This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa
File:                     f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa (raw, json)
Hash identifier:          rUaAKq0H3SdAv8xMH0nUYacrlg9OaJd6q6Dh+AkxC8E=
Subject key identifier:   09:10:0E:E8:67:75:5B:5E:01:3A:37:7A:A7:4B:B6:F1:D4:1C:03:E7
Certificate issuer:       /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Certificate serial:       010D0C9F4328584C7D7C243C87A08497633D9C00
Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     54309
IP address blocks:        66.33.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:24:3c:87:a0:84:97:63:3d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=e4b8fa42-1db4-41b7-a75f-20e2e7ee38b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1b:60:c1:15:c5:dc:3b:a0:4b:e8:92:30:80:
                    9d:bf:86:6b:ae:66:17:b5:03:5a:e0:da:bf:e7:34:
                    e3:4e:9e:b4:fc:d0:b5:48:bb:eb:e3:5d:0e:5e:ce:
                    89:12:94:b6:95:59:6e:45:14:42:2a:3f:eb:39:d1:
                    9b:6b:30:92:55:6e:ec:ab:a5:39:ce:c0:b1:fe:0e:
                    3c:38:3c:dd:2b:18:6d:43:b5:c2:58:bc:a6:d5:13:
                    c1:5f:be:3d:dc:58:ef:b5:42:e9:66:b3:1a:06:38:
                    db:4f:46:36:a6:cc:b3:f0:de:7a:1d:11:84:d3:7b:
                    3f:bc:0c:73:47:0c:d5:81:9f:90:fd:e2:83:a7:e9:
                    72:88:78:5a:b9:ba:dd:4e:d2:76:0a:4a:cc:06:92:
                    e0:6c:82:03:19:bc:18:3f:c1:06:72:2d:d8:a4:85:
                    81:5c:27:c1:5d:4b:9b:59:75:8e:df:56:0a:71:65:
                    10:ee:fb:25:fe:38:84:23:f5:74:48:9e:82:b8:6c:
                    04:c0:51:62:02:b0:4c:d8:bf:ba:e4:67:51:46:8c:
                    ca:4b:83:a3:2b:5c:81:83:68:dd:a3:fb:a2:0c:56:
                    6b:5e:3d:bd:86:47:e4:f5:01:42:1b:dc:76:75:39:
                    bf:8f:96:ca:11:37:09:7c:6f:e4:23:88:63:4d:fc:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:0E:E8:67:75:5B:5E:01:3A:37:7A:A7:4B:B6:F1:D4:1C:03:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl

            X509v3 Authority Key Identifier:
                keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:36:ce:6f:16:03:55:1d:2e:64:af:14:93:8c:26:d2:0e:58:
         07:f6:03:19:45:a0:93:56:45:c7:b3:0a:de:0f:a1:6a:f9:65:
         39:81:36:e6:d2:6e:ae:ca:99:86:6f:4b:ac:2c:c4:79:8e:b1:
         73:7a:04:7a:c4:e0:87:cd:63:3f:4e:83:74:7d:3b:aa:65:2e:
         24:74:8f:7b:8b:2d:51:f2:9f:e2:05:0b:00:6f:9c:36:ec:cf:
         f5:25:bd:dc:58:db:38:2e:7a:f0:30:93:98:d2:59:08:2b:ea:
         37:40:ff:3f:ae:2d:a3:a2:8e:85:a2:e1:db:7d:f9:ea:1e:73:
         00:6a:28:26:f2:76:1a:44:da:af:98:c1:73:72:3f:07:30:d4:
         3a:8d:9a:13:91:c4:2b:b2:d9:01:2e:01:4d:89:e2:47:e4:03:
         5a:7e:a6:3d:66:d4:77:d5:a6:1f:94:bb:16:0f:45:65:ff:c6:
         d4:b6:d2:a7:6b:30:85:31:f4:5a:e8:e3:02:37:ae:a1:17:d7:
         d4:ca:6a:31:2f:77:de:c6:21:f2:fb:30:96:c1:75:44:ea:f8:
         97:fc:f3:1e:90:0d:2e:0c:1b:11:8f:1c:9c:95:9d:ab:d0:e3:
         54:95:1f:ec:47:09:21:6a:06:55:89:b5:bb:62:dd:4a:6f:77:
         cb:32:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:50:58 2026 by rpki-client