Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa
File: cb90c805-a9ab-3bdd-afdc-0a026851da93.roa (raw, json)
Hash identifier: 0W2uRUbzdbsvUEGKHNkvjULu8SwwDiYDWnPlIHCk/eU=
Subject key identifier: AC:83:21:54:10:F2:B7:3B:7B:EF:5F:24:8C:46:2B:2C:C8:1E:92:9F
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584F497C5057D23A0A4F484310E0
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 32934
IP address blocks: 69.171.239.0/24 maxlen: 24
69.171.250.0/24 maxlen: 24
69.171.255.0/24 maxlen: 24
129.134.25.0/24 maxlen: 24
129.134.26.0/24 maxlen: 24
129.134.27.0/24 maxlen: 24
129.134.28.0/24 maxlen: 24
129.134.29.0/24 maxlen: 24
129.134.127.0/24 maxlen: 24
157.240.0.0/24 maxlen: 24
157.240.1.0/24 maxlen: 24
157.240.3.0/24 maxlen: 24
157.240.5.0/24 maxlen: 24
157.240.7.0/24 maxlen: 24
157.240.8.0/24 maxlen: 24
157.240.9.0/24 maxlen: 24
157.240.11.0/24 maxlen: 24
157.240.12.0/24 maxlen: 24
157.240.13.0/24 maxlen: 24
157.240.14.0/24 maxlen: 24
157.240.15.0/24 maxlen: 24
157.240.16.0/24 maxlen: 24
157.240.17.0/24 maxlen: 24
157.240.19.0/24 maxlen: 24
157.240.22.0/24 maxlen: 24
157.240.23.0/24 maxlen: 24
157.240.24.0/24 maxlen: 24
157.240.25.0/24 maxlen: 24
157.240.26.0/24 maxlen: 24
157.240.27.0/24 maxlen: 24
157.240.29.0/24 maxlen: 24
157.240.30.0/24 maxlen: 24
157.240.31.0/24 maxlen: 24
157.240.192.0/24 maxlen: 24
157.240.195.0/24 maxlen: 24
157.240.196.0/24 maxlen: 24
157.240.197.0/24 maxlen: 24
157.240.198.0/24 maxlen: 24
157.240.199.0/24 maxlen: 24
157.240.200.0/24 maxlen: 24
157.240.201.0/24 maxlen: 24
157.240.202.0/24 maxlen: 24
157.240.203.0/24 maxlen: 24
157.240.204.0/24 maxlen: 24
157.240.205.0/24 maxlen: 24
157.240.207.0/24 maxlen: 24
157.240.208.0/24 maxlen: 24
157.240.209.0/24 maxlen: 24
157.240.210.0/24 maxlen: 24
157.240.211.0/24 maxlen: 24
157.240.212.0/24 maxlen: 24
157.240.214.0/24 maxlen: 24
157.240.215.0/24 maxlen: 24
157.240.216.0/24 maxlen: 24
157.240.217.0/24 maxlen: 24
157.240.218.0/24 maxlen: 24
157.240.221.0/24 maxlen: 24
157.240.222.0/24 maxlen: 24
157.240.223.0/24 maxlen: 24
157.240.224.0/24 maxlen: 24
157.240.225.0/24 maxlen: 24
157.240.226.0/24 maxlen: 24
157.240.227.0/24 maxlen: 24
157.240.229.0/24 maxlen: 24
157.240.231.0/24 maxlen: 24
157.240.233.0/24 maxlen: 24
157.240.234.0/24 maxlen: 24
157.240.235.0/24 maxlen: 24
157.240.236.0/24 maxlen: 24
157.240.237.0/24 maxlen: 24
157.240.238.0/24 maxlen: 24
157.240.239.0/24 maxlen: 24
157.240.241.0/24 maxlen: 24
