Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa
File: cb90c805-a9ab-3bdd-afdc-0a026851da93.roa (raw, json)
Hash identifier: OzSvC9rf7A5M3NB+ULK6sjNC/bNGuN6BSOMOF1hGFtw=
Subject key identifier: A2:30:51:A6:A6:C2:BD:30:22:D5:6A:14:43:38:21:1E:E1:31:10:01
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584EA793C56C7A5D89010FB06A80
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 32934
IP address blocks: 69.171.239.0/24 maxlen: 24
69.171.250.0/24 maxlen: 24
69.171.255.0/24 maxlen: 24
129.134.25.0/24 maxlen: 24
129.134.26.0/24 maxlen: 24
129.134.27.0/24 maxlen: 24
129.134.28.0/24 maxlen: 24
129.134.29.0/24 maxlen: 24
129.134.127.0/24 maxlen: 24
157.240.0.0/24 maxlen: 24
157.240.1.0/24 maxlen: 24
157.240.3.0/24 maxlen: 24
157.240.5.0/24 maxlen: 24
157.240.7.0/24 maxlen: 24
157.240.8.0/24 maxlen: 24
157.240.9.0/24 maxlen: 24
157.240.11.0/24 maxlen: 24
157.240.12.0/24 maxlen: 24
157.240.13.0/24 maxlen: 24
157.240.14.0/24 maxlen: 24
157.240.15.0/24 maxlen: 24
157.240.16.0/24 maxlen: 24
157.240.17.0/24 maxlen: 24
157.240.19.0/24 maxlen: 24
157.240.22.0/24 maxlen: 24
157.240.23.0/24 maxlen: 24
157.240.24.0/24 maxlen: 24
157.240.25.0/24 maxlen: 24
157.240.26.0/24 maxlen: 24
157.240.27.0/24 maxlen: 24
157.240.29.0/24 maxlen: 24
157.240.30.0/24 maxlen: 24
157.240.31.0/24 maxlen: 24
157.240.192.0/24 maxlen: 24
157.240.195.0/24 maxlen: 24
157.240.196.0/24 maxlen: 24
157.240.197.0/24 maxlen: 24
157.240.198.0/24 maxlen: 24
157.240.199.0/24 maxlen: 24
157.240.200.0/24 maxlen: 24
157.240.201.0/24 maxlen: 24
157.240.202.0/24 maxlen: 24
157.240.203.0/24 maxlen: 24
157.240.204.0/24 maxlen: 24
157.240.205.0/24 maxlen: 24
157.240.207.0/24 maxlen: 24
157.240.208.0/24 maxlen: 24
157.240.209.0/24 maxlen: 24
157.240.210.0/24 maxlen: 24
157.240.211.0/24 maxlen: 24
157.240.212.0/24 maxlen: 24
157.240.214.0/24 maxlen: 24
157.240.215.0/24 maxlen: 24
157.240.216.0/24 maxlen: 24
157.240.217.0/24 maxlen: 24
157.240.218.0/24 maxlen: 24
157.240.221.0/24 maxlen: 24
157.240.222.0/24 maxlen: 24
157.240.223.0/24 maxlen: 24
157.240.224.0/24 maxlen: 24
157.240.225.0/24 maxlen: 24
157.240.226.0/24 maxlen: 24
157.240.227.0/24 maxlen: 24
157.240.229.0/24 maxlen: 24
157.240.231.0/24 maxlen: 24
157.240.233.0/24 maxlen: 24
157.240.234.0/24 maxlen: 24
157.240.235.0/24 maxlen: 24
157.240.236.0/24 maxlen: 24
157.240.237.0/24 maxlen: 24
157.240.238.0/24 maxlen: 24
157.240.239.0/24 maxlen: 24
157.240.241.0/24 maxlen: 24
