This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa
File:                     3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa (raw, json)
Hash identifier:          WlsGG/U2pmAEYDc2QF8DZghXBg36vc6x1uPpO/IhGzY=
Subject key identifier:   43:42:1E:46:20:96:4B:9B:03:B3:61:70:FB:92:E9:C4:7B:33:3F:E3
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584C61914B523784F06C4A2BD030
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     14061
IP address blocks:        198.232.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:4b:52:37:84:f0:6c:4a:2b:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=4ad2ff0a-54c2-4f35-9058-59bcef099c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:93:20:39:fa:b4:6d:53:4c:4c:e7:17:b2:
                    a6:ae:26:e8:97:91:78:5f:c4:ea:cc:2d:1b:4f:38:
                    f1:4d:70:ed:68:c6:d1:f7:1c:ed:1a:7b:30:c7:f0:
                    50:d3:f9:20:2d:13:32:ef:f5:20:a1:03:d5:e5:dc:
                    a2:8f:90:83:1e:1f:ee:fd:2e:e8:85:69:57:7e:6c:
                    93:52:54:17:6b:39:86:94:ab:d2:d8:ef:4f:18:46:
                    0c:40:2f:9a:fa:5e:ae:51:51:7c:18:e7:d3:a1:46:
                    e7:79:d9:11:76:06:f7:ed:fd:a6:68:c6:0f:2c:93:
                    e8:e3:78:34:a5:21:2f:f7:ff:75:7b:06:c5:5e:e1:
                    d5:fe:c0:e2:54:0e:3d:1c:e3:61:a0:b6:b6:34:9b:
                    17:8e:71:79:76:5b:e8:db:65:70:fb:49:fd:20:e3:
                    f1:9e:51:29:22:cc:d4:5d:53:3b:28:09:1e:23:7b:
                    5c:32:07:c0:8f:cf:e8:1c:57:96:14:b4:02:a3:8d:
                    0a:42:16:45:3b:a9:5c:7f:9f:cb:f5:53:a2:d8:49:
                    c5:1a:0d:f0:ed:c5:94:d5:4d:21:5e:94:e3:a7:57:
                    6a:c5:e6:06:f7:14:9b:ee:7d:d6:99:4c:d7:b6:b0:
                    c7:83:96:92:4d:e7:98:d1:5a:23:e2:11:c8:e0:0e:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:42:1E:46:20:96:4B:9B:03:B3:61:70:FB:92:E9:C4:7B:33:3F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.232.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:50:bd:06:b7:23:98:c2:6d:5f:b0:5b:be:43:a0:f6:c8:db:
         c3:f2:88:c3:a2:50:eb:cc:b7:f0:21:3a:dd:01:aa:2f:fe:df:
         8f:d5:f5:0c:3b:75:c0:14:6b:71:0c:57:0a:d1:84:45:a3:4a:
         d6:0b:1d:d6:b5:ed:54:15:db:1d:21:00:63:11:25:18:b4:ff:
         e9:91:47:a9:20:0a:f3:0e:8c:e1:77:c3:73:de:b8:a1:64:6e:
         a8:68:5c:45:0d:c0:92:4b:e5:73:43:32:a9:88:f7:a2:56:8d:
         70:e2:18:7e:ba:b1:cc:de:49:6c:be:89:61:e7:a7:f8:43:21:
         49:9e:a8:6c:28:62:23:00:69:da:5b:de:86:06:bf:43:c1:2e:
         c8:68:e4:42:c2:a4:55:83:17:37:c2:7d:b9:03:89:0e:b9:46:
         02:c8:8a:cb:bd:f8:0b:ee:d0:09:3b:8c:dc:87:a0:9e:79:ab:
         e4:70:13:41:24:41:8d:c3:bf:a5:94:ee:af:1f:96:1a:ac:bc:
         17:af:04:5c:d3:25:90:de:0c:6c:eb:cf:75:a0:a0:7b:76:41:
         69:20:71:8a:2b:ce:cd:f8:20:10:b8:bf:24:7f:da:cc:6e:ef:
         44:51:bc:60:fe:bf:91:81:0a:12:4f:76:f9:fa:3f:c1:6d:39:
         8a:cd:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:46:05 2026 by rpki-client