This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa
File:                     7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa (raw, json)
Hash identifier:          YryVezeS8wvpUr77gdY/W0DEBuZ4v8ybDdhohogZ6NA=
Subject key identifier:   B8:27:A9:63:49:29:BF:B3:22:CA:01:98:58:12:50:BD:F7:A8:40:C0
Certificate issuer:       /CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1
Certificate serial:       010D0C9F4328584C7AB17A4627A22105067AC400
Authority key identifier: 39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa
Signing time:             Sat 10 Jan 2026 14:00:39 +0000
ROA not before:           Sat 10 Jan 2026 14:00:39 +0000
ROA not after:            Fri 10 Apr 2026 13:00:39 +0000
asID:                     30162
IP address blocks:        23.149.24.0/24 maxlen: 24
                          23.170.208.0/24 maxlen: 24
                          23.170.209.0/24 maxlen: 24
                          64.250.96.0/20 maxlen: 24
                          208.87.120.0/21 maxlen: 24
                          2605:d780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7a:b1:7a:46:27:a2:21:05:06:7a:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1
        Validity
            Not Before: Jan 10 14:00:39 2026 GMT
            Not After : Apr 10 13:00:39 2026 GMT
        Subject: CN=76856d10-a207-4345-a9fd-484ff2d2bd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:14:9c:cc:24:42:b2:ec:3f:c2:53:53:f3:
                    61:80:3f:80:9e:5f:cf:8b:49:e4:47:7b:06:9f:0a:
                    94:37:74:b8:db:47:4a:99:ec:63:af:7e:8b:f7:24:
                    53:bf:0d:ff:4a:e9:49:8a:9a:c0:f2:1d:94:e1:c4:
                    3a:54:49:83:c5:e3:2d:09:47:db:4c:75:79:80:ed:
                    83:83:54:d3:de:ed:0b:d4:de:54:3f:b1:12:d1:0f:
                    8d:af:f0:58:85:65:67:12:22:e8:0e:cc:67:a5:75:
                    e4:3b:9e:f8:70:58:74:10:d6:48:81:23:b9:8a:07:
                    c0:9c:a1:6f:72:f7:a1:84:2c:1b:a4:1c:47:96:72:
                    ed:fa:b9:bd:53:b6:19:8a:52:c4:61:77:3d:1e:8a:
                    27:36:d2:4e:50:e4:8e:41:5c:f5:2c:80:5d:ad:89:
                    57:6b:ed:8f:1b:b9:d1:e1:dd:25:1d:e0:e9:7e:9a:
                    d4:70:0b:18:85:fb:2b:03:2e:8e:c0:67:bb:ef:4a:
                    6a:ea:4e:72:b2:59:34:71:7e:25:fb:1d:c0:d6:a3:
                    1c:2c:17:03:55:28:ce:96:e5:e9:19:15:df:36:53:
                    b4:e2:b4:02:a6:6a:86:18:90:77:df:29:b9:c4:83:
                    fb:17:0f:2b:1e:7b:3a:69:1d:02:2e:ca:e2:39:7b:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:A9:63:49:29:BF:B3:22:CA:01:98:58:12:50:BD:F7:A8:40:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl

            X509v3 Authority Key Identifier:
                keyid:39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.24.0/24
                  23.170.208.0/23
                  64.250.96.0/20
                  208.87.120.0/21
                IPv6:
                  2605:d780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:38:37:18:09:76:2c:f1:0f:ed:f8:22:d9:b6:e1:6f:60:29:
         4d:de:a5:9c:e4:c2:7d:8d:6a:01:5a:d4:0f:26:e8:ac:84:7d:
         ad:83:45:16:84:4c:3a:fd:92:c3:bb:3c:83:23:42:a0:a7:69:
         93:63:98:7d:09:91:6b:a8:9b:be:cd:d5:88:c7:53:6e:84:ec:
         9d:b5:8c:74:8f:9b:fb:39:b7:62:1d:ac:69:95:5d:4c:61:3f:
         c8:ca:a4:e6:24:4c:81:4c:8a:e0:97:85:e7:d6:07:31:1a:c0:
         a6:fc:89:89:f0:80:0b:0f:4c:0e:4f:16:04:bf:c8:78:dc:e3:
         cc:0b:80:c3:d5:48:7a:37:d8:ac:f7:dc:d4:74:84:1b:6c:3b:
         4f:77:3e:55:0f:63:ec:8b:a5:2f:e9:b3:4f:ac:07:7a:89:b1:
         7e:e9:29:6f:ac:05:e2:3a:3a:12:13:16:04:39:e1:18:91:0e:
         18:73:b5:bc:a3:eb:10:42:3d:6e:2b:31:3d:1e:65:31:ce:dc:
         49:ec:a2:16:a1:cf:89:0e:c4:a0:3f:1b:fc:10:65:3e:9a:dc:
         2c:0e:01:1a:1a:4c:13:0f:cb:29:39:1c:f7:43:7b:8d:87:8c:
         1c:2e:06:3c:0b:e5:a6:d1:fa:f4:79:17:0c:a1:c1:2a:6f:bc:
         0b:91:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:24 2026 by rpki-client