This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/1cb7de5c-e8e3-39df-a140-96aa41bc1f14.roa
File:                     1cb7de5c-e8e3-39df-a140-96aa41bc1f14.roa (raw, json)
Hash identifier:          +489E3q1xTpSbJ+jHWPWFZ4KTjdPkuPsVmm+o95Ico8=
Subject key identifier:   F0:DF:BC:8D:C2:CC:E4:60:F3:B3:5A:FF:F8:29:2B:9E:45:0F:E8:8C
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584C6B569ADB4FAD79E25FAB5A80
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/1cb7de5c-e8e3-39df-a140-96aa41bc1f14.roa
Signing time:             Mon 05 Jan 2026 02:00:31 +0000
ROA not before:           Mon 05 Jan 2026 02:00:31 +0000
ROA not after:            Sun 05 Apr 2026 01:00:31 +0000
asID:                     4181
IP address blocks:        66.220.96.0/19 maxlen: 24
                          67.204.128.0/18 maxlen: 24
                          72.0.160.0/19 maxlen: 24
                          72.35.128.0/19 maxlen: 24
                          204.15.56.0/21 maxlen: 24
                          206.197.131.0/24 maxlen: 24
                          208.100.128.0/18 maxlen: 24
                          216.87.224.0/20 maxlen: 24
                          216.228.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6b:56:9a:db:4f:ad:79:e2:5f:ab:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Jan  5 02:00:31 2026 GMT
            Not After : Apr  5 01:00:31 2026 GMT
        Subject: CN=1e20137f-4b8a-4f60-b9be-f89fc84eacd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:40:69:d4:a1:11:1f:61:f9:bb:a8:28:dc:
                    16:67:46:4f:0a:81:ca:8c:5d:2b:4f:51:e3:cc:1d:
                    72:8b:d3:56:11:0e:76:20:e3:16:05:e0:7d:02:25:
                    88:b3:ef:72:a6:de:1f:f3:f0:55:e2:2a:9f:12:48:
                    02:cc:54:8c:27:4e:5f:88:92:05:fd:64:82:20:f6:
                    48:be:c9:e4:76:2c:93:44:55:d0:59:78:0d:80:82:
                    70:9b:d6:fb:69:f0:cf:c2:31:75:8f:4f:fe:57:81:
                    10:f3:7b:81:39:3b:4c:03:ae:5b:ea:03:a3:ec:1c:
                    b9:3d:73:b3:ce:09:45:1e:4b:56:06:3d:11:eb:63:
                    3f:08:9c:f0:62:d3:0a:45:ca:d7:47:5e:50:92:8c:
                    4f:4e:aa:35:02:95:e1:e0:78:6a:df:6f:cf:06:53:
                    e9:9a:4b:dd:6c:44:c2:69:54:92:c5:27:1d:90:80:
                    eb:e4:45:1a:f6:8c:0f:4e:51:c9:59:99:99:49:ba:
                    e6:ef:1c:7a:34:bb:e6:26:63:47:a0:d7:c8:75:5d:
                    d1:8a:f5:60:58:58:05:65:bc:ea:13:a8:a6:e7:bc:
                    7d:09:8a:5a:2f:ab:26:ca:1a:9e:47:3c:b6:dd:38:
                    6d:ae:01:9e:73:46:5a:eb:f8:91:2e:f5:f3:27:38:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DF:BC:8D:C2:CC:E4:60:F3:B3:5A:FF:F8:29:2B:9E:45:0F:E8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/1cb7de5c-e8e3-39df-a140-96aa41bc1f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.96.0/19
