This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
File:                     9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (raw, json)
Hash identifier:          PuOhUazhCwO/erB60O9CtwBCyvIQy0kH++ql/3L/IlE=
Subject key identifier:   57:9F:1D:47:25:A2:79:EF:A0:6F:19:7E:B3:2E:CF:44:60:07:C7:32
Certificate issuer:       /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
Certificate serial:       010D0C9F4328584C9C31B7B407715302F8D0F580
Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
Signing time:             Thu 22 Jan 2026 14:00:37 +0000
ROA not before:           Thu 22 Jan 2026 14:00:37 +0000
ROA not after:            Wed 22 Apr 2026 13:00:37 +0000
asID:                     54579
IP address blocks:        65.255.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9c:31:b7:b4:07:71:53:02:f8:d0:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
        Validity
            Not Before: Jan 22 14:00:37 2026 GMT
            Not After : Apr 22 13:00:37 2026 GMT
        Subject: CN=9098f84f-81f4-4ea4-9fc9-57fa88222f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:c3:ec:66:24:9a:28:e7:dd:8d:05:c7:1c:
                    cf:61:38:e9:35:45:5a:5b:2c:31:f1:55:5e:48:55:
                    ce:5e:40:cc:0d:42:62:eb:73:a0:83:3c:4a:1e:05:
                    7c:92:04:17:ec:61:df:34:6e:d8:39:3a:3d:50:82:
                    06:a7:1d:f9:da:54:01:28:4a:a8:21:7b:99:3a:fa:
                    e9:90:4c:eb:76:d3:41:2b:fa:ad:3c:36:a1:3c:ec:
                    d8:20:9b:6b:df:15:ca:d1:c6:3f:9e:79:41:8a:43:
                    0b:01:ce:6c:70:ce:87:1e:8d:34:c5:a9:a5:fe:54:
                    4e:c5:a5:f1:c8:99:02:de:89:1b:02:be:66:68:7b:
                    8f:01:f5:63:9d:91:67:6c:4f:48:e0:d9:6d:85:76:
                    58:a9:de:e6:cf:b0:d5:d5:5f:14:a7:5f:d2:2e:ae:
                    e4:60:8d:c2:88:14:ab:9f:28:45:1f:97:e2:89:bf:
                    3f:99:2f:27:9a:77:0f:15:40:45:ad:0c:13:0b:5b:
                    5e:25:1d:87:6b:42:93:e3:77:32:25:b2:4e:3b:7f:
                    41:3b:8b:56:9e:49:fa:85:8a:03:3c:c7:6e:64:9c:
                    8c:6d:cd:f5:48:d4:b8:48:d6:cb:0d:29:be:42:40:
                    4f:6c:39:69:78:78:2a:01:cf:90:f8:42:23:4f:55:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:1D:47:25:A2:79:EF:A0:6F:19:7E:B3:2E:CF:44:60:07:C7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl

            X509v3 Authority Key Identifier:
                keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.255.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:39:7f:f1:f3:f7:6b:98:6c:98:c7:78:4d:9f:56:a3:88:ba:
         8a:fb:53:05:a9:4d:37:74:e9:fa:ad:ea:17:f8:cc:3c:10:a2:
         22:bc:38:a2:c8:d7:0d:64:4a:cb:dc:e6:97:1c:95:b5:97:75:
         fd:d5:47:80:ce:59:78:8b:b1:93:c0:fb:e8:63:3f:75:11:02:
         7b:19:c5:8b:9f:61:04:7f:c6:cb:01:16:04:ce:7f:53:94:26:
         d3:4e:02:ae:30:9d:60:63:4d:56:72:d2:56:09:27:ab:3a:d4:
         6b:2b:7f:87:f9:29:9b:e0:7c:de:f6:16:2b:b9:9d:a1:fe:d3:
         6c:da:e1:df:03:c6:33:d1:58:07:b5:b0:5d:d2:e2:bd:42:5f:
         9c:da:58:f3:0a:09:6e:09:4b:2a:8f:9c:65:cb:b9:25:04:a9:
         ea:2d:c3:96:4d:05:5c:49:b2:72:57:1f:c9:6f:5d:66:d4:6a:
         7c:af:92:a0:01:9a:2b:08:76:25:37:5a:fa:a1:dd:dc:cc:f9:
         b4:36:81:af:4a:e4:6b:f2:f6:b1:3b:ca:4a:91:a0:a6:ce:00:
         f1:b7:ca:4f:4a:fb:58:40:11:a3:9b:72:87:3e:8b:d7:67:b4:
         8e:ad:89:36:86:2d:30:2d:e9:98:ab:12:54:02:5c:3e:1e:82:
         df:38:83:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMbe0B3FTAvjQ9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5
YTNkMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk
OTA5OGY4NGYtODFmNC00ZWE0LTlmYzktNTdmYTg4MjIyZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQvD7GYkmijn3Y0FxxzPYTjpNUVaWywx8VVe
SFXOXkDMDUJi63OggzxKHgV8kgQX7GHfNG7YOTo9UIIGpx352lQBKEqoIXuZOvrp
kEzrdtNBK/qtPDahPOzYIJtr3xXK0cY/nnlBikMLAc5scM6HHo00xaml/lROxaXx
yJkC3okbAr5maHuPAfVjnZFnbE9I4NlthXZYqd7mz7DV1V8Up1/SLq7kYI3CiBSr
nyhFH5fiib8/mS8nmncPFUBFrQwTC1teJR2Ha0KT43cyJbJOO39BO4tWnkn6hYoD
PMduZJyMbc31SNS4SNbLDSm+QkBPbDlpeHgqAc+Q+EIjT1Vg+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFefHUclonnvoG8ZfrMuz0RgB8cyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1
ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvOWM4ZTE3YTAtYjYyNC0z
Yjk4LTkyZTctZmJkNDBmMWY1ZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz
N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk
OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi
YWM5ZDlhM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE05f/Hz92uYbJjHeE2fVqOIuor7UwWpTTd06fqt6hf4zDwQoiK8OKLI
1w1kSsvc5pcclbWXdf3VR4DOWXiLsZPA++hjP3URAnsZxYufYQR/xssBFgTOf1OU
JtNOAq4wnWBjTVZy0lYJJ6s61Gsrf4f5KZvgfN72Fiu5naH+02za4d8DxjPRWAe1
sF3S4r1CX5zaWPMKCW4JSyqPnGXLuSUEqeotw5ZNBVxJsnJXH8lvXWbUanyvkqAB
misIdiU3Wvqh3dzM+bQ2ga9K5Gvy9rE7ykqRoKbOAPG3yk9K+1hAEaObcoc+i9dn
tI6tiTaGLTAt6ZirElQCXD4egt84g9I=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:37 2026 by rpki-client