/24 maxlen: 24
207.255.98.0/24 maxlen: 24
207.255.99.0/24 maxlen: 24
207.255.100.0/23 maxlen: 23
207.255.102.0/23 maxlen: 23
207.255.104.0/23 maxlen: 23
207.255.106.0/23 maxlen: 23
207.255.108.0/23 maxlen: 23
207.255.114.0/24 maxlen: 24
207.255.115.0/24 maxlen: 24
207.255.116.0/24 maxlen: 24
207.255.117.0/24 maxlen: 24
207.255.118.0/24 maxlen: 24
207.255.120.0/21 maxlen: 21
207.255.130.0/23 maxlen: 23
207.255.132.0/22 maxlen: 22
207.255.136.0/21 maxlen: 21
207.255.145.0/24 maxlen: 24
207.255.146.0/24 maxlen: 24
207.255.147.0/24 maxlen: 24
207.255.150.0/24 maxlen: 24
207.255.152.0/21 maxlen: 21
207.255.161.0/24 maxlen: 24
207.255.162.0/24 maxlen: 24
207.255.163.0/24 maxlen: 24
207.255.164.0/22 maxlen: 22
207.255.169.0/24 maxlen: 24
207.255.170.0/24 maxlen: 24
207.255.171.0/24 maxlen: 24
207.255.172.0/22 maxlen: 22
207.255.193.0/24 maxlen: 24
207.255.194.0/24 maxlen: 24
207.255.195.0/24 maxlen: 24
207.255.196.0/22 maxlen: 22
207.255.200.0/22 maxlen: 22
207.255.204.0/23 maxlen: 23
207.255.206.0/23 maxlen: 23
207.255.208.0/21 maxlen: 21
207.255.216.0/23 maxlen: 23
207.255.218.0/23 maxlen: 23
207.255.220.0/23 maxlen: 23
207.255.222.0/23 maxlen: 23
207.255.228.0/22 maxlen: 22
207.255.232.0/24 maxlen: 24
207.255.233.0/24 maxlen: 24
207.255.238.0/24 maxlen: 24
207.255.239.0/24 maxlen: 24
207.255.240.0/23 maxlen: 23
207.255.242.0/23 maxlen: 23
207.255.244.0/22 maxlen: 22
207.255.249.0/24 maxlen: 24
207.255.250.0/24 maxlen: 24
207.255.251.0/24 maxlen: 24
209.203.192.0/21 maxlen: 21
209.203.200.0/22 maxlen: 22
209.203.204.0/22 maxlen: 22
209.203.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c4:d7:19:28:86:dd:b4:dd:00:1e:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Validity
Not Before: Aug 8 13:00:11 2026 GMT
Not After : Nov 6 14:00:11 2026 GMT
Subject: CN=d91d182a-41e1-4358-85c8-05d6f4176716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:30:0c:7a:15:d6:63:62:a5:45:8d:eb:0a:
c2:4f:d4:f9:8f:ae:2e:18:ca:77:61:89:e0:56:41:
12:ac:da:ca:d5:40:23:1f:eb:25:a7:b8:91:08:88:
b2:93:90:fd:7f:eb:22:5f:fa:7f:79:91:b3:9c:dc:
98:12:83:e0:f9:d8:ac:6f:92:a0:c0:ba:c3:4e:f6:
e5:1b:f2:80:0f:91:f1:8b:25:d7:47:61:f1:f9:d4:
a2:fb:24:2f:32:4c:d9:45:82:8d:fc:69:07:e5:f5:
7a:79:ab:21:64:8d:1b:ef:c5:29:d6:a5:c3:c3:5b:
9e:b2:cc:0f:c6:fb:89:69:4a:dc:f4:e1:76:fc:4e:
14:88:fb:f6:42:00:60:61:88:46:cc:5a:fd:d3:8d:
bb:f2:ef:d2:92:c9:6e:05:7c:8b:60:bd:94:a8:a1:
e2:a6:32:ff:92:c2:bc:46:c9:8d:af:26:12:8b:0e:
af:a5:f3:2c:50:d1:38:d1:15:1c:27:e1:3a:27:31:
da:ad:4b:83:ae:60:67:05:0f:ae:7a:de:3d:63:2a:
12:38:88:54:fa:4a:97:8e:e4:a8:2a:41:ce:5b:27:
7c:b5:b8:55:71:2b:cf:eb:84:c0:bd:27:82:ee:86:
f9:27:07:b0:b0:2e:f8:a3:5e:7e:bf:ae:e6:3f:bc:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7B:0B:52:73:60:B8:A9:05:4A:9D:A0:FE:62:85:A7:6E:5D:3C:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
X509v3 Authority Key Identifier:
keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
sbgp-ipAddrBlock: critical
IPv4:
138.207.128.0/20
138.207.169.0-138.207.171.255
138.207.232.0-138.207.251.255
146.168.192.0-146.168.220.255
146.168.222.0/23
159.250.32.0/19
159.250.95.0/24
159.250.144.0/21
162.218.17.0-162.218.19.255
172.85.0.0/22
174.140.64.0-174.140.86.255
174.140.88.0/21
174.140.112.0/20
192.158.216.0/21
204.195.128.0/21
204.195.140.0/22
204.195.160.0/20
207.255.4.0-207.255.19.255
207.255.24.0/24
207.255.27.0/24
207.255.32.0-207.255.51.255
207.255.56.0-207.255.95.255
207.255.97.0-207.255.109.255
207.255.114.0-207.255.118.255
207.255.120.0/21
207.255.130.0-207.255.143.255
207.255.145.0-207.255.147.255
207.255.150.0/24
207.255.152.0/21
207.255.161.0-207.255.167.255
207.255.169.0-207.255.175.255
207.255.193.0-207.255.223.255
207.255.228.0-207.255.233.255
207.255.238.0-207.255.247.255
207.255.249.0-207.255.251.255
209.203.192.0/20
209.203.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:34:c5:4d:97:df:0d:0e:9e:9c:f2:93:e3:bb:c9:be:02:f4:
13:37:24:40:f7:e5:65:6e:5f:2c:db:ba:f3:00:58:43:c1:f4:
78:78:03:65:fb:03:62:65:07:96:14:f5:a0:2c:1a:ad:49:1f:
05:be:28:13:46:6d:cc:f3:da:c3:bd:8c:af:73:d9:c9:ac:6b:
08:7d:f8:54:72:dd:44:f8:d6:5c:45:8a:70:86:34:40:6c:80:
74:8f:20:a6:b7:cd:ac:4c:24:9c:3f:f5:85:94:6d:f6:de:2c:
fd:95:f9:62:cd:fb:32:22:16:ef:11:5b:d6:ac:9a:33:8d:89:
eb:92:01:a8:85:1b:98:b3:96:cf:d6:0e:af:a3:c9:d6:65:9c:
f7:b8:65:98:74:d1:e8:4b:7b:55:72:57:53:ca:0f:53:99:59:
61:16:64:a7:30:0f:36:45:2d:ff:37:b9:eb:d9:c7:39:38:03:
06:f2:4f:bd:e1:27:b0:e4:63:a5:87:71:94:70:2c:1c:2a:5e:
07:15:68:4b:88:d0:fd:00:4d:5c:c2:1d:69:0a:a5:49:82:ec:
74:30:81:c3:2b:55:2c:8e:89:5f:0a:18:a5:bf:4e:69:4d:62:
9f:db:0b:e8:64:4f:d3:6d:a3:92:17:da:57:36:39:ea:b7:62:
10:ac:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:38 2026 by rpki-client