This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa
File:                     2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa (raw, json)
Hash identifier:          Waz/nM2HLpI0sLdIws8kG4obV3a3Jxzn9WYI428NjLo=
Subject key identifier:   87:66:22:81:69:1D:17:09:A9:20:6C:EF:53:BE:65:2E:85:A9:65:D2
Certificate issuer:       /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
Certificate serial:       010D0C9F4328584C93D18D0BC291A784495B1F10
Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     16509
IP address blocks:        199.165.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:8d:0b:c2:91:a7:84:49:5b:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=3730dcb3-73e8-4ad3-81fc-322bb16c1c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:69:f0:02:8a:b0:4b:54:f0:1b:fd:03:89:
                    ff:d8:7c:0b:71:ae:50:16:97:93:3f:48:7f:d1:e8:
                    c3:12:56:8a:a1:29:76:e3:82:50:3a:1b:e2:c7:49:
                    b3:a7:7f:b4:51:f3:a2:8a:f3:e2:f9:89:fc:29:99:
                    79:4d:e2:37:d0:55:c9:e0:0a:18:35:2d:f4:9c:d9:
                    e6:5b:6d:d2:ec:0d:f9:76:56:61:1a:14:f0:15:35:
                    04:90:48:25:02:86:c9:8e:08:66:04:d1:a0:95:aa:
                    cf:19:cf:6e:52:7a:e9:91:95:18:a1:a8:50:93:5d:
                    a2:25:09:1a:9c:7b:e1:44:4c:05:0c:d3:93:41:d3:
                    a2:99:9b:b1:d5:d0:5f:07:4b:3b:26:5a:e3:71:f5:
                    a9:31:ea:d8:58:98:74:c0:75:6c:2b:6f:9c:d2:60:
                    60:53:de:a1:a3:71:68:ec:e1:c8:ce:e1:c1:56:12:
                    da:8f:24:b4:5a:72:94:7e:d9:fe:d7:2f:62:a9:d1:
                    fa:67:9d:96:dd:b6:a5:32:f0:13:e9:86:d6:15:7f:
                    55:95:2f:c5:fb:13:56:5d:61:30:57:35:37:ac:de:
                    ea:b3:88:21:b0:8e:0e:87:ef:b4:d9:f0:3a:0a:d2:
                    7a:db:56:56:68:eb:54:f3:12:80:56:3d:27:e5:6a:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:22:81:69:1D:17:09:A9:20:6C:EF:53:BE:65:2E:85:A9:65:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl

            X509v3 Authority Key Identifier:
                keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.165.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:d4:d5:07:bc:c5:3e:29:5c:40:ff:44:07:e4:94:87:96:
         2b:a8:52:8a:6c:db:15:77:25:51:aa:e1:f8:20:cc:bd:cf:f3:
         ae:18:e7:6a:6b:e6:7d:e7:4b:88:40:00:66:23:7a:23:a9:e0:
         68:52:af:f0:87:d4:6c:63:1a:01:f4:ca:ec:9c:e3:a5:2a:26:
         c6:5a:21:4b:69:92:a2:d0:f8:fb:6d:3f:71:42:2e:6c:98:e7:
         97:b0:9a:f3:74:c6:0c:48:eb:2a:85:87:6e:e5:b9:25:93:ce:
         d0:1b:79:80:66:69:01:15:ce:64:5d:ad:d3:d4:91:fa:62:e7:
         96:72:e1:5b:22:6a:74:ce:7f:01:90:94:eb:a3:c7:df:e9:ec:
         88:38:a7:4b:3a:85:17:c1:e5:9c:46:09:0b:40:d1:52:31:09:
         b9:9a:bb:ea:2f:88:d7:17:9b:4e:d2:d9:84:93:b5:d3:07:a9:
         4e:7e:08:33:22:83:46:85:75:63:24:ac:c8:3f:bb:4d:ae:0b:
         a5:a7:cb:9b:03:3a:59:0e:a6:dc:08:14:d9:57:f3:52:5d:ff:
         32:65:38:2b:79:e7:5d:fa:7c:ea:22:eb:99:d1:9d:3d:f4:d2:
         a5:88:36:22:12:d5:94:19:a8:f5:8c:9c:c2:81:93:1d:e1:c1:
         38:46:70:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:23 2026 by rpki-client