157.240.242.0/24 maxlen: 24
157.240.243.0/24 maxlen: 24
157.240.244.0/24 maxlen: 24
157.240.245.0/24 maxlen: 24
157.240.247.0/24 maxlen: 24
157.240.249.0/24 maxlen: 24
157.240.251.0/24 maxlen: 24
157.240.252.0/24 maxlen: 24
157.240.253.0/24 maxlen: 24
157.240.254.0/24 maxlen: 24
2620:0:1cfa::/48 maxlen: 48
2620:0:1cff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:50:57:d2:3a:0a:4f:48:43:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7fc64b58-4f39-48e3-814d-6d9922f3d964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:81:00:f1:ef:96:e3:1c:da:ec:1c:c8:ed:
f2:73:a3:81:31:60:5a:cd:07:09:22:6b:2b:0c:ca:
8a:2e:5b:24:65:17:46:9b:a4:d3:25:f1:5f:2d:33:
97:92:2d:f9:e4:5a:cd:2a:6d:b2:6c:47:56:14:65:
1f:4a:be:7e:55:df:c1:15:4c:39:94:4b:a1:94:13:
d2:76:41:e3:72:f2:aa:1f:75:bd:06:b4:13:0a:a6:
f3:b9:b3:38:13:88:91:14:fd:20:5e:fb:f3:a0:40:
c0:a9:0d:87:5c:36:0c:b9:ed:3b:93:56:b6:8c:65:
bc:7f:74:6b:93:b0:26:eb:8b:e1:85:a1:3e:0d:75:
97:44:c3:7f:78:37:5a:00:d7:10:4b:b0:87:da:b6:
cd:97:db:f8:39:ce:3d:8a:81:f5:22:d1:91:c9:c8:
04:99:5a:96:74:ed:c0:bc:1a:eb:58:ed:bf:75:cb:
a4:28:ad:05:33:22:1f:8d:ff:61:83:16:35:bc:06:
d3:78:24:92:80:0e:f3:74:af:39:48:43:50:38:d3:
fb:41:7e:b3:67:98:90:dc:d1:d2:6c:0e:70:d9:da:
8b:7b:95:7a:53:0c:13:d9:2b:e9:58:68:d9:b3:68:
c8:f1:95:17:8e:e2:69:06:f7:4d:08:61:87:09:c1:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:83:21:54:10:F2:B7:3B:7B:EF:5F:24:8C:46:2B:2C:C8:1E:92:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
69.171.239.0/24
69.171.250.0/24
69.171.255.0/24
129.134.25.0-129.134.29.255
129.134.127.0/24
157.240.0.0/23
157.240.3.0/24
157.240.5.0/24
157.240.7.0-157.240.9.255
157.240.11.0-157.240.17.255
157.240.19.0/24
157.240.22.0-157.240.27.255
157.240.29.0-157.240.31.255
157.240.192.0/24
157.240.195.0-157.240.205.255
157.240.207.0-157.240.212.255
157.240.214.0-157.240.218.255
157.240.221.0-157.240.227.255
157.240.229.0/24
157.240.231.0/24
157.240.233.0-157.240.239.255
157.240.241.0-157.240.245.255
157.240.247.0/24
157.240.249.0/24
157.240.251.0-157.240.254.255
IPv6:
2620:0:1cfa::/48
2620:0:1cff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:56:36:25:89:ba:5c:a4:50:e0:af:e8:32:8c:8f:21:0e:a1:
6c:a7:8d:ff:01:72:f6:62:c4:87:c2:3f:e5:3c:dd:e8:8e:5d:
2f:14:29:f7:59:31:13:93:df:71:27:29:da:dc:a8:0e:f5:9b:
95:d8:f3:d7:01:58:8c:68:fd:1d:0d:27:46:8c:72:42:a9:af:
b1:74:56:b9:66:cc:64:25:73:5b:b7:db:82:32:26:87:c1:70:
07:fd:06:8e:59:b7:ce:0e:37:98:50:48:56:da:53:f5:ae:56:
60:57:1e:9d:41:04:ee:2d:f8:52:34:9d:68:72:f5:4f:62:7a:
a7:c7:cd:40:2b:09:1d:35:a3:a2:17:8c:5b:4a:a1:33:f5:68:
8c:a9:8c:49:ba:18:96:2a:94:e5:b4:b5:7e:21:bf:fb:a3:cd:
53:69:07:9b:40:ad:b3:79:fa:37:09:bb:2a:86:cb:02:9a:36:
26:2c:0a:bb:29:97:8f:32:a1:d5:82:0e:61:f7:85:ee:6e:96:
f0:68:cc:63:db:35:1f:5a:5f:71:96:73:c1:01:54:fb:61:d7:
a5:c2:4f:cb:dd:cd:5d:8e:e1:00:82:7d:c3:63:26:a0:14:82:
8b:a0:f2:65:95:10:a6:33:14:71:ad:2c:bd:b9:8b:ac:45:1b:
b7:b8:7a:42
-----BEGIN CERTIFICATE-----
MIIHVTCCBj2gAwIBAgIUAQ0Mn0MoWE9JfFBX0joKT0hDEOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4
MjIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
N2ZjNjRiNTgtNGYzOS00OGUzLTgxNGQtNmQ5OTIyZjNkOTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP2BAPHvluMc2uwcyO3yc6OBMWBazQcJImsr
DMqKLlskZRdGm6TTJfFfLTOXki355FrNKm2ybEdWFGUfSr5+Vd/BFUw5lEuhlBPS
dkHjcvKqH3W9BrQTCqbzubM4E4iRFP0gXvvzoEDAqQ2HXDYMue07k1a2jGW8f3Rr
k7Am64vhhaE+DXWXRMN/eDdaANcQS7CH2rbNl9v4Oc49ioH1ItGRycgEmVqWdO3A
vBrrWO2/dcukKK0FMyIfjf9hgxY1vAbTeCSSgA7zdK85SENQONP7QX6zZ5iQ3NHS
bA5w2dqLe5V6UwwT2SvpWGjZs2jI8ZUXjuJpBvdNCGGHCcEsCwIDAQABo4IEZzCC
BGMwHQYDVR0OBBYEFKyDIVQQ8rc7e+9fJIxGKyzIHpKfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0
MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvY2I5MGM4MDUtYTlhYi0z
YmRkLWFmZGMtMGEwMjY4NTFkYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0
NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh
ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0
MjQ5YTgyMjIuY2VyMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB/QQCAAEwgfYD
BABFq+8DBABFq/oDBABFq/8wDAMEAIGGGQMEAYGGHAMEAIGGfwMEAZ3wAAMEAJ3w
AwMEAJ3wBTAMAwQAnfAHAwQBnfAIMAwDBACd8AsDBAGd8BADBACd8BMwDAMEAZ3w
FgMEAp3wGDAMAwQAnfAdAwQFnfAAAwQAnfDAMAwDBACd8MMDBAGd8MwwDAMEAJ3w
zwMEAJ3w1DAMAwQBnfDWAwQAnfDaMAwDBACd8N0DBAKd8OADBACd8OUDBACd8Ocw
DAMEAJ3w6QMEBJ3w4DAMAwQAnfDxAwQBnfD0AwQAnfD3AwQAnfD5MAwDBACd8PsD
BACd8P4wGAQCAAIwEgMHACYgAAAc+gMHACYgAAAc/zBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3VjYlibpc
pFDgr+gyjI8hDqFsp43/AXL2YsSHwj/lPN3ojl0vFCn3WTETk99xJyna3KgO9ZuV
2PPXAViMaP0dDSdGjHJCqa+xdFa5ZsxkJXNbt9uCMiaHwXAH/QaOWbfODjeYUEhW
2lP1rlZgVx6dQQTuLfhSNJ1ocvVPYnqnx81AKwkdNaOiF4xbSqEz9WiMqYxJuhiW
KpTltLV+Ib/7o81TaQebQK2zefo3CbsqhssCmjYmLAq7KZePMqHVgg5h94Xubpbw
aMxj2zUfWl9xlnPBAVT7Ydelwk/L3c1djuEAgn3DYyagFIKLoPJllRCmMxRxrSy9
uYusRRu3uHpC
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:34:08 2026 by rpki-client