157.240.242.0/24 maxlen: 24
157.240.243.0/24 maxlen: 24
157.240.244.0/24 maxlen: 24
157.240.245.0/24 maxlen: 24
157.240.247.0/24 maxlen: 24
157.240.249.0/24 maxlen: 24
157.240.251.0/24 maxlen: 24
157.240.252.0/24 maxlen: 24
157.240.253.0/24 maxlen: 24
157.240.254.0/24 maxlen: 24
2620:0:1cfa::/48 maxlen: 48
2620:0:1cff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:c5:6c:7a:5d:89:01:0f:b0:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6a8e92a1-c9be-4208-ad8f-c9c9e8bbee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:10:21:ac:3e:ab:18:ce:f1:9d:2b:da:d6:
02:e7:49:2b:92:50:6f:f0:11:c3:8c:24:ad:66:62:
82:e4:c9:00:35:1e:52:f8:db:0f:0c:e2:e4:64:2f:
c7:0a:28:3c:83:63:9e:0e:0a:a3:7d:8a:37:39:1c:
5c:a1:58:30:2c:6a:34:b1:a4:00:99:dc:f6:ec:d9:
3a:ce:6e:45:56:a0:3e:f3:a8:03:30:a0:9a:62:b9:
6b:2d:83:fa:67:36:fc:ae:cb:d6:d0:10:81:19:d5:
00:4b:92:96:d3:85:50:46:3a:6b:40:f7:5d:60:ee:
43:07:12:fe:c2:65:d3:a9:04:44:ac:f2:c7:a2:e5:
53:e3:e9:48:5a:e3:17:3a:09:65:93:7b:71:25:ee:
e4:42:3c:76:fc:d3:a3:ae:9f:8a:b8:b6:12:02:41:
51:41:49:37:75:84:f9:ba:dc:cd:46:8e:c7:ec:19:
d0:a6:48:6e:21:61:6f:b4:00:89:d9:4a:b9:81:66:
34:d7:56:0c:90:14:82:a4:ad:5f:09:d2:7a:2f:a4:
90:bc:ae:64:7d:af:f6:8e:25:8d:e9:84:87:81:ef:
6d:3e:27:35:69:d3:cb:3c:14:32:91:86:06:b7:fe:
05:ad:24:ce:fc:97:fc:1b:9a:c1:ae:7d:64:93:2d:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:51:A6:A6:C2:BD:30:22:D5:6A:14:43:38:21:1E:E1:31:10:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
69.171.239.0/24
69.171.250.0/24
69.171.255.0/24
129.134.25.0-129.134.29.255
129.134.127.0/24
157.240.0.0/23
157.240.3.0/24
157.240.5.0/24
157.240.7.0-157.240.9.255
157.240.11.0-157.240.17.255
157.240.19.0/24
157.240.22.0-157.240.27.255
157.240.29.0-157.240.31.255
157.240.192.0/24
157.240.195.0-157.240.205.255
157.240.207.0-157.240.212.255
157.240.214.0-157.240.218.255
157.240.221.0-157.240.227.255
157.240.229.0/24
157.240.231.0/24
157.240.233.0-157.240.239.255
157.240.241.0-157.240.245.255
157.240.247.0/24
157.240.249.0/24
157.240.251.0-157.240.254.255
IPv6:
2620:0:1cfa::/48
2620:0:1cff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a2:ad:a7:a2:22:4d:98:2e:ec:c2:fd:29:88:7c:3f:9b:26:
12:17:d9:4b:bb:76:65:82:fe:7e:49:f8:8a:60:ca:cc:0b:8f:
77:5f:49:65:f0:7f:eb:e0:85:73:1f:16:b2:0f:45:20:07:20:
26:67:18:7f:ac:de:f0:be:1a:ba:18:38:6c:e3:b6:b8:e0:e2:
c7:9c:3a:d5:4e:42:4c:f4:c3:2b:c8:e3:37:5c:2d:58:af:86:
