This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
File:                     cc973301-7c68-348a-bd7d-e22b5396a832.roa (raw, json)
Hash identifier:          CEhIkoLrJisuMdO5pQr5sIasZGdASZI8vDB+oLpVX9M=
Subject key identifier:   63:A1:74:58:61:BE:FB:5F:60:E6:B4:27:45:E0:C5:78:15:13:1E:CF
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584C8E3C30CB7F5ECE79094D2700
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
Signing time:             Sat 17 Jan 2026 14:00:38 +0000
ROA not before:           Sat 17 Jan 2026 14:00:38 +0000
ROA not after:            Fri 17 Apr 2026 13:00:38 +0000
asID:                     12189
IP address blocks:        131.153.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8e:3c:30:cb:7f:5e:ce:79:09:4d:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jan 17 14:00:38 2026 GMT
            Not After : Apr 17 13:00:38 2026 GMT
        Subject: CN=63f3ca23-6f17-49a2-92d9-d18a85ddb4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:d4:f4:d2:f1:36:4b:2b:f1:a0:68:5b:c9:
                    65:9e:03:58:89:1c:86:30:15:b8:b4:07:d4:20:6b:
                    65:43:8d:64:52:44:7e:a6:1c:fe:03:4f:27:3b:de:
                    6d:02:b4:ef:7e:e4:4a:71:70:85:cf:8c:4d:87:46:
                    7d:19:7f:49:6c:30:29:22:a7:f9:d4:be:c5:bc:6f:
                    47:2d:ae:12:59:24:eb:92:bc:12:a9:50:11:74:1f:
                    f2:a9:7e:65:4d:fa:58:a6:79:36:6e:87:dd:10:f1:
                    27:87:2d:bd:f7:69:33:db:05:51:47:1e:b6:dc:70:
                    fc:9a:9e:5b:eb:89:07:f6:15:43:fe:a7:18:fb:e6:
                    85:e6:a7:d2:e0:7c:8f:4d:7e:a3:57:ca:d1:11:5f:
                    e5:88:d0:24:da:68:f3:c2:72:35:c2:24:7f:a5:71:
                    e0:21:96:c5:b2:67:a1:71:00:f5:60:50:d7:36:62:
                    64:3c:73:a2:c3:ca:ec:d7:1d:1e:01:37:0d:2f:ef:
                    2c:33:aa:fb:13:45:14:31:40:74:cf:12:f0:26:0e:
                    c5:8b:75:54:a5:98:35:5d:10:5a:0e:29:02:ca:63:
                    45:3c:ec:2a:0d:b7:e3:f9:eb:35:ce:3d:8c:0a:0a:
                    07:b9:87:33:92:9f:05:88:9e:a3:f0:f3:b9:44:90:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A1:74:58:61:BE:FB:5F:60:E6:B4:27:45:E0:C5:78:15:13:1E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:48:2a:69:72:4b:63:ff:f6:da:89:19:c2:6c:5f:d8:f5:
         e6:71:76:e0:94:5d:18:f7:8e:2f:db:33:cd:d9:d1:cc:0e:15:
         56:b3:24:29:77:19:91:d6:4f:6b:b9:21:e9:00:16:57:b5:0a:
         66:ef:f7:4e:ba:26:93:ea:15:f9:ce:f0:c7:48:a5:b3:fa:51:
         42:cf:23:69:5b:f8:a4:7c:9f:38:2f:50:2c:bf:bb:59:d7:0f:
         0f:46:73:3b:75:d6:8a:31:fa:23:38:0a:60:36:2a:48:0e:86:
         29:81:a1:7a:bb:4c:f5:a5:00:aa:8a:d6:e6:ca:79:37:04:51:
         b1:ab:f4:da:3f:9e:73:60:1b:0c:81:89:d3:45:a6:2a:27:c7:
         a2:ef:5f:9b:a1:4f:0b:0b:ed:03:b0:be:6a:f5:44:4f:14:2a:
         f3:26:9f:b5:af:69:7a:13:d8:22:ee:ab:fc:ec:30:f7:e4:a1:
         c8:1e:42:86:76:9a:b2:4e:e6:01:7a:25:61:b3:0e:c5:cb:54:
         98:62:8a:ca:6d:53:1f:90:19:5f:ca:b7:02:2f:09:e0:68:4f:
         0e:41:4b:0f:ca:fc:12:6c:ea:5a:92:aa:70:13:4e:21:fc:d2:
         57:66:21:10:97:51:cb:6f:1e:a7:05:66:05:0a:c5:f6:82:85:
         68:bb:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:56:47 2026 by rpki-client