This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa
File:                     27ad11b4-e211-3ca4-a206-bd00c733729c.roa (raw, json)
Hash identifier:          bJqmlLELtLQcFft5bu54/lW2DUhDy/E52Rmab+fLgdM=
Subject key identifier:   35:13:7B:81:4A:AB:06:5E:67:19:1D:60:8E:EF:EB:32:D6:42:C7:DF
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584C9536D2439866AE53E18FB700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     213802
IP address blocks:        128.241.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:36:d2:43:98:66:ae:53:e1:8f:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=9ca788eb-d48a-4f7b-8164-a85127ef0a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:a5:2f:98:58:d3:75:df:0f:4d:e0:35:a0:
                    1f:ec:d7:ca:57:87:f3:70:9d:23:2e:8e:90:4d:1c:
                    e0:36:fa:21:60:48:45:0a:69:5d:43:8c:37:70:55:
                    b4:0d:a2:27:af:41:49:83:8d:bd:62:7b:69:2b:de:
                    43:8f:43:88:8a:68:08:f2:df:58:98:1d:7c:15:cd:
                    4e:da:ef:eb:bd:2e:aa:57:45:13:44:6d:ec:b8:9b:
                    5e:d6:0a:6b:2e:7b:55:dd:a8:72:09:3f:5e:d4:21:
                    74:13:c9:dd:9d:45:85:f7:6d:ca:9d:cc:7f:f0:24:
                    cd:43:78:be:99:7c:6f:dc:7c:0a:d9:73:87:56:f1:
                    48:46:26:c0:c9:b0:96:43:6b:a1:df:6b:c0:38:51:
                    79:50:36:27:80:1c:5f:5c:8e:ee:6c:af:56:84:f3:
                    b9:82:10:e6:b6:12:46:a4:73:74:92:b5:22:74:5e:
                    8c:f1:2f:05:ac:29:19:d3:fe:75:90:23:1b:86:34:
                    db:de:40:5d:05:6e:fc:08:19:0f:ef:13:de:80:43:
                    e8:09:9d:4b:c5:07:d8:96:1f:52:03:5d:86:a4:32:
                    59:59:16:d8:77:0b:c2:24:88:09:2a:fd:29:a0:cc:
                    13:f6:a1:86:ac:33:ff:47:f7:9a:ce:14:10:2d:81:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:13:7B:81:4A:AB:06:5E:67:19:1D:60:8E:EF:EB:32:D6:42:C7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0b:50:e3:e7:dd:19:b3:18:16:46:56:c8:80:77:91:bb:8b:
         f5:84:d0:71:b6:1f:e9:16:a9:11:d1:a1:b3:89:a2:b1:3f:72:
         33:6a:ba:1e:5b:f0:74:f3:7e:6d:56:9e:5a:8e:5e:6e:9d:e0:
         16:69:a0:64:22:e0:7e:3f:89:16:95:71:65:96:bd:7a:62:77:
         ac:8e:f8:16:6a:31:81:ba:9b:d1:96:5d:ee:e2:8c:5c:d5:1b:
         33:26:d1:61:f3:a6:48:da:47:43:d1:3c:51:02:bf:f8:12:f5:
         45:e2:5b:d2:e9:43:be:fc:3b:cd:67:4b:0d:37:a2:ee:4b:79:
         42:f3:5f:af:9f:e0:4f:02:fb:92:84:ec:43:03:cd:ab:e1:ef:
         b1:e4:df:8d:e0:9b:4b:44:f8:a6:50:c1:33:cf:67:38:83:ad:
         02:4a:bb:7b:99:4f:9f:a4:d2:fc:87:16:fe:0b:3e:6a:80:a7:
         c2:96:a7:10:43:5c:df:bd:70:90:28:25:d7:17:aa:e8:36:a4:
         53:bb:cf:f7:de:f8:0d:6a:27:f9:7d:97:02:9a:16:cc:fc:6f:
         07:79:00:41:f9:bc:b6:2b:2e:84:80:6c:9b:fb:4b:dc:f0:fd:
         d1:80:53:15:98:85:1b:73:bf:20:40:ad:69:d9:25:1d:cf:b6:
         4a:38:91:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNtJDmGauU+GPtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk
OWNhNzg4ZWItZDQ4YS00ZjdiLTgxNjQtYTg1MTI3ZWYwYTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OGlL5hY03XfD03gNaAf7NfKV4fzcJ0jLo6Q
TRzgNvohYEhFCmldQ4w3cFW0DaInr0FJg429YntpK95Dj0OIimgI8t9YmB18Fc1O
2u/rvS6qV0UTRG3suJte1gprLntV3ahyCT9e1CF0E8ndnUWF923Kncx/8CTNQ3i+
mXxv3HwK2XOHVvFIRibAybCWQ2uh32vAOFF5UDYngBxfXI7ubK9WhPO5ghDmthJG
pHN0krUidF6M8S8FrCkZ0/51kCMbhjTb3kBdBW78CBkP7xPegEPoCZ1LxQfYlh9S
A12GpDJZWRbYdwvCJIgJKv0poMwT9qGGrDP/R/eazhQQLYEubQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUTe4FKqwZeZxkdYI7v6zLWQsffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjdhZDExYjQtZTIxMS0z
Y2E0LWEyMDYtYmQwMGM3MzM3MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgPHcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALMLUOPn3RmzGBZGVsiAd5G7i/WE0HG2H+kWqRHRobOJorE/cjNquh5b
8HTzfm1WnlqOXm6d4BZpoGQi4H4/iRaVcWWWvXpid6yO+BZqMYG6m9GWXe7ijFzV
GzMm0WHzpkjaR0PRPFECv/gS9UXiW9LpQ778O81nSw03ou5LeULzX6+f4E8C+5KE
7EMDzavh77Hk343gm0tE+KZQwTPPZziDrQJKu3uZT5+k0vyHFv4LPmqAp8KWpxBD
XN+9cJAoJdcXqug2pFO7z/fe+A1qJ/l9lwKaFsz8bwd5AEH5vLYrLoSAbJv7S9zw
/dGAUxWYhRtzvyBArWnZJR3Ptko4kdE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 01:18:13 2026 by rpki-client