This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa
File:                     03e688c7-732f-3297-8ea1-e37d0210334f.roa (raw, json)
Hash identifier:          Rw6gdnwFRAvmUeEE5xlov4mAx+Gh9w9tgPoKR+VcHBY=
Subject key identifier:   43:20:73:33:A8:54:C1:58:63:3B:B0:51:B5:7E:35:9F:11:2D:85:39
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584C50D1363C3CFBCFDA8BDE0B00
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa
Signing time:             Fri 26 Dec 2025 14:00:39 +0000
ROA not before:           Fri 26 Dec 2025 14:00:39 +0000
ROA not after:            Thu 26 Mar 2026 13:00:39 +0000
asID:                     53407
IP address blocks:        158.120.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:50:d1:36:3c:3c:fb:cf:da:8b:de:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Dec 26 14:00:39 2025 GMT
            Not After : Mar 26 13:00:39 2026 GMT
        Subject: CN=bcec1ca9-e8ed-44b2-8b6f-9744e827cd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:d8:d1:77:4b:37:3e:c4:1c:a6:77:bc:ec:
                    c1:dd:5b:81:35:d1:97:c0:42:4a:aa:6c:57:39:66:
                    3c:ce:8c:9f:e3:65:d5:ee:86:be:7e:31:17:b0:0e:
                    ad:53:11:4a:27:1d:b0:a7:1a:f5:50:7f:82:56:20:
                    27:93:c7:55:ca:de:89:76:d1:b0:91:7c:88:9f:7f:
                    96:c1:cd:eb:9d:32:ea:ac:ad:1b:e3:e5:a0:1d:db:
                    3c:3f:4a:a5:c1:67:2d:7e:92:c9:fb:14:03:b8:09:
                    4a:d1:fc:14:80:0a:24:d0:5a:c7:d3:d7:9a:7f:6c:
                    c9:7f:e2:41:81:b4:02:41:59:f5:de:0a:0e:71:e1:
                    8a:aa:e8:55:34:af:9c:1b:e8:00:ec:97:a3:4f:c1:
                    4e:7b:1c:b9:b0:e6:92:a8:e7:a2:cd:92:14:13:7d:
                    a3:28:ac:a5:1c:7b:49:30:2b:85:5e:06:e7:81:b0:
                    d0:31:4f:91:5c:35:06:dd:16:c3:28:12:58:15:24:
                    e2:c9:89:f2:a3:c5:51:10:19:a8:0b:a2:53:5b:23:
                    be:fb:79:94:e7:9b:cb:6a:40:69:70:8f:10:1a:44:
                    cc:c6:af:43:f2:06:d7:3f:95:21:c0:e2:c3:54:5e:
                    ce:bb:8a:85:b6:72:12:02:b4:42:9a:79:8f:b2:80:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:73:33:A8:54:C1:58:63:3B:B0:51:B5:7E:35:9F:11:2D:85:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f8:ee:40:06:02:0e:fb:7c:6f:03:96:72:f1:46:d8:6e:8f:
         75:35:47:8a:b7:fd:fc:b4:04:2e:dc:a5:61:01:0b:94:1c:f8:
         43:0e:04:b3:c0:1e:a5:0d:09:56:f2:31:9a:61:0a:48:2d:0b:
         75:4a:f8:f2:d0:cf:87:7e:3f:65:72:0a:81:ac:b2:a1:cd:2f:
         96:59:06:44:a7:73:5d:37:ac:e2:ed:24:d8:1d:12:f1:c2:b9:
         40:8b:a1:30:42:79:12:30:63:2f:65:9a:4c:75:a7:0a:84:ee:
         23:22:71:33:73:15:a8:0b:ec:62:6e:5e:af:44:cb:2b:1a:0f:
         c7:a7:77:58:47:06:36:a5:87:93:ed:bf:5f:96:22:2a:2f:39:
         c6:02:d1:77:1f:c3:a8:a3:e8:68:5a:1c:d6:a5:5b:47:b9:8f:
         5d:d1:65:fd:de:5b:95:f9:9e:41:f6:17:85:09:52:ed:c4:91:
         07:b7:28:79:a9:42:17:86:f7:93:71:ca:44:e4:94:03:a6:af:
         d0:2d:e1:fd:5b:22:68:23:75:31:be:90:f9:48:49:5d:7a:79:
         d7:31:97:df:6b:41:13:23:ac:02:a3:64:90:40:19:c5:61:a4:
         c4:0a:ba:91:c6:08:b9:65:7f:93:16:5d:36:06:79:8d:94:05:
         7c:f5:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:31 2026 by rpki-client