This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa
File:                     01b06d28-0ad0-3036-9c71-00879687acbb.roa (raw, json)
Hash identifier:          qYzIa5HlrjrgjtGAWe9I/4icqEYW289H17F6o9d7UPA=
Subject key identifier:   63:B0:65:49:23:86:13:C2:5B:2F:39:A2:85:F1:31:7C:23:D3:2C:99
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584C87417692C739B78389FB8C80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa
Signing time:             Thu 15 Jan 2026 02:00:31 +0000
ROA not before:           Thu 15 Jan 2026 02:00:31 +0000
ROA not after:            Wed 15 Apr 2026 01:00:31 +0000
asID:                     16696
IP address blocks:        204.89.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:41:76:92:c7:39:b7:83:89:fb:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jan 15 02:00:31 2026 GMT
            Not After : Apr 15 01:00:31 2026 GMT
        Subject: CN=a08824e4-3544-4f11-b5b8-e471a02809c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:1b:6c:b6:7e:d5:29:3e:8b:a3:89:08:ee:
                    c0:5e:ff:7e:78:b1:20:f7:63:69:ec:13:b3:24:ab:
                    76:29:1c:54:22:57:0b:e0:12:93:09:50:cb:b3:a0:
                    14:c6:cb:d9:cc:8b:f4:c2:57:ce:0d:7f:b7:32:ef:
                    78:e1:ce:b4:55:bc:d0:4d:e7:b1:7d:08:27:03:61:
                    57:97:92:32:a9:98:dd:1f:c7:e0:ce:ae:97:8b:be:
                    a3:a4:6c:3f:c2:ce:f7:c5:a3:7b:f1:c9:45:a8:fc:
                    99:f2:9b:9e:44:95:b6:16:00:de:8c:2b:f6:a5:b7:
                    f6:9d:a5:77:c7:f3:3e:7d:d7:04:56:de:1c:a8:43:
                    db:cb:e4:f6:f7:c5:a5:c9:46:4a:86:05:e2:4c:4e:
                    a5:c5:50:9a:63:eb:f1:3c:c2:1c:ac:47:cb:1f:27:
                    12:35:06:50:49:8a:f7:7f:6e:23:98:6e:b6:d7:3f:
                    fe:48:14:b9:ef:ad:17:f0:a5:5b:b1:52:03:97:3f:
                    63:c8:75:7c:4d:a6:80:d0:e8:a4:b2:0b:37:d5:ae:
                    dd:8c:c7:ab:27:4a:eb:5b:2b:82:46:d8:80:49:f0:
                    72:a8:2f:94:7b:c5:9f:d4:b5:31:fe:42:95:17:cc:
                    8f:30:4e:fc:8d:42:d7:0e:3c:11:00:e2:9c:58:9b:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B0:65:49:23:86:13:C2:5B:2F:39:A2:85:F1:31:7C:23:D3:2C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:80:65:49:42:d0:21:4d:69:a1:e8:60:3a:db:4e:fa:4a:
         c5:1f:f0:84:3a:ea:70:5d:93:39:00:0a:78:05:b1:a7:26:6d:
         32:92:83:09:f4:71:6e:93:60:e4:11:51:7c:50:76:e1:cf:5e:
         16:b7:b8:9e:92:4c:32:16:93:55:f3:48:f1:87:cc:0e:ec:c6:
         92:18:18:6c:69:13:10:fe:2a:63:d5:6b:4b:94:20:48:7b:9f:
         f8:30:21:1e:06:61:a7:cf:18:d6:68:73:4e:b1:c6:b6:f0:85:
         17:58:49:4f:a5:b3:52:97:10:65:56:b2:99:01:db:db:02:54:
         3d:cd:48:8a:5a:0d:03:c9:3b:b3:fb:90:0c:3d:ec:e4:b3:fc:
         01:fe:ec:a0:37:55:7a:a7:b1:30:bf:c8:f7:d6:16:bb:be:27:
         40:0c:06:5e:23:54:9d:d1:11:00:e0:2a:14:18:fa:d8:34:15:
         f2:2c:80:a3:77:2e:9e:f4:f9:ec:ac:9f:3c:19:fe:9c:72:b5:
         f5:91:e3:fd:b3:bd:90:1b:67:11:cf:40:ec:7b:67:16:e1:60:
         21:71:de:f0:cc:2d:bf:eb:3d:9c:1e:4a:76:48:1a:29:2d:5f:
         70:77:22:87:72:70:b4:45:4b:e1:c0:60:90:7a:30:c7:00:f3:
         e2:53:78:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQXaSxzm3g4n7jIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk
YTA4ODI0ZTQtMzU0NC00ZjExLWI1YjgtZTQ3MWEwMjgwOWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6UbbLZ+1Sk+i6OJCO7AXv9+eLEg92Np7BOz
JKt2KRxUIlcL4BKTCVDLs6AUxsvZzIv0wlfODX+3Mu944c60VbzQTeexfQgnA2FX
l5IyqZjdH8fgzq6Xi76jpGw/ws73xaN78clFqPyZ8pueRJW2FgDejCv2pbf2naV3
x/M+fdcEVt4cqEPby+T298WlyUZKhgXiTE6lxVCaY+vxPMIcrEfLHycSNQZQSYr3
f24jmG621z/+SBS5760X8KVbsVIDlz9jyHV8TaaA0Oiksgs31a7djMerJ0rrWyuC
RtiASfByqC+Ue8Wf1LUx/kKVF8yPME78jULXDjwRAOKcWJuoFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOwZUkjhhPCWy85ooXxMXwj0yyZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDFiMDZkMjgtMGFkMC0z
MDM2LTljNzEtMDA4Nzk2ODdhY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFmfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7+gGVJQtAhTWmh6GA62076SsUf8IQ66nBdkzkACngFsacmbTKSgwn0
cW6TYOQRUXxQduHPXha3uJ6STDIWk1XzSPGHzA7sxpIYGGxpExD+KmPVa0uUIEh7
n/gwIR4GYafPGNZoc06xxrbwhRdYSU+ls1KXEGVWspkB29sCVD3NSIpaDQPJO7P7
kAw97OSz/AH+7KA3VXqnsTC/yPfWFru+J0AMBl4jVJ3REQDgKhQY+tg0FfIsgKN3
Lp70+eysnzwZ/pxytfWR4/2zvZAbZxHPQOx7ZxbhYCFx3vDMLb/rPZweSnZIGikt
X3B3IodycLRFS+HAYJB6MMcA8+JTeC8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:15 2026 by rpki-client