This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa
File:                     d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa (raw, json)
Hash identifier:          AkR+KYJCwawPSYtI9zVLsNSGripmKYq9tXR0OXv1+xg=
Subject key identifier:   C8:5A:33:36:ED:3A:E2:AE:B3:FD:27:99:AC:43:A1:BC:BC:58:55:0E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584C9CED070DBA31BFD1EC7D7280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa
Signing time:             Thu 22 Jan 2026 20:18:19 +0000
ROA not before:           Thu 22 Jan 2026 20:18:19 +0000
ROA not after:            Wed 22 Apr 2026 19:18:19 +0000
asID:                     20115
IP address blocks:        161.58.0.0/16 maxlen: 24
                          198.65.128.0/18 maxlen: 24
                          198.65.224.0/19 maxlen: 24
                          199.240.0.0/16 maxlen: 24
                          206.58.0.0/16 maxlen: 24
                          206.86.0.0/16 maxlen: 24
                          207.21.128.0/18 maxlen: 24
                          207.22.64.0/18 maxlen: 24
                          207.31.192.0/18 maxlen: 24
                          207.32.64.0/18 maxlen: 24
                          207.33.0.0/16 maxlen: 24
                          207.97.0.0/17 maxlen: 24
                          207.150.0.0/17 maxlen: 24
                          207.153.128.0/18 maxlen: 24
                          207.153.192.0/18 maxlen: 24
                          207.158.192.0/18 maxlen: 24
                          207.159.0.0/18 maxlen: 24
                          207.196.0.0/17 maxlen: 24
                          207.197.128.0/17 maxlen: 24
                          207.199.0.0/17 maxlen: 24
                          207.206.0.0/17 maxlen: 24
                          209.69.0.0/16 maxlen: 24
                          209.75.0.0/16 maxlen: 24
                          209.130.0.0/17 maxlen: 24
                          209.157.0.0/16 maxlen: 24
                          209.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9c:ed:07:0d:ba:31:bf:d1:ec:7d:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 22 20:18:19 2026 GMT
            Not After : Apr 22 19:18:19 2026 GMT
        Subject: CN=ebad8951-b93e-4e55-ae5a-f3a32053ddb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:01:41:21:af:94:a0:a2:e2:41:7e:1f:d9:
                    1e:62:6e:7c:39:56:35:3e:8c:48:cf:3b:67:a6:06:
                    be:9f:3e:c3:f2:4f:76:62:b8:0c:0e:f5:70:54:15:
                    31:72:74:fe:aa:3d:ef:d9:f8:77:9c:c6:b3:77:5a:
                    11:90:fd:ca:f5:ef:15:42:92:6d:be:be:1d:91:4a:
                    c3:1a:a9:50:fa:d0:c6:e7:c8:b8:57:18:45:36:f8:
                    0a:93:93:f9:08:42:c9:63:ba:3d:ee:4f:ca:eb:ac:
                    be:d4:1c:5a:6d:50:77:06:d4:93:5f:41:15:9f:8d:
                    f9:16:91:81:cb:0c:cf:b4:3c:3e:21:88:38:3f:1e:
                    56:4b:c8:74:bb:7c:b6:d2:b6:47:50:11:6d:5e:f0:
                    e3:34:71:5e:03:c4:fc:8b:5d:72:49:41:46:1d:39:
                    1f:61:81:9a:11:86:c9:c7:1f:25:72:7f:11:85:b1:
                    d8:17:b2:8f:e7:d0:bc:f8:a5:15:bb:a1:98:8f:7b:
                    37:44:be:9b:db:d0:bb:41:67:53:85:55:c8:d0:50:
                    30:5e:c8:9b:53:a0:50:7f:e2:1f:57:d5:e5:af:e4:
                    2f:8f:14:22:7a:e7:0a:36:58:82:40:f6:a1:93:a0:
                    4b:bd:16:e0:c4:38:5d:f9:c0:71:1d:fa:96:aa:04:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5A:33:36:ED:3A:E2:AE:B3:FD:27:99:AC:43:A1:BC:BC:58:55:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.58.0.0/16
                  198.65.128.0/18
                  198.65.224.0/19
                  199.240.0.0/16
                  206.58.0.0/16
                  206.86.0.0/16
                  207.21.128.0/18
                  207.22.64.0/18
                  207.31.192.0/18
                  207.32.64.0/18
                  207.33.0.0/16
                  207.97.0.0/17
                  207.150.0.0/17
                  207.153.128.0/17
                  207.158.192.0-207.159.63.255
                  207.196.0.0/17
                  207.197.128.0/17
                  207.199.0.0/17
                  207.206.0.0/17
                  209.69.0.0/16
                  209.75.0.0/16
                  209.130.0.0/17
                  209.157.0.0/16
                  209.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b5:4c:ff:d8:e8:57:43:b4:30:e9:7d:32:68:76:c3:03:81:
         e4:77:f4:d4:6e:60:8b:88:29:6e:e1:f1:7e:f8:9f:a7:00:1e:
         49:35:36:5e:1b:f5:f8:1e:3c:b5:f8:52:52:b5:39:f0:3c:bb:
         cc:55:1b:59:a7:12:b1:22:cd:84:01:ac:20:32:7f:59:4f:52:
         69:38:70:86:b6:a2:79:c7:89:a5:82:b4:b8:21:bc:87:a7:7b:
         69:54:9a:01:0b:20:dc:8c:a3:20:a9:c4:b2:f3:32:0a:b4:ed:
         84:12:98:24:dd:6c:a9:cd:2a:87:cb:af:31:d7:f4:25:e5:0b:
         5e:f3:83:82:6a:80:ab:7d:5c:48:68:53:ec:5c:6f:16:97:e0:
         cc:df:ca:51:68:52:10:96:71:16:3b:65:77:33:c0:15:c0:15:
         3f:6a:ea:fb:61:49:c4:ae:39:97:a0:4a:ac:51:58:24:12:2e:
         b6:0f:d9:c5:99:00:5d:63:c0:27:31:9d:52:76:0a:a7:0a:f9:
         da:82:53:0a:4f:10:0c:e5:45:c2:6b:23:a5:0c:50:f9:a0:bc:
         7d:b6:19:3d:93:4d:fa:c6:68:70:23:c8:a2:de:03:0e:da:e0:
         e1:8e:8c:eb:b1:6a:85:69:c1:e4:ac:c1:5c:74:c5:0a:af:a1:
         cf:d8:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:11:47 2026 by rpki-client