This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa
File:                     af07d9a3-0774-3d53-9e00-35661826a9bc.roa (raw, json)
Hash identifier:          dSySm85n4YeV09VBA0bcOnUZextKhzZHWnm3gFEDZeA=
Subject key identifier:   CD:BD:DE:64:66:C8:44:21:CE:09:BF:45:97:2D:A2:43:21:EF:40:8F
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584C602BE84F1888A6283AE3CB00
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     6505
IP address blocks:        66.96.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:e8:4f:18:88:a6:28:3a:e3:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=28a46bf6-f3dc-4a41-b458-20a3a58f6162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:9d:8c:e5:84:ee:10:76:57:db:f0:08:96:
                    b5:66:4d:0d:91:3f:8e:3d:c2:6d:83:a8:ba:04:d5:
                    2c:f6:d1:e4:08:d2:12:70:b3:4b:d4:52:94:92:9c:
                    b7:58:cd:94:53:d1:60:55:57:47:d4:1f:cd:a3:65:
                    04:db:66:15:63:e0:8a:60:32:67:8a:96:40:1a:09:
                    14:12:43:de:8a:99:52:63:ab:c1:eb:45:e5:8e:7f:
                    62:d8:74:59:0a:0d:82:14:47:9d:fc:c0:f1:cf:d4:
                    36:24:6d:86:51:a8:79:ba:2d:0c:e9:11:cc:ee:94:
                    f3:74:3f:f9:ab:e2:e9:79:7d:cb:f1:68:56:06:dd:
                    73:3e:3d:42:cd:da:d2:39:6b:85:60:68:79:4b:64:
                    09:1c:c2:77:1b:61:53:a5:77:fd:eb:08:48:37:d2:
                    a3:8f:13:8b:ca:7c:5d:05:c1:50:e5:ed:5f:9c:cb:
                    c2:a4:65:7c:85:f4:1e:21:7f:fc:2f:3d:e8:8f:1f:
                    b4:5c:25:8e:6f:48:78:07:2c:0a:fb:96:f9:5e:9f:
                    cf:ea:dc:51:cc:da:ce:31:d1:62:39:f3:36:06:ac:
                    a6:27:01:fa:00:ed:8d:92:9b:4c:d8:de:bd:a8:aa:
                    b7:96:c8:72:3c:4d:44:01:70:de:bc:fc:96:ee:62:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BD:DE:64:66:C8:44:21:CE:09:BF:45:97:2D:A2:43:21:EF:40:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:27:f9:e1:a1:dc:f8:fe:aa:7e:3e:6d:df:77:d8:86:c6:
         4b:24:18:00:d2:5d:92:91:aa:51:51:9a:03:96:0d:f0:d4:1c:
         22:91:38:24:b2:91:77:24:fc:b7:42:fb:6a:63:77:8b:3f:9c:
         cd:c3:47:9f:6d:87:68:0b:d2:64:47:09:0d:30:5a:35:00:a5:
         72:e7:d5:5f:fb:bb:a0:77:4f:eb:d8:0e:bd:f4:72:ff:d7:70:
         d4:5b:3b:91:fc:89:f2:78:2b:e4:42:a9:47:d3:c4:ea:96:99:
         36:e6:39:dd:36:f7:56:fd:55:4f:1c:41:ea:8f:23:a0:3e:8e:
         65:d3:dd:5e:b9:5e:3a:22:09:7a:1d:07:0d:39:f1:07:85:70:
         25:53:b6:5b:ea:46:a0:8d:6c:50:84:56:d2:a8:b5:a9:3a:23:
         8f:e2:d2:24:73:a1:64:d3:e7:e6:6b:a1:25:af:bf:f8:cc:1c:
         42:b1:8e:46:89:4b:4e:e0:58:08:f3:94:0e:51:6e:ca:b8:25:
         2a:fe:68:f2:7d:f1:d8:d5:63:9c:81:c0:7e:39:9c:58:1d:c0:
         ae:a8:d9:d3:62:81:2d:49:8b:bb:0a:2d:56:78:93:21:3f:c5:
         ff:13:74:e1:18:2e:6b:c1:8a:0f:23:f7:af:8b:25:d1:f0:06:
         65:a0:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:38:46 2026 by rpki-client