This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa
File:                     0d21ef0d-eada-37df-ba95-470d970f6b7c.roa (raw, json)
Hash identifier:          3rTN2NQPFsEww63OBe/OXauuEu9j1E3QYqUjLgS9qC0=
Subject key identifier:   D0:80:AA:BE:C4:72:67:33:52:FD:29:CE:FE:3C:BA:45:04:2F:3F:2E
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F4328584C5EC6A0BD95CE9D869CCC3080
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     16509
IP address blocks:        165.1.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:a0:bd:95:ce:9d:86:9c:cc:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=45e580b2-de57-45ed-b02d-a680ef791ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:32:64:0b:5a:c1:45:62:7e:39:25:25:a6:
                    8c:f5:4f:55:77:96:6b:dd:20:8a:bc:91:e9:0f:9f:
                    da:93:5d:f4:b3:5d:bc:f6:55:db:13:18:5d:b5:48:
                    f6:53:1c:1c:f8:90:26:ff:0e:53:30:cf:a3:b0:21:
                    d4:42:bb:0f:22:22:bf:26:a1:2a:87:f2:7b:dc:93:
                    d8:ae:87:9f:9c:1c:02:fa:72:8c:cf:06:56:fc:d3:
                    60:c1:bf:4a:5b:0a:df:4f:73:ff:16:73:22:3e:87:
                    2f:87:0b:57:50:6c:f2:19:ba:c1:a2:bf:73:57:52:
                    db:e2:a2:3e:26:52:94:be:9b:f5:f5:7b:64:1e:ec:
                    34:8a:8c:75:b6:a8:3d:7e:2e:b1:17:ae:0d:d7:34:
                    f3:ec:70:10:e2:90:ad:43:66:af:dd:3c:b4:f5:42:
                    cc:32:e3:5d:06:87:ec:84:c8:72:bf:78:1f:02:bc:
                    56:67:b9:4f:89:0d:13:5b:05:ba:ea:c6:09:48:7b:
                    43:1c:b4:b1:8f:68:b9:8f:ed:a4:8e:77:12:43:46:
                    3a:10:f2:91:6e:4f:02:4a:de:91:67:b5:b0:2d:14:
                    4c:15:33:8d:37:4b:96:94:52:92:bc:1f:43:bf:0f:
                    e1:72:d6:89:43:8e:1d:6b:c7:c1:36:78:ed:18:b9:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:80:AA:BE:C4:72:67:33:52:FD:29:CE:FE:3C:BA:45:04:2F:3F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:52:0f:25:a9:cb:e1:81:fe:df:46:f1:6b:b5:37:c9:49:76:
         dc:60:e4:a1:bd:8f:21:1e:50:af:8f:73:a8:00:c3:f9:e5:6f:
         51:ec:5e:78:3f:92:55:ba:c7:1d:18:78:b2:4a:a2:bb:cd:78:
         22:73:66:73:83:78:82:6f:86:73:18:40:2d:14:00:0c:0d:c8:
         50:95:43:cd:2a:25:1b:b9:09:9a:17:db:52:fc:9b:55:b0:95:
         2c:c7:f1:9b:01:4d:ff:32:c4:e9:fb:0c:0c:68:ba:c3:6d:37:
         58:9e:05:9d:ff:c7:4b:59:5a:ec:34:59:02:58:77:ff:cc:67:
         49:26:07:f8:6b:ca:bc:32:e1:92:d8:9b:fa:0c:3a:48:bd:b7:
         0e:4e:48:31:c0:b0:6e:a6:64:25:64:63:a3:5f:83:a3:77:ad:
         75:40:ef:cf:1c:05:06:3d:15:1f:a9:97:b5:70:c2:85:dd:47:
         8a:a5:23:0a:6a:9f:da:db:0d:3c:a6:f3:85:f7:69:16:8e:da:
         f8:1f:fe:9d:8d:50:af:21:f9:92:62:5e:28:b0:c6:80:9f:a1:
         5a:4e:f6:81:b4:8e:3c:9c:57:6e:21:cb:c2:f4:27:c1:d7:48:
         b0:11:e6:02:95:7c:0b:67:fd:d3:ac:22:ef:ab:a4:03:aa:18:
         10:57:37:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexqC9lc6dhpzMMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll
YTUzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk
NDVlNTgwYjItZGU1Ny00NWVkLWIwMmQtYTY4MGVmNzkxYWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfYyZAtawUVifjklJaaM9U9Vd5Zr3SCKvJHp
D5/ak130s1289lXbExhdtUj2Uxwc+JAm/w5TMM+jsCHUQrsPIiK/JqEqh/J73JPY
roefnBwC+nKMzwZW/NNgwb9KWwrfT3P/FnMiPocvhwtXUGzyGbrBor9zV1Lb4qI+
JlKUvpv19XtkHuw0iox1tqg9fi6xF64N1zTz7HAQ4pCtQ2av3Ty09ULMMuNdBofs
hMhyv3gfArxWZ7lPiQ0TWwW66sYJSHtDHLSxj2i5j+2kjncSQ0Y6EPKRbk8CSt6R
Z7WwLRRMFTONN0uWlFKSvB9Dvw/hctaJQ44da8fBNnjtGLmCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCAqr7EcmczUv0pzv48ukUELz8uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw
N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvMGQyMWVmMGQtZWFkYS0z
N2RmLWJhOTUtNDcwZDk3MGY2YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx
MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5
ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1
OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdSDyWpy+GB/t9G8Wu1N8lJdtxg5KG9jyEeUK+Pc6gAw/nlb1HsXng/
klW6xx0YeLJKorvNeCJzZnODeIJvhnMYQC0UAAwNyFCVQ80qJRu5CZoX21L8m1Ww
lSzH8ZsBTf8yxOn7DAxousNtN1ieBZ3/x0tZWuw0WQJYd//MZ0kmB/hryrwy4ZLY
m/oMOki9tw5OSDHAsG6mZCVkY6Nfg6N3rXVA788cBQY9FR+pl7VwwoXdR4qlIwpq
n9rbDTym84X3aRaO2vgf/p2NUK8h+ZJiXiiwxoCfoVpO9oG0jjycV24hy8L0J8HX
SLAR5gKVfAtn/dOsIu+rpAOqGBBXN20=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:56 2026 by rpki-client