This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa
File:                     351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa (raw, json)
Hash identifier:          tQdA+aE9CAdTjZT+v+W30mfHqvqJ1UnluXhJlZUL9Qw=
Subject key identifier:   C7:E9:5E:A6:39:31:70:68:D6:CF:B7:F3:AD:63:BC:B0:89:68:AC:CF
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584C539BD039898E3834312AF040
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa
Signing time:             Sat 27 Dec 2025 14:00:38 +0000
ROA not before:           Sat 27 Dec 2025 14:00:38 +0000
ROA not after:            Fri 27 Mar 2026 13:00:38 +0000
asID:                     23473
IP address blocks:        153.33.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:53:9b:d0:39:89:8e:38:34:31:2a:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Dec 27 14:00:38 2025 GMT
            Not After : Mar 27 13:00:38 2026 GMT
        Subject: CN=85e9ef43-c1c9-4083-a70d-e93f49570bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:2e:a2:30:66:12:12:54:ba:93:b4:06:8e:
                    90:3a:56:5e:bb:08:e9:c8:c6:51:57:d5:09:be:97:
                    9f:26:0b:16:b1:6f:02:9d:d8:55:df:50:ce:60:4b:
                    ad:7a:68:f0:3c:cf:ba:be:b1:cf:b3:14:88:45:5b:
                    da:f1:65:91:83:69:85:f2:e4:65:5c:a8:04:b5:4f:
                    02:cd:9e:f1:3f:a5:b6:70:35:64:c0:11:6a:8e:a0:
                    fa:d0:fc:bd:07:26:0b:54:d0:d3:70:17:9c:00:aa:
                    ba:b0:02:dd:32:87:70:52:3d:99:4a:2d:62:7b:20:
                    65:31:df:3d:a6:6d:d4:34:4c:c4:11:e7:83:51:55:
                    9a:d7:4c:18:8b:e9:d5:9c:8d:f4:28:61:b0:9b:2b:
                    78:0a:bf:d3:55:49:e7:b0:d0:3c:dd:63:e8:e8:6e:
                    26:21:ef:b2:b9:fc:d8:3f:54:0f:c0:49:5f:b9:f7:
                    38:44:38:7c:4b:fd:f6:08:87:58:55:91:f6:ae:2c:
                    c5:ee:de:3a:07:5b:70:95:f9:8a:80:eb:16:72:73:
                    8f:b6:e7:dd:6a:32:13:dc:0a:7d:f7:13:20:4c:71:
                    30:75:bd:46:e4:f1:87:a3:f8:14:04:78:2d:b9:05:
                    92:8c:60:b9:b8:5c:57:a6:ab:54:b2:5c:f5:aa:e4:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:5E:A6:39:31:70:68:D6:CF:B7:F3:AD:63:BC:B0:89:68:AC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:80:78:95:bc:66:ce:95:29:e8:6b:54:02:b7:dd:39:43:
         eb:62:46:b2:68:5e:03:d2:b1:9a:43:4c:5a:7f:45:1d:77:bf:
         e5:f2:a8:7a:1b:85:b1:cf:13:8a:dc:cf:2d:bb:d5:84:53:5f:
         8d:af:64:0f:91:9f:1f:21:8d:aa:1d:8c:cd:c2:03:87:d3:93:
         35:2e:6a:bb:9b:34:d8:01:a6:9a:f2:8f:bc:7e:05:75:b9:8c:
         2d:6a:28:aa:32:f3:e2:89:57:76:c5:59:fe:2a:9d:9a:5b:49:
         49:49:c0:e6:46:ea:55:b8:45:47:4d:53:f3:29:a2:4c:47:ac:
         99:fe:17:71:26:2b:a7:e8:4f:a3:a8:77:cf:e9:b1:cf:36:cf:
         20:1d:5c:75:ff:09:a6:6e:3e:68:d6:4a:ab:15:e5:2d:3f:50:
         2f:4b:44:f7:80:e6:69:28:d3:77:0b:b1:9a:a3:2e:e7:8c:e6:
         86:b1:10:94:14:4f:a2:7e:45:e4:48:af:3f:c3:9c:fb:f4:88:
         3d:c9:00:1d:ee:1e:22:07:11:dc:cd:cc:5b:fe:35:c9:d6:34:
         19:d6:31:c8:86:0a:c1:95:2c:3c:fb:45:ed:81:1e:17:6f:e5:
         7d:ce:51:d7:a1:e1:c6:84:24:25:7d:1d:40:5a:27:ce:62:1d:
         92:63:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:16 2026 by rpki-client