This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa
File:                     94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa (raw, json)
Hash identifier:          nqCy18z+j3Tpt3zVzWIv/2zMd9gpSCyZU2RFmDPINNM=
Subject key identifier:   ED:19:00:4C:3E:9F:3F:83:AB:6C:A5:A0:A8:6A:26:46:99:58:35:C6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584C8BADC59764CB019AD32502C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa
Signing time:             Fri 16 Jan 2026 16:02:08 +0000
ROA not before:           Fri 16 Jan 2026 16:02:08 +0000
ROA not after:            Thu 16 Apr 2026 15:02:08 +0000
asID:                     265086
IP address blocks:        216.28.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8b:ad:c5:97:64:cb:01:9a:d3:25:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jan 16 16:02:08 2026 GMT
            Not After : Apr 16 15:02:08 2026 GMT
        Subject: CN=3fb102c0-7cd1-4ead-9abb-05bd53cb9df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:b4:7c:e1:f0:fb:4a:2f:f0:81:ac:4a:11:
                    d5:68:0a:d0:c7:92:8d:56:d9:9b:c9:13:9c:97:0b:
                    06:78:77:fa:bd:ee:0a:98:22:49:9c:56:86:38:be:
                    11:31:6e:bf:9e:84:91:5c:5e:96:d6:d0:6f:22:02:
                    a3:af:ca:05:5f:e2:9c:c0:74:af:94:fc:cc:14:3f:
                    35:bd:f8:79:02:95:88:67:b2:f0:a7:ba:7c:1d:c4:
                    80:54:32:9d:79:08:6a:a8:81:f7:6e:bf:0d:05:4f:
                    23:f3:7d:a9:12:04:02:0f:35:fb:3a:49:e7:d3:19:
                    af:0b:62:94:72:89:7d:e0:a2:9e:c4:4f:24:ef:db:
                    26:6e:6a:f6:cb:52:2c:79:d6:f3:1f:c4:f7:97:60:
                    59:06:ec:51:87:1e:fd:3b:7b:52:bb:d0:59:e2:44:
                    17:e9:d5:63:c7:57:91:51:cf:82:63:8a:76:d6:67:
                    db:55:00:d1:15:34:a1:c0:6b:51:00:d9:06:ba:83:
                    b3:2b:e7:d8:ba:e3:1a:58:7b:f2:53:a7:57:8c:ab:
                    cb:bc:57:8d:39:0b:16:07:66:55:31:62:91:bc:dd:
                    ea:23:92:f8:10:9a:98:7b:61:64:93:b0:50:52:8d:
                    8a:9c:32:c2:82:98:5d:cb:a1:fa:12:2d:8a:73:8d:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:00:4C:3E:9F:3F:83:AB:6C:A5:A0:A8:6A:26:46:99:58:35:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.28.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ff:14:00:5c:bd:1b:d2:87:29:0b:a4:54:da:c4:a5:23:a7:
         7e:eb:7b:43:66:a8:45:84:25:d8:ae:9c:07:71:02:a0:42:30:
         76:55:2a:fc:8a:31:3a:12:9a:8f:61:cc:d1:42:30:fe:1a:07:
         69:e3:25:89:5f:b2:d6:41:a1:31:b0:71:55:9f:e1:30:18:0f:
         85:c3:e5:b2:c0:ea:c0:12:82:23:66:01:81:16:9e:b5:46:79:
         65:0d:ba:d5:a2:5f:91:b0:f9:79:e2:3c:3c:74:72:38:b6:51:
         b6:dd:a6:77:0d:bb:d2:aa:d5:98:b4:fe:95:b2:bf:3d:05:a8:
         a9:47:74:0d:bb:8e:2e:15:fb:00:0b:d0:06:b8:b1:43:00:86:
         09:ed:79:eb:e3:b0:3e:bb:5a:7a:1b:d2:3e:1e:1e:90:31:10:
         6e:e3:65:9c:1f:d2:8b:61:a8:e8:86:10:2d:d3:21:be:a9:43:
         9e:78:7a:25:d4:c1:2c:02:3c:16:3d:73:0a:bc:08:30:82:bb:
         9c:33:74:0f:21:4f:f6:ad:1f:27:0d:88:58:28:6d:33:3c:51:
         25:15:b0:97:0c:93:49:5d:33:ce:7b:42:ba:a7:50:cb:44:4b:
         27:7d:a6:c3:5f:40:0c:ae:91:a5:83:5f:5d:62:d7:04:e4:cd:
         ca:0a:20:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLrcWXZMsBmtMlAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDExNjE2MDIwOFoXDTI2MDQxNjE1MDIwOFowLzEtMCsGA1UEAxMk
M2ZiMTAyYzAtN2NkMS00ZWFkLTlhYmItMDViZDUzY2I5ZGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6a0fOHw+0ov8IGsShHVaArQx5KNVtmbyROc
lwsGeHf6ve4KmCJJnFaGOL4RMW6/noSRXF6W1tBvIgKjr8oFX+KcwHSvlPzMFD81
vfh5ApWIZ7Lwp7p8HcSAVDKdeQhqqIH3br8NBU8j832pEgQCDzX7Oknn0xmvC2KU
col94KKexE8k79smbmr2y1IsedbzH8T3l2BZBuxRhx79O3tSu9BZ4kQX6dVjx1eR
Uc+CY4p21mfbVQDRFTShwGtRANkGuoOzK+fYuuMaWHvyU6dXjKvLvFeNOQsWB2ZV
MWKRvN3qI5L4EJqYe2Fkk7BQUo2KnDLCgphdy6H6Ei2Kc429iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0ZAEw+nz+Dq2yloKhqJkaZWDXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTRmMThhYTItYzI1Yi0z
ZmE1LWJiYjgtZjQ0ZDg2OGJmYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ByDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALP/FABcvRvShykLpFTaxKUjp37re0NmqEWEJdiunAdxAqBCMHZVKvyK
MToSmo9hzNFCMP4aB2njJYlfstZBoTGwcVWf4TAYD4XD5bLA6sASgiNmAYEWnrVG
eWUNutWiX5Gw+XniPDx0cji2UbbdpncNu9Kq1Zi0/pWyvz0FqKlHdA27ji4V+wAL
0Aa4sUMAhgnteevjsD67Wnob0j4eHpAxEG7jZZwf0othqOiGEC3TIb6pQ554eiXU
wSwCPBY9cwq8CDCCu5wzdA8hT/atHycNiFgobTM8USUVsJcMk0ldM857QrqnUMtE
Syd9psNfQAyukaWDX11i1wTkzcoKIFs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:20:23 2026 by rpki-client