This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
File:                     5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa (raw, json)
Hash identifier:          yEYvbaaw/P4qvNXOpxTswK8QZDpqvCyVfGNBCsWR6wQ=
Subject key identifier:   21:55:09:D3:84:17:96:C4:62:4B:DA:98:90:12:03:E6:D1:E2:01:9B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584C76815D63D376E0ADBD081A80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     21859
IP address blocks:        23.91.96.0/20 maxlen: 24
                          23.236.96.0/20 maxlen: 24
                          23.236.112.0/20 maxlen: 24
                          23.248.160.0/19 maxlen: 24
                          23.251.96.0/19 maxlen: 24
                          45.40.48.0/20 maxlen: 24
                          45.43.32.0/19 maxlen: 24
                          45.43.59.0/24 maxlen: 24
                          65.255.32.0/20 maxlen: 24
                          69.28.48.0/20 maxlen: 24
                          104.218.160.0/21 maxlen: 24
                          104.254.112.0/21 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.113.0/24 maxlen: 24
                          107.151.128.0/18 maxlen: 24
                          107.155.0.0/18 maxlen: 24
                          128.1.0.0/16 maxlen: 24
                          128.1.42.0/24 maxlen: 24
                          128.14.0.0/16 maxlen: 24
                          162.221.4.0/22 maxlen: 24
                          162.221.192.0/21 maxlen: 24
                          169.197.96.0/19 maxlen: 24
                          172.81.120.0/21 maxlen: 24
                          172.96.112.0/20 maxlen: 24
                          192.254.80.0/20 maxlen: 24
                          199.91.72.0/22 maxlen: 24
                          199.190.44.0/22 maxlen: 24
                          199.245.56.0/21 maxlen: 24
                          208.81.200.0/22 maxlen: 24
                          209.177.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:5d:63:d3:76:e0:ad:bd:08:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=195b8af7-8ec3-4fb5-b345-d2b140644bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c2:86:83:3b:ba:d6:21:92:ae:6a:ec:e7:64:
                    54:cd:20:e5:72:39:af:ec:db:c8:7d:2b:ba:86:f5:
                    39:e1:7f:76:f7:63:0a:20:81:54:0f:36:f3:35:bc:
                    b8:df:e3:34:ca:20:a5:51:85:2e:ac:8e:34:b3:6a:
                    3a:47:3a:7d:58:df:5d:af:dc:a8:6c:0b:0f:c9:53:
                    8a:9f:cb:36:e7:e7:91:e0:d2:55:1a:cb:9b:19:aa:
                    e4:91:b0:4b:8c:58:8c:d7:22:9c:d4:d9:2e:8f:18:
                    33:11:93:16:76:90:48:07:a6:a7:4d:44:50:67:db:
                    77:27:67:f4:17:ab:b4:aa:e4:7c:c6:ef:c5:e1:04:
                    4b:4a:92:6e:40:e4:85:fa:da:c2:77:00:18:c5:13:
                    78:7a:cd:b4:fb:6a:4f:b7:64:2b:f4:92:7b:8e:ba:
                    b4:08:8f:7b:9a:8a:bc:2a:1b:0c:82:40:e9:4d:39:
                    17:42:e1:16:8a:f7:89:99:8a:bb:35:93:0a:39:36:
                    1d:1c:3d:ab:29:4e:48:c8:af:d2:2a:95:ab:56:0f:
                    cb:7f:7e:10:e2:8c:02:72:46:29:e9:5a:ad:f8:f3:
                    ee:63:29:90:36:41:cd:c3:9b:16:45:01:36:c2:0c:
                    c8:fe:19:ea:41:ea:6e:3a:9d:d4:81:fa:18:e7:ee:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:55:09:D3:84:17:96:C4:62:4B:DA:98:90:12:03:E6:D1:E2:01:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0/20
                  23.236.96.0/19
                  23.248.160.0/19
                  23.251.96.0/19
                  45.40.48.0/20
                  45.43.32.0/19
                  65.255.32.0/20
                  69.28.48.0/20
                  104.218.160.0/21
                  104.254.112.0/21
                  107.150.96.0/19
                  107.151.128.0/18
                  107.155.0.0/18
                  128.1.0.0/16
                  128.14.0.0/16
                  162.221.4.0/22
                  162.221.192.0/21
                  169.197.96.0/19
                  172.81.120.0/21
                  172.96.112.0/20
                  192.254.80.0/20
                  199.91.72.0/22
                  199.190.44.0/22
                  199.245.56.0/21
                  208.81.200.0/22
                  209.177.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:03:59:76:c8:22:ef:45:c0:f6:87:62:71:19:86:3c:a5:7e:
         6f:d8:fd:f2:84:d8:a8:a5:65:2e:ab:ed:9d:db:2b:47:d1:f1:
         61:54:2a:fa:99:cd:ce:bf:b6:11:be:34:07:e9:49:f9:fb:88:
         23:89:d4:36:72:e7:20:34:82:8b:fe:0c:e0:19:92:6d:0c:8c:
         53:15:e4:bd:07:f2:54:23:b8:e9:a2:c1:7e:dd:5a:d3:2b:39:
         db:36:ca:00:1d:af:9b:75:71:d8:b3:6f:e6:4d:23:8d:09:5a:
         49:15:80:e3:9b:37:01:75:cf:48:cd:15:fb:3f:0f:1f:05:c6:
         b3:75:65:d0:4a:e4:10:3d:bc:61:0f:c7:5e:14:77:2b:d5:e7:
         12:14:3b:76:b9:5e:e4:d5:bc:2e:b5:96:26:c8:84:4e:96:43:
         19:59:3c:e6:bd:12:57:07:a7:07:8f:0e:35:4f:24:d9:99:d6:
         2c:f3:8e:b2:a7:96:42:7b:b2:70:86:44:74:a7:10:db:99:81:
         09:a2:fb:15:51:e4:35:a4:93:94:28:6b:f8:af:8d:88:a3:38:
         18:70:68:d0:2f:c7:5a:1a:8b:43:f8:76:a1:96:da:45:ee:48:
         07:ad:c9:6b:ac:be:24:5a:21:de:99:b2:42:a3:65:8b:4c:a5:
         91:72:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:36:25 2026 by rpki-client