This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27fe152b-80bf-3449-8cf2-d495e5112149.roa
File:                     27fe152b-80bf-3449-8cf2-d495e5112149.roa (raw, json)
Hash identifier:          tdxA+rQHXSHulBd3EG/kUrL3bbuNiisb92SRcs2xgMs=
Subject key identifier:   E4:A5:0C:30:69:4D:5D:5A:DC:A3:EE:AE:C7:8D:99:6D:07:CC:9D:14
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584C9FA1F77589FF19DCF3712980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27fe152b-80bf-3449-8cf2-d495e5112149.roa
Signing time:             Fri 23 Jan 2026 19:34:30 +0000
ROA not before:           Fri 23 Jan 2026 19:34:30 +0000
ROA not after:            Thu 23 Apr 2026 18:34:30 +0000
asID:                     148996
IP address blocks:        128.121.16.0/23 maxlen: 24
                          128.121.28.0/23 maxlen: 24
                          130.94.204.0/23 maxlen: 24
                          192.204.64.0/20 maxlen: 24
                          198.65.208.0/20 maxlen: 24
                          199.237.96.0/23 maxlen: 24
                          199.237.112.0/20 maxlen: 24
                          204.1.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9f:a1:f7:75:89:ff:19:dc:f3:71:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 23 19:34:30 2026 GMT
            Not After : Apr 23 18:34:30 2026 GMT
        Subject: CN=94c76179-8865-45ac-af6b-4ad2e9fb6f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:f4:eb:64:72:b0:07:62:26:4e:cc:64:cd:
                    76:0f:c4:ac:47:46:72:34:fc:1a:d2:13:7a:fa:d5:
                    c3:51:08:43:01:13:35:64:bd:f9:4c:2f:23:cc:ff:
                    e5:8d:15:cd:e0:6a:01:d5:fe:b2:76:fd:38:20:5f:
                    fb:fe:f1:60:c7:be:0d:29:ac:dd:72:9f:5f:7e:69:
                    72:e0:eb:eb:cd:4e:48:82:52:1f:31:50:d1:dd:bb:
                    eb:19:18:9f:ea:ed:d6:6a:65:7a:29:1c:d4:b0:d4:
                    f4:34:e8:43:30:d9:c5:ef:1d:30:19:7f:db:dc:0e:
                    65:10:19:38:bc:88:c0:43:83:bc:99:e9:de:31:2b:
                    c5:7f:56:f0:d9:c7:cc:19:88:7a:1d:13:f8:fd:88:
                    ba:55:ed:12:f0:8b:f9:31:08:b2:a7:61:ea:36:e0:
                    bc:67:c2:f4:4b:38:56:c5:37:a6:89:32:d4:59:c1:
                    aa:da:61:44:57:c3:e0:95:98:07:b1:c5:29:e6:a2:
                    15:29:b9:7a:35:14:c4:d0:4e:70:e9:37:bc:8c:98:
                    48:cb:e2:ed:df:4e:d7:54:4c:df:b2:a4:06:9b:8e:
                    64:0d:73:41:88:6b:36:ae:0a:df:f5:78:43:b4:5b:
                    6b:cf:1d:9d:3d:2c:e8:a1:c9:ff:aa:58:2c:66:a1:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:0C:30:69:4D:5D:5A:DC:A3:EE:AE:C7:8D:99:6D:07:CC:9D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27fe152b-80bf-3449-8cf2-d495e5112149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.16.0/23
                  128.121.28.0/23
                  130.94.204.0/23
                  192.204.64.0/20
                  198.65.208.0/20
                  199.237.96.0/23
                  199.237.112.0/20
                  204.1.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:05:fc:5b:f3:b6:26:e5:08:e7:05:fb:04:48:f0:d5:c3:fe:
         48:10:33:22:74:a0:d4:58:8a:61:09:17:1c:32:07:83:10:32:
         04:c1:ec:1e:d4:20:29:51:6c:73:9e:34:0e:91:55:9b:6c:b3:
         8f:39:1b:10:ac:e6:92:76:41:88:25:26:63:b7:7f:2d:00:d0:
         fa:85:48:46:91:2a:cf:c4:3e:45:f0:c3:f5:06:07:2c:6f:88:
         a4:45:a0:af:6d:f4:fc:82:9b:6f:70:8e:98:9f:85:b0:b9:39:
         e4:97:ec:58:24:bf:95:64:4b:02:1b:04:e4:04:e5:94:e1:fa:
         bb:e3:8b:33:c5:de:7f:e0:83:4d:c5:92:aa:a4:39:c5:11:92:
         bb:d5:04:80:d8:48:78:1f:86:e2:27:63:bb:12:be:2a:43:b4:
         28:4f:78:b6:a3:89:9d:e4:95:f3:43:59:f2:16:78:ed:a1:f7:
         c4:34:3d:df:b5:08:a6:48:b7:84:d9:49:2b:3c:38:bf:d5:92:
         f0:05:59:4e:17:98:3f:47:f4:1f:e8:cf:e4:92:a5:42:a5:ad:
         cf:72:ea:66:b1:85:f4:02:ec:ca:f1:6f:0c:39:94:2c:43:a5:
         8e:ce:48:13:8b:fe:6f:07:24:b0:a0:3e:9b:0d:ab:e5:d6:84:
         df:8a:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:11:41 2026 by rpki-client