This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c975c066-3036-3ee9-8d17-c7a2f2fe28ef.roa
File:                     c975c066-3036-3ee9-8d17-c7a2f2fe28ef.roa (raw, json)
Hash identifier:          qX1f81KfD1RffnszT4kDeHy37/MazoasuYOoWPKw/Ns=
Subject key identifier:   96:84:26:89:1A:77:DA:B2:79:24:95:3F:B6:43:72:1B:AB:BD:49:CF
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584C9CE95BD4EABC8A63F4057B40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c975c066-3036-3ee9-8d17-c7a2f2fe28ef.roa
Signing time:             Thu 22 Jan 2026 20:10:56 +0000
ROA not before:           Thu 22 Jan 2026 20:10:56 +0000
ROA not after:            Wed 22 Apr 2026 19:10:56 +0000
asID:                     398465
IP address blocks:        161.58.0.0/16 maxlen: 24
                          198.65.128.0/18 maxlen: 24
                          198.65.224.0/19 maxlen: 24
                          199.240.0.0/16 maxlen: 24
                          206.58.0.0/16 maxlen: 24
                          206.86.0.0/16 maxlen: 24
                          207.21.128.0/18 maxlen: 24
                          207.22.64.0/18 maxlen: 24
                          207.31.192.0/18 maxlen: 24
                          207.32.64.0/18 maxlen: 24
                          207.33.0.0/16 maxlen: 24
                          207.97.0.0/17 maxlen: 24
                          207.150.0.0/17 maxlen: 24
                          207.153.128.0/18 maxlen: 24
                          207.153.192.0/18 maxlen: 24
                          207.158.192.0/18 maxlen: 24
                          207.159.0.0/18 maxlen: 24
                          207.196.0.0/17 maxlen: 24
                          207.197.128.0/17 maxlen: 24
                          207.199.0.0/17 maxlen: 24
                          207.206.0.0/17 maxlen: 24
                          209.69.0.0/16 maxlen: 24
                          209.75.0.0/16 maxlen: 24
                          209.130.0.0/17 maxlen: 24
                          209.157.0.0/16 maxlen: 24
                          209.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9c:e9:5b:d4:ea:bc:8a:63:f4:05:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 22 20:10:56 2026 GMT
            Not After : Apr 22 19:10:56 2026 GMT
        Subject: CN=25ccf845-4f44-4a1f-b4a4-16b5ffaff17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:89:5d:06:d0:10:b3:01:b8:a0:10:1d:9e:
                    d0:82:da:1d:0a:ab:42:4a:ad:7d:43:ea:20:7b:fe:
                    82:9c:68:ef:ea:f4:a5:a4:01:47:15:c3:84:69:f5:
                    ae:3f:58:78:18:f1:8c:06:66:a0:f5:83:2e:7b:31:
                    b6:a7:d6:16:ce:c1:0e:22:96:b2:f2:98:3b:16:6e:
                    7d:64:c1:4a:5c:94:4a:00:98:4b:aa:39:e3:03:17:
                    99:a0:3c:60:3d:f4:e2:73:b9:b7:63:a6:c6:0d:95:
                    88:e6:69:e2:62:59:bd:7e:dc:ea:b9:9e:0b:06:80:
                    7d:de:b6:e7:ba:52:7d:ec:d1:43:cc:08:ae:ff:e8:
                    a9:8d:1e:80:14:3f:98:7c:51:7e:01:63:c6:3f:cf:
                    d3:d6:16:dd:ec:a1:78:5b:95:c6:54:18:52:8a:98:
                    cd:6a:f8:3e:46:20:53:c4:79:af:db:38:07:de:50:
                    09:7f:1e:d8:77:f7:19:50:10:14:27:86:0e:41:b9:
                    d3:45:94:be:e2:04:92:93:97:79:0a:05:74:05:46:
                    14:5e:0d:84:a9:44:5c:a6:31:e5:b6:23:b4:46:a7:
                    5a:eb:8c:46:8f:41:15:26:5d:79:7d:ca:92:e7:87:
                    db:cd:bd:8a:5d:d1:2b:3b:0c:8e:e4:7c:13:48:dd:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:84:26:89:1A:77:DA:B2:79:24:95:3F:B6:43:72:1B:AB:BD:49:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c975c066-3036-3ee9-8d17-c7a2f2fe28ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.58.0.0/16
                  198.65.128.0/18
                  198.65.224.0/19
                  199.240.0.0/16
                  206.58.0.0/16
                  206.86.0.0/16
                  207.21.128.0/18
                  207.22.64.0/18
                  207.31.192.0/18
                  207.32.64.0/18
                  207.33.0.0/16
                  207.97.0.0/17
                  207.150.0.0/17
                  207.153.128.0/17
                  207.158.192.0-207.159.63.255
                  207.196.0.0/17
                  207.197.128.0/17
                  207.199.0.0/17
                  207.206.0.0/17
                  209.69.0.0/16
                  209.75.0.0/16
                  209.130.0.0/17
                  209.157.0.0/16
                  209.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:15:43:3c:3c:0b:85:32:18:1d:e3:28:28:ed:7f:38:21:
         9e:de:06:3f:be:33:28:b5:8b:b6:2d:f4:fd:0f:e2:7e:5c:4f:
         a0:c4:3f:0c:14:ef:32:d0:32:be:80:74:fe:01:91:cd:05:e3:
         a9:5f:11:91:b7:b8:b2:2b:d3:e3:ff:46:73:07:52:c8:29:5d:
         f7:21:9e:aa:2e:a5:44:c1:47:73:d0:cd:77:23:94:83:7b:78:
         25:fa:c1:2e:56:21:d9:0f:d0:ea:44:2c:5d:17:70:42:6c:df:
         db:e0:9f:dd:46:e6:26:20:02:3f:cc:1c:8f:75:22:75:b9:fd:
         3c:cf:36:08:29:b8:73:62:4b:46:33:1e:33:08:9a:8b:bf:b4:
         c7:c5:88:1a:d7:f1:87:0a:7e:93:d2:b2:7e:9a:1a:ce:9b:fd:
         21:85:01:77:76:2d:9e:2a:25:ab:7f:b2:57:c6:7e:a7:ed:d9:
         d5:69:77:e8:a4:44:7a:3b:2f:6e:05:36:11:27:cc:66:c3:18:
         de:5f:8e:dd:e7:cb:2a:2f:dc:ce:60:74:fb:26:63:fa:05:a5:
         de:f6:8a:22:8f:26:2a:f9:5b:3d:c5:e2:48:7b:f0:33:eb:62:
         e0:e3:5d:8e:6a:9a:55:cf:b9:39:92:3e:0c:50:95:34:96:7b:
         96:9e:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:11:51 2026 by rpki-client