                  67.204.128.0/18
                  72.0.160.0/19
                  72.35.128.0/19
                  204.15.56.0/21
                  206.197.131.0/24
                  208.100.128.0/18
                  216.87.224.0/20
                  216.228.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:52:77:47:5f:63:3a:9c:26:be:dc:0a:c5:7f:d6:c3:84:
         9e:8d:cb:c7:4f:52:75:3e:44:db:9a:7e:86:30:41:cf:01:6f:
         12:10:77:54:bf:a3:fa:6c:a7:28:58:22:48:e5:f9:d6:62:c5:
         b7:cb:04:58:db:69:44:68:83:65:29:ef:fc:26:a0:39:8b:f4:
         d8:37:da:8c:63:84:f7:31:15:0b:47:80:38:40:bb:87:66:23:
         1f:0a:d1:1a:2e:f2:1b:47:ff:0b:39:4e:c6:5e:5a:fc:96:4a:
         c5:ef:8c:3b:8e:34:87:19:19:b8:6d:9a:e9:15:c5:9e:2a:64:
         31:66:cb:67:0f:47:17:9e:04:a0:d5:4c:23:2a:28:fa:df:dc:
         d7:c4:21:8f:50:8d:dd:74:37:61:a7:06:77:0c:59:e6:e2:9b:
         21:69:33:21:dd:dd:5a:12:a3:b3:d7:14:61:cc:9f:12:45:1b:
         88:3b:ac:22:6f:1c:5f:a9:77:3e:e7:03:d4:39:36:6a:c7:30:
         d9:5e:56:e4:ac:a0:7c:5e:ee:f2:1b:72:c2:6e:ba:19:1f:e3:
         f3:c0:43:b1:5c:6b:da:03:6d:f9:7b:12:48:48:24:17:a8:76:
         66:8d:7a:97:39:d3:41:8b:f4:8a:46:03:aa:62:4d:b2:ea:e7:
         8f:00:b7:15
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUAQ0Mn0MoWExrVprbT6154l+rWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk
MWUyMDEzN2YtNGI4YS00ZjYwLWI5YmUtZjg5ZmM4NGVhY2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj59AadShER9h+buoKNwWZ0ZPCoHKjF0rT1Hj
zB1yi9NWEQ52IOMWBeB9AiWIs+9ypt4f8/BV4iqfEkgCzFSMJ05fiJIF/WSCIPZI
vsnkdiyTRFXQWXgNgIJwm9b7afDPwjF1j0/+V4EQ83uBOTtMA65b6gOj7By5PXOz
zglFHktWBj0R62M/CJzwYtMKRcrXR15QkoxPTqo1ApXh4Hhq32/PBlPpmkvdbETC
aVSSxScdkIDr5EUa9owPTlHJWZmZSbrm7xx6NLvmJmNHoNfIdV3RivVgWFgFZbzq
E6im57x9CYpaL6smyhqeRzy23ThtrgGec0Za6/iRLvXzJzjmfQIDAQABo4IDhTCC
A4EwHQYDVR0OBBYEFPDfvI3CzORg87Na//gpK55FD+iMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvMWNiN2RlNWMtZThlMy0z
OWRmLWExNDAtOTZhYTQxYmMxZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQFQtxgAwQG
Q8yAAwQFSACgAwQFSCOAAwQDzA84AwQAzsWDAwQG0GSAAwQE2FfgAwQF2OSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqUUndHX2M6nCa+3ArFf9bDhJ6Ny8dPUnU+RNuafoYwQc8BbxIQd1S/
o/pspyhYIkjl+dZixbfLBFjbaURog2Up7/wmoDmL9Ng32oxjhPcxFQtHgDhAu4dm
Ix8K0Rou8htH/ws5TsZeWvyWSsXvjDuONIcZGbhtmukVxZ4qZDFmy2cPRxeeBKDV
TCMqKPrf3NfEIY9Qjd10N2GnBncMWebimyFpMyHd3VoSo7PXFGHMnxJFG4g7rCJv
HF+pdz7nA9Q5NmrHMNleVuSsoHxe7vIbcsJuuhkf4/PAQ7Fca9oDbfl7EkhIJBeo
dmaNepc500GL9IpGA6piTbLq548AtxU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:17 2026 by rpki-client