This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa
File:                     5016c054-af10-3049-934f-3a7fb31397b9.roa (raw, json)
Hash identifier:          iRMgqLnuca+TkN5ayMlQDW5ZsAa502exZF4XyBnMnV4=
Subject key identifier:   4F:30:FE:41:4A:84:2D:40:B9:D5:DF:FE:FA:37:78:91:9A:42:BE:7E
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584C7D7C658AEDD948BB5AE38780
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     16696
IP address blocks:        67.221.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:65:8a:ed:d9:48:bb:5a:e3:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=1716f924-891e-477a-b5a1-c0b308b4d2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:91:54:6e:4f:57:96:73:2b:68:5b:a7:c7:c3:
                    10:4f:7a:07:6b:80:93:ce:11:db:74:4f:72:31:6c:
                    db:96:f0:68:01:49:91:10:a2:21:21:bf:dc:4f:a1:
                    c6:45:97:5e:13:83:40:ba:bb:db:17:ba:5f:a7:03:
                    69:b1:41:5c:10:36:3f:14:61:c5:19:1e:21:c6:e6:
                    14:13:56:d5:63:2f:61:0b:2b:06:60:e9:8e:53:9b:
                    35:11:89:3e:2c:dc:14:de:27:e6:97:b2:34:98:53:
                    7e:d1:89:c2:79:04:1f:71:79:59:2a:84:9c:55:91:
                    54:d3:bd:72:00:e0:a2:35:3b:fd:d8:c1:b5:da:e9:
                    24:0d:ce:e5:01:40:6f:5f:8d:af:3c:05:d9:e3:1d:
                    c3:a8:4b:fd:d3:77:52:19:80:8c:17:71:4e:10:da:
                    29:c2:1d:87:79:61:9b:93:68:45:57:d5:8f:3b:f4:
                    36:20:96:ca:53:6a:bc:6b:fd:e5:90:4f:dc:cc:e3:
                    06:63:dc:c8:f8:cf:e3:13:12:dc:ad:88:6b:f1:c1:
                    12:35:c5:57:58:41:ee:89:fe:17:57:a1:0a:8b:19:
                    c0:49:3d:0a:fd:46:0b:90:31:86:81:84:9e:64:af:
                    22:d1:17:81:34:6d:70:42:52:01:49:2d:2b:61:56:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:30:FE:41:4A:84:2D:40:B9:D5:DF:FE:FA:37:78:91:9A:42:BE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:6b:e1:2b:df:07:c1:6c:4f:1a:78:2f:8d:84:82:d8:84:
         9f:ca:c8:c1:57:be:ac:75:b8:3d:fa:ae:c8:8c:e3:3b:88:36:
         e1:c4:f6:e6:ff:ad:63:ee:dc:99:26:44:d6:6f:bc:80:79:7c:
         37:ea:87:8f:a9:4b:80:d3:24:1b:a0:6f:9a:42:a2:5a:61:2b:
         77:f2:e9:80:e1:c0:82:39:7c:9a:84:15:c0:2e:9c:78:1c:05:
         61:dd:78:08:f0:23:5e:1c:ae:7b:57:47:37:f1:a4:b4:19:47:
         4a:ef:43:26:b3:f1:15:b6:1d:c5:55:2f:57:64:3e:e2:87:a3:
         c0:9e:43:28:d9:16:ff:08:97:ad:f8:11:c2:c0:fd:1c:97:e1:
         5f:48:c3:cc:29:91:4c:61:4e:b9:da:31:b8:11:20:64:b6:f0:
         a9:ea:e5:55:b4:87:70:b6:fa:71:04:53:fb:3a:b8:c3:4a:56:
         3d:f7:b1:84:c5:84:9a:32:94:3f:dd:2e:ea:ad:2a:b0:5b:97:
         ac:be:b7:81:8a:7d:05:39:64:ee:bf:7b:2d:77:41:5f:af:47:
         da:f2:cc:9d:c6:a2:b8:6e:74:22:8a:47:32:b6:15:50:34:fd:
         ac:a7:48:c3:8f:81:81:ad:92:da:d5:43:de:ae:5e:68:ab:4a:
         07:10:d0:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGWK7dlIu1rjh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk
MTcxNmY5MjQtODkxZS00NzdhLWI1YTEtYzBiMzA4YjRkMmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpFUbk9XlnMraFunx8MQT3oHa4CTzhHbdE9y
MWzblvBoAUmREKIhIb/cT6HGRZdeE4NAurvbF7pfpwNpsUFcEDY/FGHFGR4hxuYU
E1bVYy9hCysGYOmOU5s1EYk+LNwU3ifml7I0mFN+0YnCeQQfcXlZKoScVZFU071y
AOCiNTv92MG12ukkDc7lAUBvX42vPAXZ4x3DqEv903dSGYCMF3FOENopwh2HeWGb
k2hFV9WPO/Q2IJbKU2q8a/3lkE/czOMGY9zI+M/jExLcrYhr8cESNcVXWEHuif4X
V6EKixnAST0K/UYLkDGGgYSeZK8i0ReBNG1wQlIBSS0rYVavCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8w/kFKhC1AudXf/vo3eJGaQr5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNTAxNmMwNTQtYWYxMC0z
MDQ5LTkzNGYtM2E3ZmIzMTM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtMa+Er3wfBbE8aeC+NhILYhJ/KyMFXvqx1uD36rsiM4zuINuHE9ub/
rWPu3JkmRNZvvIB5fDfqh4+pS4DTJBugb5pColphK3fy6YDhwII5fJqEFcAunHgc
BWHdeAjwI14crntXRzfxpLQZR0rvQyaz8RW2HcVVL1dkPuKHo8CeQyjZFv8Il634
EcLA/RyX4V9Iw8wpkUxhTrnaMbgRIGS28Knq5VW0h3C2+nEEU/s6uMNKVj33sYTF
hJoylD/dLuqtKrBbl6y+t4GKfQU5ZO6/ey13QV+vR9ryzJ3GorhudCKKRzK2FVA0
/aynSMOPgYGtktrVQ96uXmirSgcQ0Ps=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:15 2026 by rpki-client