This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa
File:                     17f967e2-483e-360d-b576-18d7416b8529.roa (raw, json)
Hash identifier:          iB7KD6eKh5LmcatV0GPyzidZuqAJR+XQAR8wmuZihew=
Subject key identifier:   F0:F5:5E:4B:6A:24:84:D3:47:BC:BE:E7:FD:18:32:3B:19:8E:F4:2A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584C865C84239E67C95F3AA704C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     60404
IP address blocks:        38.93.136.0/24 maxlen: 24
                          38.94.107.0/24 maxlen: 24
                          38.97.7.0/24 maxlen: 24
                          38.108.186.0/23 maxlen: 23
                          38.109.8.0/24 maxlen: 24
                          38.109.9.0/24 maxlen: 24
                          38.131.1.0/24 maxlen: 24
                          38.150.114.0/24 maxlen: 24
                          149.115.109.0/24 maxlen: 24
                          149.115.110.0/24 maxlen: 24
                          149.115.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:86:5c:84:23:9e:67:c9:5f:3a:a7:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=565579e3-6a5a-4034-ac46-012cb9c13fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:5c:b1:d3:ac:15:5c:ee:7c:be:a1:8e:1e:
                    80:62:51:14:e5:66:fd:61:b3:59:15:5c:f8:e9:80:
                    3d:99:91:8c:87:c7:43:29:00:a0:74:d5:29:c7:fb:
                    6a:fc:14:bf:0f:2c:17:0d:ad:6c:ed:28:3e:c8:64:
                    2a:1c:27:15:de:4c:07:2f:ed:08:1c:41:3e:bd:6a:
                    8b:f4:46:0d:7c:70:eb:61:af:75:1f:61:bb:45:f0:
                    00:f1:4c:1f:3d:18:c9:05:39:01:4e:54:b1:77:90:
                    7e:da:59:e8:6f:43:4b:cf:c6:90:0f:a4:bb:33:eb:
                    ab:5b:a3:1e:70:b6:f4:d8:f2:d4:d4:a3:87:57:00:
                    09:3c:b5:29:45:e1:f6:26:c4:c7:6b:17:87:f9:57:
                    5f:99:19:4c:7d:f6:17:98:5e:32:ae:fd:74:e0:34:
                    ee:1e:74:51:22:64:43:81:c1:6c:b8:f5:83:2c:eb:
                    42:30:20:be:f7:5d:c4:15:28:06:4f:7e:cf:25:0b:
                    a6:87:f1:fa:79:a0:e5:3f:c2:4c:e7:33:bd:fe:1a:
                    f8:6c:ab:02:95:08:d2:f7:a3:de:31:fd:10:9e:67:
                    d3:88:8b:a0:69:c1:fb:ed:1a:b1:61:8c:83:e0:3c:
                    23:87:90:dc:47:b8:2d:51:b6:ba:7f:c9:71:83:bc:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F5:5E:4B:6A:24:84:D3:47:BC:BE:E7:FD:18:32:3B:19:8E:F4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.93.136.0/24
                  38.94.107.0/24
                  38.97.7.0/24
                  38.108.186.0/23
                  38.109.8.0/23
                  38.131.1.0/24
                  38.150.114.0/24
                  149.115.109.0-149.115.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:63:b3:84:4a:52:62:fc:5c:61:03:bd:ac:aa:68:47:14:a3:
         2d:01:a4:11:db:fb:6d:5a:88:6e:28:73:a9:2f:34:4c:06:35:
         2c:f6:e2:1c:48:37:5f:71:a9:31:65:fc:11:7a:72:05:7e:e4:
         53:3b:2e:b8:e4:2d:c6:62:d4:2e:e5:48:5a:2d:f3:0d:f2:55:
         e2:8b:71:6c:9c:ec:0a:8c:f5:71:42:90:b7:a8:7c:ea:eb:13:
         89:ee:19:e1:8c:b0:c8:46:4c:40:87:33:e2:ff:b8:c7:f8:4f:
         21:fc:d7:01:b5:53:76:56:dd:7d:29:65:e7:47:7c:e8:d6:4f:
         67:66:d4:59:81:f5:7a:16:d0:c0:18:4c:c6:83:c2:67:f3:1c:
         d5:16:df:67:e5:17:3c:96:8c:db:e8:b1:13:e8:fb:3f:50:26:
         00:c1:75:64:37:8f:be:45:42:07:c9:02:df:10:27:c4:5c:30:
         f5:e6:2d:1d:d9:30:e9:c7:7b:d8:bb:ff:b4:13:37:77:a9:1f:
         2a:62:a0:39:3f:02:8b:95:4a:09:d0:2b:e4:29:2e:93:51:61:
         ad:71:31:09:ed:48:8a:a9:e0:bf:99:81:13:64:f9:f8:d1:38:
         c7:30:3c:60:02:97:6d:86:2c:de:7b:e9:d0:0e:38:78:4d:cd:
         a0:7a:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:09:25 2026 by rpki-client