This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
File:                     b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa (raw, json)
Hash identifier:          ya9/E/ghDPczN2uOXbJdJnc8KCMgTfy1cD7Zqlg9Zg4=
Subject key identifier:   49:01:2C:1F:E6:4F:25:F8:C6:F5:F8:75:19:49:2B:F4:DF:7D:60:F5
Certificate issuer:       /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Certificate serial:       010D0C9F4328584C5A9691CACF64DBAE0A3A9700
Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
Signing time:             Tue 30 Dec 2025 02:00:30 +0000
ROA not before:           Tue 30 Dec 2025 02:00:30 +0000
ROA not after:            Mon 30 Mar 2026 01:00:30 +0000
asID:                     60171
IP address blocks:        206.168.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:96:91:ca:cf:64:db:ae:0a:3a:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
        Validity
            Not Before: Dec 30 02:00:30 2025 GMT
            Not After : Mar 30 01:00:30 2026 GMT
        Subject: CN=eda7c7a4-b288-48f2-80ee-713c054e66c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:a9:c8:34:93:1e:94:30:b8:bf:a8:f0:20:
                    36:34:23:69:c8:ed:11:47:f2:b9:29:7f:98:4c:34:
                    4f:26:56:e9:d4:c9:50:38:53:10:93:cf:95:14:08:
                    07:71:eb:d1:74:7d:65:cb:14:d8:9f:83:ec:d0:d0:
                    a6:a2:63:60:8b:4f:60:86:6f:0c:20:b2:0d:41:2a:
                    d8:09:82:f5:c5:5d:b0:f7:2b:55:53:e8:94:62:29:
                    dc:3a:11:27:9d:98:f3:22:d3:c2:52:6a:91:fe:d6:
                    ef:2b:58:41:b6:ea:cb:74:ac:99:35:70:56:e4:a4:
                    ae:75:09:d7:bf:64:84:a0:23:93:61:c2:37:d9:02:
                    b4:d2:83:6c:99:42:65:6c:d8:6d:ad:34:47:a1:cd:
                    94:4e:68:09:2b:4d:23:a2:dc:26:ea:95:34:96:c2:
                    61:d8:5a:d7:09:0e:f8:51:f0:22:38:1e:f0:8d:81:
                    a5:45:df:38:16:d1:22:51:6f:f1:a7:33:2c:42:aa:
                    f7:40:17:48:3a:a3:d4:fb:d5:d0:a6:ca:99:91:01:
                    a4:c6:b5:1c:6e:d9:3e:f2:c9:49:2d:58:47:2f:fe:
                    a1:cb:51:5e:59:ce:01:22:ae:f5:a2:43:67:19:36:
                    bc:31:22:69:bd:26:f4:02:d5:05:c4:67:ee:97:f4:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:2C:1F:E6:4F:25:F8:C6:F5:F8:75:19:49:2B:F4:DF:7D:60:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl

            X509v3 Authority Key Identifier:
                keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:45:a2:c8:25:e3:d9:04:a8:23:42:16:14:1a:02:b6:ab:22:
         c8:d6:55:df:68:78:e2:f7:ec:02:4a:68:83:cf:29:0f:a3:c6:
         2a:30:89:86:7c:02:f6:fb:c2:c5:d4:93:0b:c8:41:22:d2:e0:
         b3:2e:2d:20:6f:da:75:9d:b1:36:08:07:e5:4c:70:8c:eb:84:
         57:71:57:9e:14:73:24:1f:fd:7c:31:7b:d0:51:3f:a8:59:c9:
         e9:a0:80:d7:8f:25:bc:62:46:68:20:03:5b:79:3e:51:10:a8:
         4a:7f:22:e7:e1:cc:fe:7f:00:19:ed:34:74:33:bd:0f:e0:e9:
         10:38:3d:ca:49:a4:73:f8:57:4c:90:b4:e6:8b:c0:67:b8:86:
         f6:21:61:99:52:22:73:09:e6:99:6c:7e:4c:92:d9:23:bf:78:
         83:c9:13:04:d3:78:6e:d0:2f:c8:04:6b:ce:54:93:be:eb:ea:
         af:08:3e:5c:3d:a0:2f:12:75:d6:ee:18:a6:e2:d3:13:7f:54:
         77:27:7f:35:48:d4:64:47:9f:44:e7:97:d2:68:72:14:51:b5:
         9a:88:b1:62:b3:51:8e:f6:d4:c2:31:ae:43:a7:5a:a6:f6:75:
         8f:88:2b:06:a8:4f:0e:f8:3f:70:68:52:65:98:d3:dc:50:3c:
         45:c3:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:21 2026 by rpki-client