This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f432bcf4-5014-3155-b596-3dcf20298fbc.roa
File:                     f432bcf4-5014-3155-b596-3dcf20298fbc.roa (raw, json)
Hash identifier:          p/WBTFOrbNowJv/i3uydfjHDNO/Wedl/GzDSBk/G2nk=
Subject key identifier:   8A:6B:BE:BD:D6:3E:C2:3D:79:DC:D9:46:53:74:B7:C4:70:0F:A1:26
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584C5A967FF3936913BF9BF80248
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f432bcf4-5014-3155-b596-3dcf20298fbc.roa
Signing time:             Tue 30 Dec 2025 02:00:30 +0000
ROA not before:           Tue 30 Dec 2025 02:00:30 +0000
ROA not after:            Mon 30 Mar 2026 01:00:30 +0000
asID:                     23473
IP address blocks:        153.33.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:96:7f:f3:93:69:13:bf:9b:f8:02:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Dec 30 02:00:30 2025 GMT
            Not After : Mar 30 01:00:30 2026 GMT
        Subject: CN=dbef96ac-aa13-4a87-8dc6-3eb1ec5099a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:94:96:b4:42:bd:f4:2d:5e:60:c1:da:fb:
                    16:75:50:e2:a0:6b:c4:a7:12:ee:f0:a0:29:3e:52:
                    16:b4:3c:38:55:48:6e:a3:34:51:e6:c0:8d:07:a6:
                    43:8c:16:f0:e2:b4:02:66:16:b2:21:17:82:15:74:
                    62:d8:4b:c4:9b:00:00:39:64:5d:71:73:8d:99:5e:
                    25:29:ef:bb:2b:52:c8:7a:1a:43:6c:40:1e:85:00:
                    05:5f:bb:c0:2a:46:be:aa:c6:e5:55:52:0d:62:30:
                    c6:2a:f1:3c:56:08:d7:af:cb:59:62:1e:e4:34:24:
                    69:43:c2:82:0e:72:33:fd:4f:a3:a4:4d:a3:7e:ff:
                    27:ff:4b:f7:f8:68:1a:9a:b6:e0:cb:3f:01:2b:43:
                    05:b0:13:15:b3:07:1a:c9:af:0d:85:cc:97:86:fc:
                    8b:62:2c:ae:11:23:db:cb:91:90:3f:33:5a:d1:4b:
                    ae:ed:74:65:50:1d:e3:00:ea:e2:8d:ab:cf:19:71:
                    7f:03:aa:e6:c4:2a:f6:53:e5:26:df:eb:d1:75:8d:
                    8e:72:9b:52:93:0b:29:55:33:66:b3:36:c6:60:9c:
                    42:3f:ea:37:f3:2e:59:17:89:5d:c5:46:87:dd:b4:
                    86:56:84:f5:1a:9b:6c:8c:77:a0:26:79:f4:f5:e9:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:BE:BD:D6:3E:C2:3D:79:DC:D9:46:53:74:B7:C4:70:0F:A1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f432bcf4-5014-3155-b596-3dcf20298fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:d1:59:86:1f:21:92:40:02:c9:e6:ce:dd:e1:f8:15:9d:
         81:72:d2:1a:14:90:d6:7a:70:b0:b9:68:9d:fb:84:0d:c3:7f:
         e5:0e:6a:b6:ee:a5:5b:2b:e7:48:8d:ae:05:73:05:a0:78:d2:
         3d:cc:83:15:54:d7:54:ab:e2:8a:d7:6c:8e:36:de:6c:f6:56:
         7b:15:f8:44:fe:af:62:ef:c2:0d:c3:32:12:cc:fb:80:24:e0:
         d4:45:81:3e:fe:7b:bf:7a:3d:9e:ca:b4:12:06:8a:02:d5:40:
         a8:96:b0:e2:d1:d7:84:5b:94:52:dd:90:65:5b:fc:a9:27:20:
         0a:8c:df:13:09:24:fd:af:a9:69:f0:bb:75:c0:0e:d2:46:f3:
         da:c3:2f:f6:e3:bb:58:33:8e:53:dc:7d:a1:82:48:ba:8e:32:
         03:9d:79:72:b3:cb:30:89:d1:db:20:7c:f2:ab:d1:87:0d:73:
         9b:8e:5e:01:f2:9f:f2:91:cf:df:8a:a3:d0:d0:97:84:3b:c7:
         66:14:60:45:26:e9:05:2e:1e:e9:9b:47:8c:c2:ac:42:fd:bf:
         fb:41:07:97:00:20:1c:67:ed:95:3e:df:d7:95:58:d6:32:ee:
         53:c5:5f:12:b3:19:65:bf:80:95:12:cc:e8:eb:6f:5f:f9:b9:
         76:3d:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:16:41 2026 by rpki-client