This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa
File:                     ba3718d6-b79b-3161-a4a0-732b49a958d4.roa (raw, json)
Hash identifier:          H4UZQFD6RdjbMS3I/09EfQsGEz+IxR0T4AX/0517gnU=
Subject key identifier:   9A:27:20:44:26:89:2B:05:F9:9E:67:FE:1F:F5:53:03:A8:4D:EF:B4
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584C5EC69E5DD9844AA967DD0690
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     14977
IP address blocks:        137.90.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:9e:5d:d9:84:4a:a9:67:dd:06:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=7d182248-61bc-4e29-8746-1c2287a900fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:dc:36:1d:82:c2:dd:c1:dd:ad:dd:e7:8c:
                    65:38:13:1c:16:c4:9c:e9:d4:5a:49:81:97:59:79:
                    1e:9a:48:05:92:8f:a1:50:86:a9:12:dd:23:1f:9f:
                    05:90:b4:17:2d:e4:76:a9:de:0d:1d:70:34:9f:83:
                    5e:ed:f2:65:ea:8f:3b:31:3d:50:85:0a:ac:12:79:
                    dd:84:85:d9:35:7d:06:8c:33:13:51:7b:6f:5f:c4:
                    a3:c7:9b:0f:8d:57:7d:72:ae:30:bc:02:97:dc:ad:
                    22:32:f5:b5:46:9e:84:af:ab:a9:64:85:3a:6a:01:
                    58:3f:8e:80:6f:7f:e6:ee:79:12:1e:41:60:85:eb:
                    b3:68:cc:dd:18:0e:c7:4a:91:77:6b:d1:01:db:29:
                    45:b3:c3:85:ea:f0:40:af:92:ec:8d:75:26:b3:9d:
                    c3:7f:7f:b2:4e:09:db:f2:62:23:68:5a:bf:94:11:
                    ff:df:4b:19:c4:d6:b3:40:ed:b8:6f:bf:a1:f9:60:
                    46:b0:07:c6:60:c5:26:73:3a:87:4c:a4:c7:1c:34:
                    7e:9b:d7:ce:ae:22:eb:86:11:12:4d:34:84:b3:f0:
                    f3:b3:85:cc:7f:aa:36:43:b9:d6:41:fb:c4:e7:6f:
                    56:07:14:ce:ec:f3:9b:3f:e6:34:ee:c4:b1:bf:30:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:20:44:26:89:2B:05:F9:9E:67:FE:1F:F5:53:03:A8:4D:EF:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:a0:b7:cb:af:6e:61:82:18:e3:fd:a1:5b:5d:d0:fb:fc:2a:
         58:2f:50:43:f8:8f:b2:68:9d:2e:ac:35:b9:a8:64:0c:08:87:
         dc:6d:a5:2f:e3:d1:2b:12:1d:20:a7:0c:7b:5f:20:ae:4d:de:
         dc:c0:be:6e:db:1f:f5:7e:34:72:74:49:53:bc:04:a0:89:b0:
         66:51:0a:6d:91:63:a7:70:52:f9:53:71:8e:61:02:49:5d:64:
         1e:e7:f8:0c:54:e8:e1:2f:b1:ad:ab:22:10:88:b1:90:43:6d:
         db:2f:3a:ae:70:c2:e7:a4:79:5d:3f:ff:a7:33:e6:27:35:a0:
         0a:67:57:52:ae:e8:8c:1d:58:31:0e:22:ea:bd:cf:f4:3b:16:
         00:cb:37:ac:31:1c:02:ba:f7:c8:62:b0:0b:a6:1a:93:43:e1:
         dc:9f:75:e1:b2:d0:89:53:9f:fe:88:6f:5c:8f:41:09:ce:bc:
         0b:57:a9:23:c7:28:7a:65:07:aa:10:95:42:d8:76:4c:e2:41:
         b3:8e:be:79:10:00:af:12:bb:00:26:5f:28:3c:50:12:87:87:
         80:8c:40:d8:46:13:26:04:29:4e:fc:18:e3:d7:42:2b:89:49:
         d9:04:13:2a:63:a1:6f:f2:d5:5a:3f:12:28:03:2a:57:02:9e:
         d6:2b:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:47:01 2026 by rpki-client