This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa
File:                     cf09a183-7514-346f-a223-607c0b53d3ec.roa (raw, json)
Hash identifier:          MkuCoRGxR0PI4oo3Wz5gOG44p8edkzoX9M8peQyci/g=
Subject key identifier:   84:E1:13:5B:8C:A6:6B:DE:9E:90:36:C8:BD:A9:42:BF:0F:C5:1F:17
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584C99673C0DE9D00ED0C8F1FFC0
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa
Signing time:             Wed 21 Jan 2026 14:00:38 +0000
ROA not before:           Wed 21 Jan 2026 14:00:38 +0000
ROA not after:            Tue 21 Apr 2026 13:00:38 +0000
asID:                     16509
IP address blocks:        159.172.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:67:3c:0d:e9:d0:0e:d0:c8:f1:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Jan 21 14:00:38 2026 GMT
            Not After : Apr 21 13:00:38 2026 GMT
        Subject: CN=265957e0-6416-415d-bd31-60137de67b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:8e:24:3b:8a:50:b0:1f:23:31:69:97:59:
                    af:33:10:09:6f:98:2c:31:1e:49:42:5c:cb:dc:be:
                    28:1d:ca:08:5a:80:0a:c4:fb:14:b7:a2:b2:7e:7d:
                    ee:69:09:01:c6:c8:4e:3a:48:a8:08:ba:53:f1:7a:
                    0a:54:b2:3f:73:41:93:90:e1:65:80:4a:37:cc:68:
                    d7:fd:c2:00:63:25:98:aa:48:9c:7a:aa:40:70:2e:
                    40:95:ac:7b:36:44:32:e2:17:5b:a3:88:00:31:3a:
                    14:3c:9a:bf:11:f9:a4:35:0d:9b:22:e3:95:71:9b:
                    b3:ba:77:f5:2f:f7:8e:99:fb:93:20:1d:19:41:8f:
                    33:cd:83:0e:36:27:66:9a:18:3b:5d:f2:e2:77:86:
                    72:b9:06:93:ce:84:0d:03:02:90:ff:b1:e6:59:e1:
                    4e:ec:a3:82:ea:47:63:15:d1:66:f1:45:fb:b2:13:
                    a7:ed:e5:9f:19:2d:7d:ec:c6:4c:e9:5e:8e:46:c8:
                    aa:7d:9d:83:fa:dc:a2:a6:5e:51:60:2e:80:8c:de:
                    5c:e2:dd:80:7a:ce:01:c4:cf:f5:bf:c0:7e:d0:98:
                    1e:9d:65:27:38:cd:20:23:6d:a3:b4:09:ea:7b:37:
                    2d:40:5e:5a:27:b6:3c:1c:d8:3b:bb:ca:07:96:2c:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E1:13:5B:8C:A6:6B:DE:9E:90:36:C8:BD:A9:42:BF:0F:C5:1F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.172.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:f6:32:47:d6:b9:e3:51:8f:7b:5a:54:14:40:f0:08:cf:
         e9:99:a7:f3:8d:23:1d:d9:44:1c:c8:24:a9:fc:d9:ea:8c:89:
         fb:57:1c:4c:74:77:8a:52:ec:2b:da:f7:eb:2c:31:7f:b9:16:
         49:ca:ac:c7:6b:22:4c:d6:f6:16:78:ef:fb:07:54:f9:10:45:
         a5:f9:39:d5:64:c8:30:47:30:0f:0e:0b:79:4e:ea:9d:db:51:
         30:fa:65:2d:de:ba:9c:41:98:20:76:a7:cd:17:e0:e0:8b:9f:
         eb:ca:3e:5d:5e:be:4b:d2:76:89:5c:ef:97:45:15:a2:27:8d:
         73:3c:32:5c:3b:9a:03:c9:68:5a:6c:c2:91:ba:13:98:10:3c:
         dc:e4:ee:e9:ea:17:1c:72:8f:5a:f5:06:13:46:10:a1:19:ec:
         9a:ec:93:6f:f3:42:1d:ec:6d:0c:5f:d9:8a:1c:b6:d7:3e:26:
         86:5f:ea:2e:15:8f:a4:a2:7e:f9:93:d1:c8:bf:d5:35:31:e0:
         a3:b7:c7:56:46:2f:64:df:87:8c:4f:26:1d:b3:10:b8:c5:6b:
         6f:3e:1b:eb:6c:0b:78:19:cf:5a:9a:76:8f:fd:d0:d1:21:2f:
         08:a0:59:e2:f3:86:0b:2e:31:2a:59:72:ff:2c:79:4d:a1:0f:
         d0:b8:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:47 2026 by rpki-client