This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c9871969-a1f4-3695-9150-01346c013565.roa
File:                     c9871969-a1f4-3695-9150-01346c013565.roa (raw, json)
Hash identifier:          GGtIT/8ay1uaABX3MEkN+GXixFwWkh/s+xwccXpWy8E=
Subject key identifier:   72:FB:D1:8D:E9:EB:8A:F4:A1:4C:9F:28:47:F6:3F:1B:9A:7A:97:E8
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584C41767C7426926A336DC58280
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c9871969-a1f4-3695-9150-01346c013565.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     23473
IP address blocks:        153.33.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:7c:74:26:92:6a:33:6d:c5:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=fdea7943-6bbd-4b98-b454-a778eb9e655b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:c1:2f:70:1c:b2:8d:b8:02:f8:10:cd:5d:
                    6e:7a:56:86:19:93:5d:25:ff:5a:88:92:8a:1e:da:
                    96:19:f2:83:e3:0d:1e:20:50:41:0f:b2:0b:a1:ce:
                    d6:02:75:1c:db:cc:ef:cd:2d:e9:97:92:3c:bb:e8:
                    e5:e1:bd:51:7d:49:57:31:46:1a:37:98:d7:9e:75:
                    7f:75:ee:c0:58:88:47:0f:88:11:90:7e:33:9e:0d:
                    f5:09:fc:ea:1c:54:ff:81:5d:58:cf:a8:77:dc:aa:
                    60:7c:7d:dc:5d:3b:dd:3c:e8:2f:a3:d9:48:ec:53:
                    35:61:0c:2d:e7:21:29:26:87:00:e1:de:e3:a1:ca:
                    61:bd:21:4d:95:55:c0:b9:20:9d:e7:5a:55:ab:8c:
                    bb:dd:ee:11:0f:d3:75:ff:f4:eb:54:d9:ac:2b:77:
                    81:09:87:d4:e7:26:a2:58:f3:06:e0:b3:38:41:0e:
                    e7:fd:67:24:4d:de:58:cd:0a:cf:14:36:4a:d5:cc:
                    66:bd:2f:b1:13:0e:07:f3:63:0f:9a:ad:9c:31:2d:
                    e5:37:77:b5:ab:70:43:b4:9f:c8:44:d0:00:84:6c:
                    82:7b:e8:b9:0b:10:01:71:44:2b:f6:6d:61:37:84:
                    a5:a9:76:46:c2:8f:74:ea:0c:6a:cc:b9:32:fe:c8:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:D1:8D:E9:EB:8A:F4:A1:4C:9F:28:47:F6:3F:1B:9A:7A:97:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c9871969-a1f4-3695-9150-01346c013565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5c:16:9e:0c:c3:cd:f2:cd:31:ec:f7:7c:9e:29:1a:9a:9c:
         15:7a:f1:27:e2:42:de:82:cf:c8:c7:4c:da:84:c6:2a:16:87:
         e9:d6:09:30:5f:6e:81:70:cc:3c:65:3e:6e:ba:d3:94:c4:51:
         01:70:65:d1:a6:8f:ea:08:02:42:47:32:50:1a:0b:d9:02:2c:
         3d:a3:59:18:f0:15:2f:f8:ce:2b:2e:14:37:33:01:bb:db:f2:
         68:be:fc:9d:fc:8f:ba:6d:9a:c8:96:8d:a9:7e:2c:1a:a8:c4:
         a8:4a:f6:4e:d0:1e:57:ad:6e:13:e5:cb:fa:82:73:95:d8:5c:
         3d:eb:c2:1e:03:57:e3:4b:ad:9a:fc:94:e6:8e:93:75:52:12:
         ed:ec:35:b4:67:cd:a6:1b:b1:93:08:47:f0:e4:2e:18:7d:de:
         31:4b:6d:09:f6:10:37:e0:04:df:fc:54:49:99:93:36:7c:6d:
         51:ac:ae:61:c3:9e:30:75:a1:d6:51:62:53:f4:da:5a:e3:ec:
         43:2f:de:60:45:ab:ed:e2:2d:9a:c2:23:73:50:e7:37:28:67:
         70:46:67:e2:09:89:45:8b:45:cd:7d:26:0f:38:46:c8:04:d4:
         66:f9:e8:10:b1:fb:9e:a5:34:c0:83:71:6c:5b:1e:8f:bd:e6:
         fa:c2:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:44 2026 by rpki-client