This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa
File:                     4f87b28e-b073-3165-93da-edbf13ef0a9d.roa (raw, json)
Hash identifier:          w09T6zWAMp4kj0r46K3eDMqENLRDonZ/cchv+eDKleU=
Subject key identifier:   2A:C0:DD:78:DE:7D:E0:21:C3:FC:0F:ED:15:F4:FA:17:C8:19:20:F2
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584C794C0A853025225FE1064880
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     202
IP address blocks:        20.134.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:0a:85:30:25:22:5f:e1:06:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=616f62e8-f237-4f0d-a65e-6438f7fac4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:c5:10:2b:e8:91:8c:65:68:fa:7a:73:87:
                    6f:3f:91:a0:20:6e:9a:c2:8b:b3:1a:5d:14:bb:9f:
                    d7:0c:99:d5:ae:f7:9d:b1:92:00:42:e9:21:2d:70:
                    8c:ff:30:3d:a0:bb:4a:a6:b6:08:80:ae:ef:8a:be:
                    f1:10:7f:60:b0:db:36:27:cb:b4:63:ef:70:4d:60:
                    fd:8b:22:c4:fc:29:27:d2:5f:3d:1a:cc:be:58:3b:
                    cf:30:67:e4:97:30:5d:d3:0e:ec:e7:ce:95:fd:70:
                    4b:2c:4c:84:25:40:85:a5:f2:3f:10:fd:97:3a:3f:
                    80:7d:bc:2d:58:f2:08:68:13:75:54:fe:f0:eb:8d:
                    45:c6:9c:29:98:7e:2d:0d:a3:e8:6b:98:a8:96:ac:
                    bc:08:f6:c9:b6:06:0d:88:93:7b:7b:2d:be:6e:6d:
                    c7:96:07:1c:af:e3:80:33:24:40:95:d4:b3:d8:c6:
                    f9:70:8f:ae:ee:97:01:05:9f:ac:62:2b:f8:62:83:
                    62:dc:b9:c8:99:5a:82:4b:73:8a:d6:d8:33:1e:cf:
                    b7:45:a5:1c:10:29:10:a5:ea:04:3d:b0:7c:ce:3b:
                    cf:3c:99:d3:96:7d:79:16:91:1d:36:9b:9f:87:9b:
                    ff:7c:81:19:3a:24:9d:a7:b5:c7:40:37:6c:21:ef:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C0:DD:78:DE:7D:E0:21:C3:FC:0F:ED:15:F4:FA:17:C8:19:20:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:86:12:a2:01:b6:36:64:2c:de:b0:69:2c:b8:af:5a:5d:93:
         41:20:d2:19:af:22:94:3b:29:51:0e:c1:13:fd:cf:09:ea:5f:
         3d:5f:44:75:5b:40:bd:fa:dc:29:e7:66:7f:d9:d4:47:0c:91:
         66:9d:59:f4:86:ca:3a:e6:fa:2b:a1:f4:be:cc:08:f6:8e:88:
         64:0a:23:8e:2f:41:34:ec:61:03:aa:fb:72:36:32:fd:1b:35:
         ec:52:2d:80:90:65:5e:c8:ce:e0:33:4f:c9:06:84:2d:77:ee:
         8a:17:9d:f3:18:8e:6d:db:af:5a:ab:d6:33:c8:82:61:5d:cc:
         12:ad:01:37:e4:12:f3:40:b3:cb:70:c9:65:5d:fc:2b:3c:d0:
         62:fa:24:40:f6:91:d4:1a:35:de:6c:69:7d:6a:24:b5:58:1e:
         66:95:20:c5:f7:5e:8b:92:6b:96:9a:6f:d6:ce:46:0c:14:86:
         97:a8:5a:b7:f2:9e:5d:85:6e:ca:c8:74:dd:09:27:99:5d:d3:
         7b:dd:56:77:dc:09:3e:29:82:01:aa:d3:1e:e8:7d:05:15:ae:
         96:90:48:fb:24:8e:53:e0:f5:3c:fb:57:64:b8:eb:1d:85:79:
         8f:96:6a:c2:e3:64:7d:a9:a0:18:c3:c6:bb:a2:15:a3:18:03:
         f7:87:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:19 2026 by rpki-client