This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa
File:                     ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa (raw, json)
Hash identifier:          lQ/4E7SSrKkQSrgbFJvr+QByygrBnvFzCBnZDzqFQZU=
Subject key identifier:   98:BC:35:5C:56:5B:13:C9:F9:2F:45:85:66:C5:BB:9A:41:AF:D5:E0
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F4328584C794C1AA06B16618454E3CB00
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        208.89.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:1a:a0:6b:16:61:84:54:e3:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=a134f165-0ba4-47bf-a471-eec7864907ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:63:57:0c:44:fa:37:21:da:c4:36:e6:82:
                    96:dd:82:83:3a:09:99:22:b4:b0:a8:e2:ef:16:45:
                    ec:61:08:24:d5:0f:d0:98:1d:6d:10:68:2f:97:de:
                    40:f4:2d:18:4b:b5:d8:0c:ee:62:62:93:e1:e7:b1:
                    96:15:f2:13:26:a6:af:02:dc:99:07:08:aa:01:ec:
                    90:a1:e4:6c:68:3d:83:ee:f8:d4:25:75:28:64:5b:
                    a7:dd:2a:22:7b:5c:49:ba:f6:70:45:46:ad:d1:70:
                    7b:f2:7f:bd:8b:70:6d:b3:e2:3a:e0:f9:ac:f1:49:
                    96:b4:70:d3:fa:b1:18:3e:9f:7c:cf:a7:e7:5b:4a:
                    2f:9b:36:b9:1c:bd:f9:a2:b5:dd:b7:9b:d5:ae:5e:
                    a2:3f:64:78:8b:b3:2e:75:5a:4f:9f:a0:2d:e3:0c:
                    69:0c:61:0c:f1:ae:0e:1f:4b:44:ff:e3:7f:bd:17:
                    4b:4a:bb:13:60:1d:7d:76:51:e8:08:86:c8:7d:4d:
                    0a:de:fb:6f:39:7f:9f:ee:0a:2e:fe:30:4d:b0:35:
                    5c:ed:3a:64:7e:bd:4c:9a:1a:51:45:13:b5:43:90:
                    29:54:1a:44:dd:55:27:05:16:55:68:bf:69:d4:26:
                    9b:94:92:26:06:fc:29:08:32:34:57:36:fa:f4:b0:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BC:35:5C:56:5B:13:C9:F9:2F:45:85:66:C5:BB:9A:41:AF:D5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:bc:3c:e0:84:f0:f0:14:ac:e3:3e:10:b1:dc:58:ed:fa:
         9a:4c:ca:dd:bb:6d:aa:91:0b:90:fb:a5:2d:f1:cb:0d:0d:cf:
         13:9a:81:d7:a2:72:78:df:2e:ef:59:5e:e8:7b:10:96:1d:f9:
         ee:24:59:6f:21:ce:30:62:47:96:c3:02:25:c8:15:26:9a:f7:
         57:3b:09:32:a4:4f:05:6d:ea:01:ff:95:9a:67:31:48:ca:1a:
         dc:90:10:9a:6c:65:d9:21:18:bb:b6:6c:06:7f:59:8e:e3:17:
         e0:20:33:e7:71:e7:8d:3d:e0:9f:d8:81:3c:e5:fb:65:c1:6d:
         ad:94:a2:6d:d9:89:0e:28:7c:ac:4a:04:91:7e:94:9b:0d:03:
         43:87:39:df:d1:f7:7b:32:10:45:4b:c1:61:a6:81:cf:5f:31:
         49:aa:bd:32:2c:52:7c:9c:70:ca:b8:e8:2a:68:5f:a6:04:a3:
         7b:96:f3:c3:89:13:ae:41:24:1b:7a:a2:9b:48:a8:48:4a:fe:
         13:8b:01:7c:48:df:7f:e7:b0:88:69:54:3c:3e:67:ca:90:12:
         58:97:57:73:37:08:a5:ab:ac:29:92:fb:e8:05:a4:3f:dc:8a:
         d7:7f:d7:32:17:6c:e8:56:b3:1b:1b:f7:e8:7a:f0:26:f2:f6:
         a0:06:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:56:04 2026 by rpki-client