Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
File: 0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa (raw, json)
Hash identifier: ib9fydu8dz7krmvQjNcwuienqlR7roA3kI/E476S1dM=
Subject key identifier: DD:F9:1B:39:A3:01:0F:10:CC:E5:EF:97:7D:9D:36:D4:29:56:FE:A4
Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial: 010D0C9F4328584E22DD85488994C5F709AC2680
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
Signing time: Thu 11 Jun 2026 12:32:20 +0000
ROA not before: Thu 11 Jun 2026 12:32:20 +0000
ROA not after: Wed 09 Sep 2026 12:02:23 +0000
asID: 11776
IP address blocks: 138.207.128.0/21 maxlen: 21
138.207.136.0/22 maxlen: 22
138.207.140.0/23 maxlen: 23
138.207.142.0/23 maxlen: 23
138.207.169.0/24 maxlen: 24
138.207.170.0/23 maxlen: 23
138.207.232.0/22 maxlen: 22
138.207.236.0/22 maxlen: 22
138.207.240.0/21 maxlen: 21
138.207.248.0/23 maxlen: 23
138.207.250.0/23 maxlen: 23
146.168.192.0/23 maxlen: 23
146.168.194.0/23 maxlen: 23
146.168.196.0/23 maxlen: 23
146.168.198.0/23 maxlen: 23
146.168.200.0/23 maxlen: 23
146.168.202.0/23 maxlen: 23
146.168.204.0/24 maxlen: 24
146.168.205.0/24 maxlen: 24
146.168.206.0/23 maxlen: 23
146.168.208.0/23 maxlen: 23
146.168.210.0/23 maxlen: 23
146.168.212.0/23 maxlen: 23
146.168.214.0/23 maxlen: 23
146.168.216.0/24 maxlen: 24
146.168.217.0/24 maxlen: 24
146.168.218.0/24 maxlen: 24
146.168.219.0/24 maxlen: 24
146.168.220.0/24 maxlen: 24
146.168.222.0/23 maxlen: 23
159.250.32.0/23 maxlen: 23
159.250.34.0/23 maxlen: 23
159.250.36.0/23 maxlen: 23
159.250.38.0/23 maxlen: 23
159.250.40.0/23 maxlen: 23
159.250.42.0/23 maxlen: 23
159.250.44.0/23 maxlen: 23
159.250.46.0/23 maxlen: 23
159.250.48.0/23 maxlen: 23
159.250.50.0/23 maxlen: 23
159.250.52.0/23 maxlen: 23
159.250.54.0/23 maxlen: 23
159.250.56.0/23 maxlen: 23
159.250.58.0/23 maxlen: 23
159.250.60.0/23 maxlen: 23
159.250.62.0/23 maxlen: 23
159.250.95.0/24 maxlen: 24
159.250.144.0/23 maxlen: 23
159.250.146.0/23 maxlen: 23
159.250.148.0/23 maxlen: 23
159.250.150.0/23 maxlen: 23
162.218.17.0/24 maxlen: 24
162.218.18.0/23 maxlen: 23
172.85.0.0/22 maxlen: 22
174.140.64.0/21 maxlen: 21
174.140.72.0/21 maxlen: 21
174.140.80.0/22 maxlen: 22
174.140.84.0/24 maxlen: 24
174.140.85.0/24 maxlen: 24
174.140.86.0/24 maxlen: 24
174.140.88.0/23 maxlen: 23
174.140.90.0/24 maxlen: 24
174.140.91.0/24 maxlen: 24
174.140.92.0/22 maxlen: 22
174.140.112.0/20 maxlen: 20
192.158.216.0/21 maxlen: 21
204.195.128.0/22 maxlen: 22
204.195.132.0/22 maxlen: 22
204.195.140.0/24 maxlen: 24
204.195.141.0/24 maxlen: 24
204.195.142.0/24 maxlen: 24
204.195.143.0/24 maxlen: 24
204.195.160.0/20 maxlen: 20
207.255.4.0/24 maxlen: 24
