This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a12f5a20-4630-3449-b490-92e7eed140c1.roa
File:                     a12f5a20-4630-3449-b490-92e7eed140c1.roa (raw, json)
Hash identifier:          tGVK8KJl46Nd9pu2JK9ocWTmS4HkP760S1eOoTR7Y5M=
Subject key identifier:   EE:2B:31:D0:F9:62:8F:37:C0:B3:C4:15:A2:73:C6:8A:9E:31:D1:9F
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584C470BC2CF23F57F6B3BAFBB80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a12f5a20-4630-3449-b490-92e7eed140c1.roa
Signing time:             Tue 23 Dec 2025 02:00:31 +0000
ROA not before:           Tue 23 Dec 2025 02:00:31 +0000
ROA not after:            Mon 23 Mar 2026 01:00:31 +0000
asID:                     834
IP address blocks:        72.14.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:0b:c2:cf:23:f5:7f:6b:3b:af:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Dec 23 02:00:31 2025 GMT
            Not After : Mar 23 01:00:31 2026 GMT
        Subject: CN=a2a48340-ddbc-4628-ac05-4547a1215abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:2b:06:ee:0e:8e:f9:bf:3e:f8:71:3c:7c:
                    1f:01:54:58:a9:1f:3b:59:56:ed:96:98:53:e3:06:
                    3b:2d:05:c4:5a:fe:40:59:40:48:ea:f6:4b:e6:b5:
                    9c:ec:75:9c:dc:8e:9a:b3:56:fa:ee:93:32:9e:76:
                    96:89:77:cd:cc:53:71:3c:23:3d:63:6a:40:62:c5:
                    17:2f:ca:99:59:49:f2:1e:35:5e:76:8d:1d:6f:3b:
                    51:0f:7a:b4:2d:72:7b:01:0d:b0:5c:41:ef:fc:70:
                    b6:d8:07:b4:68:09:de:a9:89:f3:3c:a5:ee:4c:47:
                    f4:79:87:c7:41:65:99:26:ea:7d:3d:a1:0f:c4:34:
                    81:31:17:16:8f:40:71:e6:fe:8e:3b:c2:5b:18:e2:
                    24:9e:ca:0e:88:b2:0e:2e:04:d6:c5:88:6d:5c:3d:
                    b6:9a:42:48:6e:31:be:57:96:4d:da:0e:4b:5c:85:
                    df:09:6b:76:37:fe:11:37:c6:ab:bd:96:5e:20:9f:
                    17:72:cb:42:5c:ac:ef:9c:ee:f9:75:f1:66:fe:88:
                    c2:49:a9:3e:51:2a:3f:2c:e2:e0:36:ab:ae:51:17:
                    33:bc:07:95:71:c3:0c:53:ee:1c:74:8c:f4:6e:25:
                    f3:6a:45:cd:fe:fb:83:f2:ad:11:52:2f:b9:37:ec:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:31:D0:F9:62:8F:37:C0:B3:C4:15:A2:73:C6:8A:9E:31:D1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a12f5a20-4630-3449-b490-92e7eed140c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:74:a9:85:1f:3e:19:bc:7f:be:fd:ed:c4:9a:47:28:a1:04:
         07:dd:fc:b1:57:82:b6:ff:4b:63:c4:df:22:11:c5:65:a7:67:
         1e:46:90:c7:9c:ef:49:c8:16:12:45:80:8d:ba:6e:58:3a:e2:
         b1:d2:9b:19:fc:5a:8e:da:c3:7c:4c:c7:38:75:c0:a5:1b:52:
         dd:4d:fe:e3:57:49:e1:d5:00:4b:80:a4:b7:89:2c:11:bd:85:
         ae:46:39:db:8b:48:dc:50:b5:72:c6:01:4e:2f:33:59:e0:21:
         55:b3:18:47:22:c9:a6:08:42:15:84:72:bb:4f:c7:72:fb:1c:
         80:63:9d:53:d9:85:e8:ef:e9:7e:09:97:a4:26:5d:0d:11:be:
         a6:d4:f4:22:ab:92:78:86:e1:7e:54:2a:85:49:7c:c8:f4:bf:
         b0:71:33:71:19:65:5c:4b:0c:d3:e1:65:c7:d2:bd:ca:a8:74:
         8d:ca:bc:d1:c2:95:37:91:0d:e7:5b:7e:37:37:b7:7a:ad:ae:
         bc:46:15:64:bb:95:c6:2d:0a:9e:b0:a5:ce:11:1d:77:93:2d:
         88:7b:e4:89:63:0b:0c:26:f0:c6:2e:cb:7e:74:0e:cb:68:bc:
         91:76:28:30:ca:ee:5d:c2:b6:9d:a8:1d:d9:77:60:58:49:e2:
         cd:da:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:03:57 2026 by rpki-client