This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa
File:                     aefb5437-6034-3391-9329-ca5ca351ea5d.roa (raw, json)
Hash identifier:          mH4TUkV55QZLJ9PkmMclV5+9rHBIz2h2CiPTZORyVbQ=
Subject key identifier:   EA:92:53:C7:1D:90:36:71:FA:0F:7E:35:DA:6D:B6:F1:79:B2:A6:EB
Certificate issuer:       /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
Certificate serial:       010D0C9F4328584C794C37FA7B3FE67D5DEDB280
Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     3737
IP address blocks:        66.152.128.0/19 maxlen: 24
                          207.44.0.0/17 maxlen: 24
                          216.144.160.0/19 maxlen: 24
                          2606:9400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:37:fa:7b:3f:e6:7d:5d:ed:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=57a38eda-f985-4105-8efb-b5a259936915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b3:ac:44:1f:ad:3b:96:db:72:52:0e:9a:cb:
                    41:5c:f1:fc:09:e2:0f:c5:3f:bf:2b:12:6b:39:37:
                    2b:6c:46:6e:8b:72:ec:f0:35:9d:f2:7b:f0:38:80:
                    34:24:17:55:62:ef:80:b3:5d:fc:1a:d8:9d:b6:42:
                    36:d2:c4:99:fc:9f:03:ee:21:1b:7f:ee:f4:4d:b9:
                    29:1b:79:58:36:8e:16:79:c1:19:b9:f7:90:c0:75:
                    f9:74:95:30:81:2d:f4:23:71:8c:22:94:cd:54:16:
                    b7:d3:0a:36:fd:ae:28:bd:7b:d1:c6:03:2e:38:ce:
                    1e:d4:5b:6f:ea:c2:6d:6e:e6:65:5a:53:26:e5:e6:
                    65:32:94:60:08:60:3d:51:61:ab:e6:44:97:47:87:
                    d2:84:4d:6b:6b:97:6b:a9:32:a0:57:3d:8f:b8:cc:
                    4e:0f:02:46:17:ef:73:41:4a:15:04:5c:c0:07:a5:
                    ef:b9:79:21:d5:86:af:d4:fb:f4:c9:95:53:ee:0a:
                    03:cc:62:ae:90:72:ff:ca:64:94:e8:7f:66:e3:14:
                    62:a1:a9:43:12:c3:f1:aa:e0:43:b3:61:8a:ba:e7:
                    b8:55:c2:36:d2:fb:fd:40:bf:e3:89:d3:1c:61:6e:
                    a8:47:76:77:3b:4f:a2:f9:19:8e:bc:e9:22:c4:dc:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:53:C7:1D:90:36:71:FA:0F:7E:35:DA:6D:B6:F1:79:B2:A6:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.128.0/19
                  207.44.0.0/17
                  216.144.160.0/19
                IPv6:
                  2606:9400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:f3:ea:45:8d:a8:06:5a:79:48:22:4b:c5:65:63:82:8f:
         f1:9e:47:38:39:25:31:2e:ac:d8:3b:8b:4c:d7:3a:42:bf:d7:
         76:09:40:7e:68:e6:1e:aa:ea:ed:99:b3:f8:24:5b:4a:1c:7b:
         f4:c8:8c:95:27:40:46:49:3d:78:b7:0a:87:d6:b6:4a:ae:f6:
         88:34:d1:2b:8d:3b:27:c4:5e:eb:12:ea:2b:28:aa:dc:33:a3:
         87:31:24:a5:90:e7:eb:71:68:fa:7b:a4:f3:8b:02:5c:70:f8:
         bf:10:19:35:e1:3f:a2:08:ad:a4:3b:c1:30:08:b2:e5:36:cd:
         5d:a4:98:f2:83:cd:55:af:60:48:8d:c5:c2:4f:21:99:3c:21:
         3f:62:8b:2f:15:bd:25:b6:db:2d:de:15:aa:d5:5d:b0:ca:93:
         d7:23:63:fe:6a:32:6a:65:58:09:66:fa:0d:e0:7e:74:92:7d:
         d1:0c:61:7f:bc:cf:4c:a9:aa:f1:94:84:e2:a6:11:a8:5e:c4:
         a8:1a:38:74:37:df:97:98:4b:a8:52:67:ee:c0:d8:ae:6d:4e:
         94:76:dc:f4:ac:60:31:dc:c6:79:f6:41:84:c7:b9:95:15:27:
         ab:d5:b2:02:4d:a3:e7:bc:a5:0f:ca:03:f4:22:8e:56:e2:e4:
         f7:e3:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:23 2026 by rpki-client