b3:f4:84:9d:c4:0d:12:8f:1a:42:79:cc:ce:66:3d:3b:45:dc:
cd:57:8d:6d:07:7b:41:1c:f9:ff:ad:c7:3f:66:a5:51:1b:ba:
e0:0b:1e:84:b8:56:19:68:20:8c:a9:76:cb:a6:11:40:27:aa:
43:30:00:e1:e7:46:1a:2d:82:d0:2c:bc:08:78:c8:ce:c6:70:
80:a6:ec:a8:d0:d7:ea:db:e6:eb:57:97:1c:07:73:f3:36:47:
df:ca:6e:08:38:59:e7:94:8b:64:1e:18:e9:6d:8b:b1:51:cb:
78:2c:11:0d:20:19:58:10:c0:de:21:ce:33:44:e3:84:d6:a8:
fc:be:b4:5f:8f:11:e5:fb:df:d8:c2:0a:58:04:ce:9c:71:e3:
98:18:08:0b:e0:ad:6f:7a:46:68:f9:d0:c4:52:09:ec:0a:71:
cf:07:39:7a
-----BEGIN CERTIFICATE-----
MIIHVTCCBj2gAwIBAgIUAQ0Mn0MoWE6nk8Vsel2JAQ+waoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4
MjIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmE4ZTkyYTEtYzliZS00MjA4LWFkOGYtYzljOWU4YmJlZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkckQIaw+qxjO8Z0r2tYC50krklBv8BHDjCSt
ZmKC5MkANR5S+NsPDOLkZC/HCig8g2OeDgqjfYo3ORxcoVgwLGo0saQAmdz27Nk6
zm5FVqA+86gDMKCaYrlrLYP6Zzb8rsvW0BCBGdUAS5KW04VQRjprQPddYO5DBxL+
wmXTqQRErPLHouVT4+lIWuMXOgllk3txJe7kQjx2/NOjrp+KuLYSAkFRQUk3dYT5
utzNRo7H7BnQpkhuIWFvtACJ2Uq5gWY011YMkBSCpK1fCdJ6L6SQvK5kfa/2jiWN
6YSHge9tPic1adPLPBQykYYGt/4FrSTO/Jf8G5rBrn1kky3buQIDAQABo4IEZzCC
BGMwHQYDVR0OBBYEFKIwUaamwr0wItVqFEM4IR7hMRABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0
MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvY2I5MGM4MDUtYTlhYi0z
YmRkLWFmZGMtMGEwMjY4NTFkYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0
NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh
ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0
MjQ5YTgyMjIuY2VyMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB/QQCAAEwgfYD
BABFq+8DBABFq/oDBABFq/8wDAMEAIGGGQMEAYGGHAMEAIGGfwMEAZ3wAAMEAJ3w
AwMEAJ3wBTAMAwQAnfAHAwQBnfAIMAwDBACd8AsDBAGd8BADBACd8BMwDAMEAZ3w
FgMEAp3wGDAMAwQAnfAdAwQFnfAAAwQAnfDAMAwDBACd8MMDBAGd8MwwDAMEAJ3w
zwMEAJ3w1DAMAwQBnfDWAwQAnfDaMAwDBACd8N0DBAKd8OADBACd8OUDBACd8Ocw
DAMEAJ3w6QMEBJ3w4DAMAwQAnfDxAwQBnfD0AwQAnfD3AwQAnfD5MAwDBACd8PsD
BACd8P4wGAQCAAIwEgMHACYgAAAc+gMHACYgAAAc/zBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtoq2noiJN
mC7swv0piHw/myYSF9lLu3Zlgv5+SfiKYMrMC493X0ll8H/r4IVzHxayD0UgByAm
Zxh/rN7wvhq6GDhs47a44OLHnDrVTkJM9MMryOM3XC1Yr4az9ISdxA0SjxpCeczO
Zj07RdzNV41tB3tBHPn/rcc/ZqVRG7rgCx6EuFYZaCCMqXbLphFAJ6pDMADh50Ya
LYLQLLwIeMjOxnCApuyo0Nfq2+brV5ccB3PzNkffym4IOFnnlItkHhjpbYuxUct4
LBENIBlYEMDeIc4zROOE1qj8vrRfjxHl+9/YwgpYBM6cceOYGAgL4K1vekZo+dDE
UgnsCnHPBzl6
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:42 2026 by rpki-client