207.255.5.0/24 maxlen: 24
207.255.6.0/24 maxlen: 24
207.255.7.0/24 maxlen: 24
207.255.8.0/23 maxlen: 23
207.255.10.0/23 maxlen: 23
207.255.12.0/23 maxlen: 23
207.255.14.0/23 maxlen: 23
207.255.16.0/22 maxlen: 22
207.255.24.0/24 maxlen: 24
207.255.27.0/24 maxlen: 24
207.255.32.0/23 maxlen: 23
207.255.34.0/23 maxlen: 23
207.255.36.0/22 maxlen: 22
207.255.40.0/21 maxlen: 21
207.255.48.0/23 maxlen: 23
207.255.50.0/23 maxlen: 23
207.255.56.0/22 maxlen: 22
207.255.60.0/22 maxlen: 22
207.255.64.0/19 maxlen: 19
207.255.97.0/24 maxlen: 24
207.255.98.0/24 maxlen: 24
207.255.99.0/24 maxlen: 24
207.255.100.0/23 maxlen: 23
207.255.102.0/23 maxlen: 23
207.255.104.0/23 maxlen: 23
207.255.106.0/23 maxlen: 23
207.255.108.0/23 maxlen: 23
207.255.114.0/24 maxlen: 24
207.255.115.0/24 maxlen: 24
207.255.116.0/24 maxlen: 24
207.255.117.0/24 maxlen: 24
207.255.118.0/24 maxlen: 24
207.255.120.0/21 maxlen: 21
207.255.130.0/23 maxlen: 23
207.255.132.0/22 maxlen: 22
207.255.136.0/21 maxlen: 21
207.255.145.0/24 maxlen: 24
207.255.146.0/24 maxlen: 24
207.255.147.0/24 maxlen: 24
207.255.150.0/24 maxlen: 24
207.255.152.0/21 maxlen: 21
207.255.161.0/24 maxlen: 24
207.255.162.0/24 maxlen: 24
207.255.163.0/24 maxlen: 24
207.255.164.0/22 maxlen: 22
207.255.169.0/24 maxlen: 24
207.255.170.0/24 maxlen: 24
207.255.171.0/24 maxlen: 24
207.255.172.0/22 maxlen: 22
207.255.193.0/24 maxlen: 24
207.255.194.0/24 maxlen: 24
207.255.195.0/24 maxlen: 24
207.255.196.0/22 maxlen: 22
207.255.200.0/22 maxlen: 22
207.255.204.0/23 maxlen: 23
207.255.206.0/23 maxlen: 23
207.255.208.0/21 maxlen: 21
207.255.216.0/23 maxlen: 23
207.255.218.0/23 maxlen: 23
207.255.220.0/23 maxlen: 23
207.255.222.0/23 maxlen: 23
207.255.228.0/22 maxlen: 22
207.255.232.0/24 maxlen: 24
207.255.233.0/24 maxlen: 24
207.255.238.0/24 maxlen: 24
207.255.239.0/24 maxlen: 24
207.255.240.0/23 maxlen: 23
207.255.242.0/23 maxlen: 23
207.255.244.0/22 maxlen: 22
207.255.249.0/24 maxlen: 24
207.255.250.0/24 maxlen: 24
207.255.251.0/24 maxlen: 24
209.203.192.0/21 maxlen: 21
209.203.200.0/22 maxlen: 22
209.203.204.0/22 maxlen: 22
209.203.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:22:dd:85:48:89:94:c5:f7:09:ac:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Validity
Not Before: Jun 11 12:32:20 2026 GMT
Not After : Sep 9 12:02:23 2026 GMT
Subject: CN=8cc8e02b-9ba6-42b2-ad6b-e37c8c0e3b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:cc:95:e5:db:6d:8a:6b:3c:f3:10:a8:6e:
07:6a:ae:66:16:9e:fe:4f:0c:12:68:f4:35:d1:5a:
34:a0:b0:cf:fe:93:b4:5b:e4:97:58:bb:b8:87:8c:
89:9d:f4:e3:22:17:32:cc:7c:48:3f:d3:cc:63:83:
90:8a:86:d5:7c:f6:92:d6:49:43:03:a8:30:ab:43:
