This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa
File:                     e21f367a-40c1-3c90-b30a-ec98806099f3.roa (raw, json)
Hash identifier:          5Gu1M4Xf3Egl1tJloIuL8tu9exRoxvYCC5DQdnEoTKI=
Subject key identifier:   52:52:89:5D:46:E1:DE:E5:7F:C7:BE:64:C3:4E:B2:03:C0:7A:62:B2
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584C874177D55842C560B9A01500
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa
Signing time:             Thu 15 Jan 2026 02:00:31 +0000
ROA not before:           Thu 15 Jan 2026 02:00:31 +0000
ROA not after:            Wed 15 Apr 2026 01:00:31 +0000
asID:                     16696
IP address blocks:        216.120.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:41:77:d5:58:42:c5:60:b9:a0:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jan 15 02:00:31 2026 GMT
            Not After : Apr 15 01:00:31 2026 GMT
        Subject: CN=3b88a540-f30a-4278-b03f-ec789d6299c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:f9:a6:21:6a:37:35:ae:ea:73:31:75:4e:
                    2b:6c:2b:95:f0:ed:d3:b9:d3:7b:6d:bd:15:6f:32:
                    c0:4f:3a:9e:ad:64:fc:eb:b7:d5:1c:22:9e:be:14:
                    d3:cb:6b:e6:62:ca:02:f4:c1:ae:3a:47:ac:25:f5:
                    a3:92:11:0b:be:c2:9d:57:76:8a:a4:4b:4e:09:bb:
                    56:dd:57:ca:84:d2:bb:a3:05:8c:1b:71:bd:15:92:
                    e8:28:69:bb:dc:00:3b:b9:ef:c4:98:73:ef:1e:e8:
                    80:c0:b1:72:27:40:bc:b5:2c:c3:bf:c4:04:3f:08:
                    3c:3e:19:cc:87:d0:07:61:84:eb:6f:23:bb:a4:14:
                    f8:92:f0:4d:2a:90:0a:e9:2e:c6:f9:6d:a2:3c:1f:
                    92:aa:b8:fe:a6:49:5b:58:0a:db:2c:02:37:1a:6c:
                    e1:d8:be:40:5d:5a:ff:63:94:b8:46:0e:b9:e0:ee:
                    81:54:9f:aa:f2:af:2c:ae:3a:6d:5e:8f:b4:05:ea:
                    54:c5:38:21:b8:9f:30:c3:71:15:f4:29:8a:ad:a5:
                    f9:7a:07:a5:f4:9e:c3:f6:59:42:14:d8:e0:91:5f:
                    75:88:f7:c0:4a:95:c6:07:86:56:f0:7f:80:2f:af:
                    2c:8d:1e:64:75:a5:91:ec:b7:df:4f:5c:bd:89:e8:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:89:5D:46:E1:DE:E5:7F:C7:BE:64:C3:4E:B2:03:C0:7A:62:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:63:c9:a9:01:9e:e7:3d:4c:28:70:df:08:27:2f:14:db:
         51:53:1b:ec:07:77:ed:b9:34:7b:34:6a:aa:57:3d:d6:c7:95:
         03:31:65:3f:47:6e:1e:3d:b5:d1:94:33:1b:cb:f2:24:a5:cf:
         9d:9d:e8:23:2d:e4:81:f3:fd:6c:9f:24:09:e7:ae:0e:23:9d:
         3e:35:c9:fd:72:1b:af:c9:ef:7c:c9:df:77:e3:be:20:36:30:
         ec:df:00:7e:8c:97:f6:57:65:61:02:33:89:fd:f0:25:5a:68:
         3f:e5:34:d4:cd:fb:bd:e6:f5:54:b8:46:49:8c:ce:8e:7e:dd:
         24:fe:ee:50:7d:f8:c9:17:61:7c:fa:6b:78:44:ce:82:3d:08:
         4d:5a:90:42:ad:41:af:ec:0e:79:02:a1:85:b5:ed:d8:c4:5c:
         3d:da:41:d9:b7:a6:8e:16:c6:1c:af:93:12:ca:a2:d6:49:75:
         1b:0d:b0:d9:3f:57:3e:26:cf:24:6b:20:7d:82:1b:34:ee:53:
         c5:8b:53:7b:de:c7:a9:94:29:bd:08:83:5b:5b:39:5e:b1:f7:
         a9:98:ba:f6:1a:82:95:69:72:e3:8f:56:3b:42:55:9c:42:06:
         cb:d4:5f:90:26:4a:7f:6b:0c:cb:3c:39:76:42:af:85:05:ed:
         2e:f4:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:20 2026 by rpki-client