This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
File:                     d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json)
Hash identifier:          TsdBbXVNgll0xcvGfZpbS5hXeuPAe00znEfjAfzDTeE=
Subject key identifier:   57:DC:7C:78:82:91:F6:F6:F4:42:99:2D:63:A5:59:26:55:06:49:BB
Certificate issuer:       /CN=7b840891-ef20-464d-970d-ffec736f7949
Certificate serial:       010D0C9F4328584C9536D7B32A73B06272CEB000
Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     30500
IP address blocks:        74.123.68.0/22 maxlen: 24
                          198.134.28.0/22 maxlen: 24
                          208.77.196.0/22 maxlen: 24
                          208.123.208.0/24 maxlen: 24
                          208.123.210.0/23 maxlen: 24
                          208.123.212.0/22 maxlen: 24
                          208.123.216.0/22 maxlen: 24
                          2605:e680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:36:d7:b3:2a:73:b0:62:72:ce:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=6c9cd30b-ec9e-46f6-85b6-8796684c59be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:79:25:41:c9:ba:88:a3:7d:2b:75:46:bb:b1:
                    c1:fe:65:08:9d:85:6f:09:f2:9d:45:1a:2a:f5:62:
                    28:20:34:d2:7d:df:04:c5:85:04:75:37:6e:9e:7e:
                    b9:b1:31:9c:5c:bb:68:6a:30:1d:0d:aa:cc:d4:31:
                    25:2a:be:93:be:5f:8a:b2:ab:71:db:fa:26:54:fe:
                    9e:e0:67:e8:73:ea:27:fe:c8:7c:16:43:54:20:05:
                    5e:d9:fd:1a:7f:7c:c6:ae:57:09:f0:e6:74:2d:96:
                    b7:42:35:d8:0e:7a:af:46:27:33:85:8a:21:6e:46:
                    0a:ea:79:7e:25:a0:a6:e5:6b:6d:6a:0b:b0:12:59:
                    4f:9d:c4:c3:be:26:1e:95:3d:97:38:3b:e6:85:0b:
                    2b:6a:26:76:11:6e:c3:e9:0f:fa:03:eb:c0:4a:52:
                    16:8f:b5:56:a1:43:75:42:01:a6:8e:a4:57:06:94:
                    d3:41:bf:4f:03:69:43:04:14:57:a5:f8:c3:4b:6f:
                    34:4a:37:4b:4f:cf:ea:01:fd:f8:c8:92:93:f8:c0:
                    a4:67:d6:e5:5c:a9:05:cc:db:ba:a7:20:26:71:3d:
                    50:80:17:3c:16:0d:3c:f1:23:07:37:96:d7:b7:f9:
                    48:19:51:d1:38:29:e8:4e:99:08:65:0e:b8:42:71:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:7C:78:82:91:F6:F6:F4:42:99:2D:63:A5:59:26:55:06:49:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl

            X509v3 Authority Key Identifier:
                keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.68.0/22
                  198.134.28.0/22
                  208.77.196.0/22
                  208.123.208.0/24
                  208.123.210.0-208.123.219.255
                IPv6:
                  2605:e680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9d:07:67:ea:31:5e:3a:5c:1f:19:04:f9:9f:4a:53:63:8a:
         05:9f:e8:e7:9b:34:41:8b:d5:81:f2:a9:c8:f7:ef:b2:73:e0:
         73:f8:cc:32:f0:e2:f9:1a:5f:76:03:1e:da:e3:03:a7:e2:e9:
         86:e2:29:b8:0f:2f:b7:76:a8:af:5e:ce:4c:1a:64:a9:0e:52:
         41:5f:3d:6c:91:b1:e6:c0:a1:4b:55:95:b2:6a:3f:a2:1f:37:
         65:49:ea:00:27:a9:3d:25:88:2b:f8:3a:6a:6a:10:75:97:bf:
         b4:bf:d2:b4:fe:e8:12:5f:b5:8d:04:cc:1c:9d:14:ac:9e:db:
         ab:c1:9c:e3:d8:3b:20:cd:40:63:cd:cb:95:77:b5:b8:c8:8e:
         cf:4e:3b:dd:28:b3:c0:72:a2:22:99:3e:4b:0a:31:f8:e8:56:
         41:7c:6e:d8:4e:6a:9d:b7:a6:c4:97:40:c9:2e:bd:55:43:3c:
         48:d3:df:f9:1b:54:1a:c4:b7:ec:f7:a9:fc:bb:ce:b8:97:00:
         01:06:8a:a2:d7:83:d7:8a:3b:89:ef:09:56:ba:84:50:26:ca:
         23:6b:b8:6e:50:a8:98:55:88:d3:ad:77:7c:2f:bf:77:ef:6e:
         6e:55:21:c0:46:75:0a:a2:b4:87:70:44:85:e0:db:f5:04:bd:
         8e:7e:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:29:18 2026 by rpki-client