01:e5:6f:8a:5f:9c:45:4e:34:f3:39:08:05:64:0d:
5c:d2:38:4a:1c:d4:55:50:33:6d:72:0b:d4:f9:86:
a9:ac:e8:01:59:10:31:be:17:5a:3b:f7:35:8f:dd:
19:32:e4:8e:fe:06:b9:11:c4:7b:7d:0c:1c:83:3e:
d1:4b:13:75:90:e2:3e:70:a2:c6:42:99:d8:81:f7:
ca:d9:dc:3a:e2:9d:4f:86:08:13:db:cd:e6:6a:5f:
e5:55:68:c8:da:09:cb:c0:aa:43:5e:be:3c:44:d2:
39:c5:99:e4:73:ae:00:dc:37:dc:bf:41:ee:9c:69:
20:02:73:5e:f9:9a:3b:a6:6a:6d:d5:1f:13:cf:ea:
be:4b:ba:f4:59:46:78:8b:1e:86:8a:62:32:5d:03:
d0:b5:6a:17:03:93:54:11:78:84:6c:90:9d:7b:62:
c8:30:df:d9:28:23:9d:a4:18:93:23:97:79:81:e0:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:1B:39:A3:01:0F:10:CC:E5:EF:97:7D:9D:36:D4:29:56:FE:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/0c0592ac-4fb4-323c-b068-1e98cc5fec40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
X509v3 Authority Key Identifier:
keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
sbgp-ipAddrBlock: critical
IPv4:
138.207.128.0/20
138.207.169.0-138.207.171.255
138.207.232.0-138.207.251.255
146.168.192.0-146.168.220.255
146.168.222.0/23
159.250.32.0/19
159.250.95.0/24
159.250.144.0/21
162.218.17.0-162.218.19.255
172.85.0.0/22
174.140.64.0-174.140.86.255
174.140.88.0/21
174.140.112.0/20
192.158.216.0/21
204.195.128.0/21
204.195.140.0/22
204.195.160.0/20
207.255.4.0-207.255.19.255
207.255.24.0/24
207.255.27.0/24
207.255.32.0-207.255.51.255
207.255.56.0-207.255.95.255
207.255.97.0-207.255.109.255
207.255.114.0-207.255.118.255
207.255.120.0/21
207.255.130.0-207.255.143.255
207.255.145.0-207.255.147.255
207.255.150.0/24
207.255.152.0/21
207.255.161.0-207.255.167.255
207.255.169.0-207.255.175.255
207.255.193.0-207.255.223.255
207.255.228.0-207.255.233.255
207.255.238.0-207.255.247.255
207.255.249.0-207.255.251.255
209.203.192.0/20
209.203.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:5d:d7:9f:46:12:24:23:c8:fa:93:bf:de:8c:a8:c9:15:e4:
55:80:fe:be:8a:73:4f:3e:32:a0:45:52:cc:9b:5a:b2:cd:f5:
25:7d:56:84:c2:51:4c:43:ca:3a:6f:54:bc:65:90:0d:43:27:
36:b0:29:5d:7a:ec:c0:39:ed:7b:7a:87:ff:8f:ec:a7:13:82:
95:33:a4:52:cd:0c:04:ba:56:2d:19:a8:63:a0:25:91:43:39:
69:65:57:83:2d:12:65:cf:c6:96:93:c0:01:81:3c:78:af:7d:
33:8b:9a:dd:19:d7:2c:2f:c6:7d:54:aa:cc:13:09:b3:10:07:
b5:44:3c:63:6a:fe:05:d8:ea:57:82:ed:ef:ea:ff:55:95:b1:
3f:de:2f:e4:f1:08:c0:33:12:5d:6b:d5:0a:8b:db:7a:3a:e7:
8b:6e:c9:f7:38:a3:b1:bb:a7:af:58:41:c9:75:6d:ba:b9:50:
96:19:ae:14:9c:64:3c:bd:0d:bb:da:11:69:42:8c:33:5b:d7:
01:c6:07:39:09:49:d0:59:e2:f9:88:83:da:c2:6a:0e:26:c5:
00:c6:64:f0:fd:3b:b8:82:b0:a4:e7:8c:65:be:f3:66:44:be:
7a:5c:e7:a3:0c:97:90:08:e9:65:81:5a:ae:9e:e6:09:54:2b:
90:b9:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:45:08 2026 by rpki-client