This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa
File:                     3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa (raw, json)
Hash identifier:          tBOZr67wYWAtgU+TeQwL3FZrv/4EHIyQmGqlX5UpTD4=
Subject key identifier:   20:5F:22:D9:50:00:7F:26:2B:47:6C:B1:23:BF:F8:BE:A3:47:05:09
Certificate issuer:       /CN=1278dcae-79cc-43c4-b974-7a8df750630c
Certificate serial:       010D0C9F4328584CA0619FD23EFA273BB150AF38
Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     397550
IP address blocks:        208.91.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:9f:d2:3e:fa:27:3b:b1:50:af:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=cd2308cc-ff84-4d9d-885c-86445f295a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:a4:28:96:ae:1d:a6:ad:a9:aa:f9:8e:d0:
                    bb:29:09:75:bb:69:95:7b:5e:05:bc:36:f3:5e:63:
                    9c:54:42:08:6e:2a:95:d3:e3:18:80:92:4e:01:48:
                    80:88:bd:ea:aa:fa:1f:c8:fe:dc:73:b9:90:fa:31:
                    28:94:c7:e6:b3:05:28:47:c2:b1:91:06:2a:e4:4f:
                    38:4d:a9:d8:bb:7f:d8:17:f8:54:8c:cd:fe:b2:cf:
                    5e:eb:ce:ed:61:34:9b:71:d7:e4:f2:e6:d6:e3:60:
                    e5:5d:72:0e:f1:3a:a0:25:e7:9d:cf:0e:2e:cc:9d:
                    aa:97:5f:53:e8:38:c6:76:79:aa:ef:35:48:86:49:
                    3e:3f:7d:77:3c:a9:96:8d:a4:d2:30:c0:51:06:f1:
                    6d:32:c5:0d:0b:d7:e4:bf:90:4d:e0:9a:68:1c:e0:
                    43:fb:6f:ee:b5:34:4b:71:96:78:ac:11:86:44:9e:
                    5d:98:41:c4:8e:02:49:2b:af:b9:73:14:de:16:43:
                    57:55:75:fe:d9:12:e7:9d:92:24:81:d1:d9:90:33:
                    56:37:da:18:1f:38:46:26:b4:fd:68:05:0b:d7:77:
                    9a:73:41:93:5b:47:36:79:66:b7:17:bd:d7:ef:9b:
                    15:16:28:34:01:76:ed:c4:86:58:1a:4e:a9:60:dc:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:22:D9:50:00:7F:26:2B:47:6C:B1:23:BF:F8:BE:A3:47:05:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl

            X509v3 Authority Key Identifier:
                keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:46:ac:8b:db:e3:d5:7a:ad:52:c7:9f:41:39:1c:04:45:45:
         00:c4:db:ea:2c:51:c0:53:42:76:71:97:e6:c0:49:be:7f:6f:
         28:02:f7:cd:93:75:2e:3e:41:64:4f:43:31:1e:2e:06:71:79:
         4e:e8:fd:6a:ae:f6:2b:35:e0:cd:8e:d0:e0:f3:f4:84:e8:5e:
         68:3e:fd:79:db:5a:a2:77:4f:07:a3:f7:1c:14:ff:1a:6b:6c:
         5c:6f:66:8f:10:0e:cd:aa:02:b0:85:7a:05:a0:3b:45:57:a6:
         7e:96:fd:73:a7:0d:84:12:95:70:65:48:46:60:23:1e:56:14:
         88:85:11:05:79:3d:3d:10:7d:86:3c:b8:8a:db:9f:27:5c:59:
         fa:be:6f:cc:7e:b4:2a:1c:2b:6c:31:e9:36:89:3b:87:92:41:
         f9:ef:63:89:16:e2:9a:25:32:35:c5:cd:74:96:57:ee:94:99:
         fa:27:05:2b:72:73:ae:79:17:52:1b:2c:8f:1b:f8:7e:f0:d6:
         88:3a:14:2d:b2:c5:56:34:e1:17:08:3e:bb:73:57:a0:ab:d2:
         21:13:f4:1e:67:15:9a:a1:37:64:69:7c:e1:83:60:6c:b4:87:
         de:10:89:94:d0:7e:b0:5f:83:d4:87:d1:10:2f:cd:26:47:c7:
         73:68:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:13 2026 by rpki-client