This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa
File:                     38af3611-c3af-3b8b-adcf-6ce71580a04e.roa (raw, json)
Hash identifier:          XAGIhcL6/Ary1ZRpKVfdhPChgJnjfRLlCzeo++LUO+o=
Subject key identifier:   D2:57:33:8B:8F:44:F6:58:22:B1:EF:A9:70:31:CE:5B:92:00:CA:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C751EE1D914A94B16C12BE500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa
Signing time:             Thu 08 Jan 2026 14:00:39 +0000
ROA not before:           Thu 08 Jan 2026 14:00:39 +0000
ROA not after:            Wed 08 Apr 2026 13:00:39 +0000
asID:                     33668
IP address blocks:        68.37.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:1e:e1:d9:14:a9:4b:16:c1:2b:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan  8 14:00:39 2026 GMT
            Not After : Apr  8 13:00:39 2026 GMT
        Subject: CN=94eb9b99-6972-4e10-829b-95ec34e56e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:46:3f:c8:a7:c3:21:58:21:dd:e4:79:6c:
                    c1:bc:9f:76:91:fe:fb:ec:c3:bf:08:e0:4f:83:f7:
                    a9:56:e2:66:1c:6a:5e:4a:0e:e3:c7:a0:1c:b6:5d:
                    5d:bf:03:9c:f6:fe:e2:82:30:76:3a:79:b4:9f:84:
                    78:fd:9a:4e:71:49:7d:0c:be:23:36:c0:5d:a7:d7:
                    a3:02:70:28:70:e5:e0:21:50:7b:c6:84:89:2b:44:
                    79:d6:ac:40:34:78:b1:b5:52:fc:33:0b:c2:a7:2b:
                    af:aa:b6:06:81:d7:d5:de:18:2b:82:03:9f:bf:bb:
                    4b:12:88:9c:b9:fe:4b:c0:c6:e6:92:44:5e:a0:c5:
                    1c:3f:c5:6d:19:5b:99:df:98:7e:60:ea:82:cb:a2:
                    73:b3:b9:4a:b2:ed:fe:41:0e:c6:8e:a9:fb:4f:c4:
                    5d:f3:7a:f0:b2:27:00:eb:6a:30:0b:14:89:13:3d:
                    49:84:f9:7d:d0:1e:bb:30:86:5b:f9:25:56:40:92:
                    0a:41:8e:24:3d:c9:75:9c:3c:fb:32:1d:8c:ed:67:
                    82:e6:f3:1a:58:4b:5e:2c:a6:fe:53:23:ae:15:ab:
                    15:63:29:59:e1:c7:1e:71:4f:7e:f1:f2:67:a9:a2:
                    a2:b0:40:21:9d:1f:10:ae:6e:e6:02:cd:ae:d6:e1:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:33:8B:8F:44:F6:58:22:B1:EF:A9:70:31:CE:5B:92:00:CA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:23:3d:5a:d3:7a:cd:1a:1c:79:00:75:af:ba:95:93:58:f2:
         a0:41:a3:9c:eb:cc:72:1c:40:f7:34:dc:80:a0:8a:d5:80:e3:
         4f:f8:2e:f2:d8:41:58:31:a4:17:05:34:72:a7:9d:37:22:f7:
         be:06:38:dc:87:22:37:d2:52:c1:09:b5:3d:06:9a:fb:f6:ea:
         57:9e:66:43:88:e5:9d:99:2f:90:95:91:1f:45:5b:2c:03:11:
         3e:b0:73:74:f0:d6:85:00:d3:4e:f5:39:9a:40:71:1f:b6:ea:
         0c:b4:77:cd:0b:4a:93:24:b9:d2:66:9c:f4:a9:4b:2f:74:b0:
         62:49:92:ef:00:49:9c:b8:db:7b:2e:70:4d:6b:22:ec:83:aa:
         22:91:3e:51:29:8f:55:53:a4:fc:da:7b:3d:cd:6f:fb:22:ac:
         f0:6d:20:de:70:2c:f1:e2:95:cf:41:88:52:0c:de:cc:3b:65:
         ff:03:17:58:38:0d:18:38:14:43:81:d1:99:f1:a7:4a:37:a6:
         e9:33:dc:ba:fa:ae:a6:ce:b2:84:6d:82:16:17:68:b1:2b:99:
         61:40:98:a2:91:a7:ce:6b:48:24:ae:f2:16:23:32:b1:47:d7:
         0b:c7:19:d7:cc:7a:f5:01:a4:ed:dc:01:89:9c:44:b6:79:b3:
         85:b0:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:42:09 2026 by rpki-client