This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa
File:                     4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (raw, json)
Hash identifier:          gSeFi4Z7lmEqr91zxzZk7RUKthAiU0HVNTg0mMmZNoo=
Subject key identifier:   CB:51:38:CE:07:F7:9B:E6:0A:86:E8:9A:12:03:3B:6C:BD:DA:92:36
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F4328584C6B5698F2D96DB0F7E74DC600
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa
Signing time:             Mon 05 Jan 2026 02:00:31 +0000
ROA not before:           Mon 05 Jan 2026 02:00:31 +0000
ROA not after:            Sun 05 Apr 2026 01:00:31 +0000
asID:                     715
IP address blocks:        199.120.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6b:56:98:f2:d9:6d:b0:f7:e7:4d:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Jan  5 02:00:31 2026 GMT
            Not After : Apr  5 01:00:31 2026 GMT
        Subject: CN=fbab7583-f610-4012-9502-91157464a42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:db:a2:a2:6d:1e:2f:97:7b:73:f9:fd:14:
                    dc:5e:0b:53:95:f3:58:83:ff:82:bc:54:3a:e1:c1:
                    f3:96:3a:66:28:7c:60:a2:3c:3c:5d:b8:4f:c3:aa:
                    24:f8:1e:e1:85:10:88:a0:9f:37:7d:7c:a8:84:61:
                    de:c5:90:23:7e:87:67:83:a0:25:8e:55:5a:08:5c:
                    1a:fb:52:9f:7f:f7:82:06:f0:33:66:80:be:57:70:
                    b7:0d:f2:b2:72:ed:c3:61:73:21:29:2a:14:5f:a2:
                    fe:e3:f5:ed:9c:51:91:07:24:38:22:81:11:98:f6:
                    b4:4f:a6:4e:6e:ae:5b:e5:78:60:5f:ab:0a:48:e3:
                    1d:53:78:67:21:a1:96:c1:69:58:87:a1:f4:09:51:
                    2d:b1:79:f0:e3:ef:5c:15:19:42:be:d6:af:c5:38:
                    3a:36:28:41:53:ee:9a:5b:73:8b:a5:29:bd:0b:45:
                    06:a8:82:93:fb:64:bf:ca:f6:67:92:bd:72:b3:ba:
                    85:d9:f9:f6:32:00:81:c1:fb:16:08:f2:31:e4:2e:
                    42:c0:45:f2:02:05:e3:f3:f7:3d:c0:af:a0:b9:3d:
                    53:f3:a9:77:ce:88:b1:c9:4e:af:b0:dd:77:5d:ed:
                    fa:5f:93:86:b6:d9:2d:a6:ca:e9:42:20:fd:f8:7a:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:51:38:CE:07:F7:9B:E6:0A:86:E8:9A:12:03:3B:6C:BD:DA:92:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:f6:3d:94:00:f8:70:15:38:ea:d7:28:1f:fa:ba:a0:39:
         3a:30:6f:65:34:4e:45:77:12:f3:7a:3c:c4:23:ea:a5:1e:ca:
         0d:e4:7f:d5:8b:98:83:71:3b:43:06:78:92:53:e9:fb:bd:67:
         24:49:42:83:fd:88:43:0d:7c:3e:db:62:5c:1c:d3:ea:51:e4:
         e2:0f:33:2d:67:dd:cb:04:15:d3:aa:f7:89:e0:a2:84:48:f2:
         95:77:cf:e1:67:42:25:9c:86:4f:69:45:fc:c5:40:4c:de:f7:
         04:54:9e:7e:00:9c:41:e8:b1:c6:1d:58:69:a0:e0:5f:62:ef:
         0a:98:af:15:40:85:04:da:31:69:d3:1f:3d:8d:49:fa:54:03:
         30:2f:2a:bf:ee:10:58:2f:59:14:7b:d9:91:b6:b0:7b:ed:17:
         1e:66:64:72:c8:74:08:44:61:e8:74:f7:95:1a:0b:23:e0:a6:
         8a:d9:5d:06:4c:df:37:03:41:a6:d6:3d:5d:90:0b:e1:68:cc:
         56:30:9b:4e:60:91:65:c9:d2:f1:92:38:b5:01:9c:b6:49:a5:
         2c:a4:ba:08:16:3c:65:27:3d:4a:c8:87:0a:7a:e3:a0:41:e3:
         f7:05:c6:79:51:2e:51:02:c8:d5:aa:67:a4:07:62:c8:99:ab:
         72:08:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:18 2026 by rpki-client