This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
File:                     f3a11e3c-29b8-3899-a1d3-970745a11a14.roa (raw, json)
Hash identifier:          nainyCHuDa0LUgFqaNqtP0C22L0BFHFK9dqI737oYP4=
Subject key identifier:   52:B3:08:4E:9D:8D:8A:7E:DE:CC:08:0A:7D:C1:A1:84:7E:16:F3:25
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584C4B3BD6D20DBD57671BB35C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
Signing time:             Wed 24 Dec 2025 14:00:40 +0000
ROA not before:           Wed 24 Dec 2025 14:00:40 +0000
ROA not after:            Tue 24 Mar 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        172.111.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4b:3b:d6:d2:0d:bd:57:67:1b:b3:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec 24 14:00:40 2025 GMT
            Not After : Mar 24 13:00:40 2026 GMT
        Subject: CN=5df45927-06a0-4d14-bb5c-12dbd0ef5c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:dd:f5:d7:0f:0b:26:1c:58:e3:1d:4f:30:
                    c0:1f:cf:9b:44:bd:c5:3e:30:82:b0:a1:70:ca:14:
                    17:f7:fa:84:64:74:51:07:22:71:f3:b8:42:7a:ed:
                    23:07:2b:26:0e:2e:fa:59:19:ad:66:2b:e3:fd:a1:
                    18:96:45:3d:31:ce:8a:0d:38:6d:96:e4:4c:2b:97:
                    91:ba:92:fc:5d:cd:e6:75:b7:6f:ee:53:06:ff:3e:
                    2a:36:86:e0:c4:5e:ac:7d:90:97:e3:c3:d4:3a:ef:
                    bd:ab:12:c3:6e:d1:e9:c3:00:f5:4a:cb:1a:f2:eb:
                    5d:8e:9a:e4:c2:4c:31:04:a1:1b:1f:f3:6c:ac:bc:
                    14:f8:f8:a4:42:ea:8e:2d:32:ca:cb:eb:af:a3:f2:
                    88:be:13:52:24:2d:73:f7:f5:a7:f1:74:15:54:a8:
                    42:49:45:9e:af:a1:de:d7:63:79:3a:88:a1:f2:0c:
                    51:9f:a3:ae:d3:aa:66:80:4b:73:f5:21:64:ae:9c:
                    43:ca:48:89:de:d1:d6:4c:1c:3b:6b:2a:c6:40:a3:
                    f7:65:fe:5b:8e:41:3a:45:f2:67:36:ff:d5:2d:1c:
                    a1:fb:e9:7b:67:b1:61:5c:94:ed:84:89:46:ec:46:
                    66:b3:0b:6e:25:4c:6b:a8:ef:69:3c:60:1f:16:5f:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:08:4E:9D:8D:8A:7E:DE:CC:08:0A:7D:C1:A1:84:7E:16:F3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:e8:fa:77:ff:33:ac:ae:6f:89:66:f6:0a:18:7e:79:bb:
         aa:15:dd:29:98:db:37:2e:6a:e9:ef:2a:f0:e6:c3:56:33:1d:
         5d:23:b6:ea:86:7d:d0:7c:36:2e:c9:a6:dc:b6:d9:0e:25:a2:
         88:d2:76:f3:b7:a9:51:2b:60:1b:0e:46:c7:12:38:b2:37:41:
         63:50:f9:6e:b5:c3:7b:a0:97:8d:96:e7:15:14:fd:65:b6:71:
         ad:45:f6:0e:c1:f0:7f:47:36:ad:2e:73:22:5a:7a:80:f5:82:
         b6:a1:3c:13:8f:b7:2a:a9:ed:f2:b7:85:e8:9f:9c:3b:b0:bf:
         63:f4:9f:fb:16:74:dc:90:9f:72:c5:89:8f:ee:96:bd:a1:38:
         ed:a7:a0:31:8e:23:6e:62:25:9d:99:cc:8d:c7:d9:15:fb:d2:
         fa:d8:92:76:c8:21:49:d8:1b:6a:05:df:d6:cf:d8:1c:e1:78:
         5e:da:97:79:01:56:60:6a:cc:57:01:34:b3:80:da:71:90:09:
         40:9c:7d:d0:76:e4:b5:c9:1e:f0:fb:c7:e3:db:35:dd:00:72:
         38:7c:d9:77:00:8f:c4:33:a8:89:b7:81:0e:25:24:6e:88:f5:
         2a:a9:6c:8d:4d:ed:55:d5:d3:79:93:7f:fd:2f:dd:b2:b4:4f:
         ca:b4:a8:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExLO9bSDb1XZxuzXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk
NWRmNDU5MjctMDZhMC00ZDE0LWJiNWMtMTJkYmQwZWY1YzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtbd9dcPCyYcWOMdTzDAH8+bRL3FPjCCsKFw
yhQX9/qEZHRRByJx87hCeu0jBysmDi76WRmtZivj/aEYlkU9Mc6KDThtluRMK5eR
upL8Xc3mdbdv7lMG/z4qNobgxF6sfZCX48PUOu+9qxLDbtHpwwD1Sssa8utdjprk
wkwxBKEbH/NsrLwU+PikQuqOLTLKy+uvo/KIvhNSJC1z9/Wn8XQVVKhCSUWer6He
12N5Ooih8gxRn6Ou06pmgEtz9SFkrpxDykiJ3tHWTBw7ayrGQKP3Zf5bjkE6RfJn
Nv/VLRyh++l7Z7FhXJTthIlG7EZmswtuJUxrqO9pPGAfFl9NNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKzCE6djYp+3swICn3BoYR+FvMlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjNhMTFlM2MtMjliOC0z
ODk5LWExZDMtOTcwNzQ1YTExYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTR6Pp3/zOsrm+JZvYKGH55u6oV3SmY2zcuaunvKvDmw1YzHV0jtuqG
fdB8Ni7Jpty22Q4loojSdvO3qVErYBsORscSOLI3QWNQ+W61w3ugl42W5xUU/WW2
ca1F9g7B8H9HNq0ucyJaeoD1grahPBOPtyqp7fK3heifnDuwv2P0n/sWdNyQn3LF
iY/ulr2hOO2noDGOI25iJZ2ZzI3H2RX70vrYknbIIUnYG2oF39bP2BzheF7al3kB
VmBqzFcBNLOA2nGQCUCcfdB25LXJHvD7x+PbNd0Acjh82XcAj8QzqIm3gQ4lJG6I
9SqpbI1N7VXV03mTf/0v3bK0T8q0qOM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:36:45 2026 by rpki-client