This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa
File:                     9a6c4241-4967-3a10-984a-6f62096d0f3c.roa (raw, json)
Hash identifier:          85bZnDgZ7TLUWxoZstd/Hf75RePekwLeB6dMEY2Vz6M=
Subject key identifier:   26:74:32:2E:B5:00:09:8A:84:EB:04:48:E1:06:BA:F0:73:32:CB:0E
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F4328584C7C16AB25F37422B15234A9A0
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa
Signing time:             Sun 11 Jan 2026 02:00:30 +0000
ROA not before:           Sun 11 Jan 2026 02:00:30 +0000
ROA not after:            Sat 11 Apr 2026 01:00:30 +0000
asID:                     22616
IP address blocks:        149.117.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7c:16:ab:25:f3:74:22:b1:52:34:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Jan 11 02:00:30 2026 GMT
            Not After : Apr 11 01:00:30 2026 GMT
        Subject: CN=208a7ca9-41a6-427c-9dc6-ee970d274638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d6:13:5f:14:c9:3b:57:38:82:3d:48:e2:6f:
                    4b:33:df:54:86:0c:0a:d3:76:19:3a:a6:ee:45:c8:
                    ae:f1:ef:fc:c9:aa:cd:00:62:36:01:17:e6:79:26:
                    bf:37:5d:c5:7c:f0:b4:ac:83:0a:35:57:9e:fb:b9:
                    52:7b:8c:27:26:75:83:9a:62:33:14:22:89:14:63:
                    3f:88:e3:b5:a0:22:4e:10:86:3b:fd:e1:7b:50:a9:
                    68:72:5c:cd:e8:3d:f3:61:60:45:26:33:ce:27:30:
                    d1:b7:30:df:70:a5:d4:ec:df:f1:7b:31:68:f5:e3:
                    34:95:0c:43:cb:a8:2e:04:ca:14:ec:d2:7c:3e:12:
                    d5:9c:0d:22:ae:d7:23:61:7d:bf:2f:6d:d9:d8:e4:
                    e2:a9:ae:17:cc:7c:02:67:73:f2:33:e6:e3:f4:b2:
                    f4:54:a1:6d:fb:39:09:b4:2b:53:fc:e2:a5:96:72:
                    84:ce:42:84:9f:d9:c6:e0:2c:51:85:ca:ea:1b:d9:
                    a0:c4:4c:2e:71:05:d5:13:03:f4:b9:04:9a:70:5f:
                    2c:87:6b:d0:33:25:76:de:b3:fd:72:47:4c:d4:23:
                    d0:58:ce:60:e6:f7:38:07:d9:ef:6b:50:10:fe:e4:
                    cf:7a:af:21:9e:dc:0b:24:a7:92:6a:a8:97:6c:3e:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:32:2E:B5:00:09:8A:84:EB:04:48:E1:06:BA:F0:73:32:CB:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.117.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:c7:6a:50:63:a7:44:0f:ba:cf:25:3e:2d:87:b6:75:08:
         d4:07:c7:12:ae:e9:f3:d2:98:0f:5d:1f:2c:2a:18:a5:b2:f4:
         2d:af:8b:87:5a:5d:cf:28:dd:ae:d8:e5:0a:38:c1:a7:ec:f9:
         5e:1d:42:01:85:68:b8:57:b6:da:13:68:78:10:01:64:0f:2b:
         e7:ba:89:3a:66:81:03:3d:1f:24:4b:2c:21:f7:ae:e4:e9:53:
         58:3e:cf:66:92:cc:a5:26:30:8c:db:31:52:48:98:bd:2b:d0:
         35:ff:75:e8:85:94:41:53:1d:94:22:11:9a:8b:5f:4a:8d:4f:
         6e:46:d0:fe:9f:8a:25:1e:7a:c0:71:cd:bd:8f:2e:9e:31:6c:
         55:46:62:d0:6a:a8:b0:a6:32:2e:fd:18:90:b9:d2:d9:f0:06:
         94:3d:13:b4:a0:53:c4:93:59:e2:30:38:ec:b2:6e:8e:be:19:
         f2:73:4d:92:c3:38:61:28:4b:61:84:c3:40:17:31:f8:32:f7:
         df:b1:94:9b:82:02:c1:01:ea:a2:2a:bb:b7:16:88:b9:2c:c2:
         4c:31:bd:66:e4:d2:98:f0:64:52:cd:67:24:ac:18:00:80:3c:
         11:27:6b:09:af:bf:61:cc:28:d1:b7:81:bb:95:21:3e:87:fd:
         28:ae:9f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:31 2026 by rpki-client