This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa
File:                     34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa (raw, json)
Hash identifier:          YtiS0y6Y4uJT/DchtE0hs0HtXlObHmAB7U7XQjJBYCc=
Subject key identifier:   55:AC:10:C9:8E:87:62:BF:41:AC:AD:47:20:FF:FA:96:71:F4:EC:4B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C6E215207DB829CF8B07DAF00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     393246
IP address blocks:        199.115.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:52:07:db:82:9c:f8:b0:7d:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=c66e5f48-5a1a-4db2-9885-3cad773f333d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:69:70:a4:6b:fa:93:56:a4:79:18:e2:ff:
                    16:f8:00:00:09:f7:80:96:86:3b:e5:24:e2:b5:e3:
                    43:54:48:dd:99:93:b3:a0:e5:15:ed:34:35:16:ef:
                    29:e1:a8:4d:7f:35:84:bc:15:4f:10:44:18:33:0e:
                    f7:9a:19:66:62:6d:5c:ab:e8:94:00:86:22:75:75:
                    b9:ec:dd:c7:f3:bc:ca:e2:de:8e:6f:0b:e3:52:2b:
                    f2:0c:7b:bf:7c:fa:8e:77:aa:c4:cc:67:b3:17:95:
                    04:c4:3f:72:8f:92:ee:5d:9e:49:23:89:05:77:5e:
                    45:43:8c:d0:05:75:e5:7e:d5:6a:a1:15:b4:9f:94:
                    7f:3e:fe:a4:4f:b7:87:fc:a5:1d:17:24:4d:89:df:
                    41:63:2b:55:be:e7:cb:bf:a8:d1:be:e6:8e:ec:fd:
                    41:65:f9:da:80:aa:bf:07:a0:24:02:6c:bb:2e:2a:
                    82:b3:c9:a3:70:8d:be:4b:23:69:07:21:10:96:48:
                    7b:cd:d6:d2:b3:62:fc:ae:e2:12:2a:58:79:8d:61:
                    94:d1:ec:1a:f9:a9:09:f4:58:e2:fb:92:cc:4c:2d:
                    c5:89:28:26:62:d3:45:ef:ee:57:a7:8f:21:08:d0:
                    6f:9e:af:98:42:d5:7d:e6:72:25:15:0b:1a:10:d1:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AC:10:C9:8E:87:62:BF:41:AC:AD:47:20:FF:FA:96:71:F4:EC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:27:64:7c:d7:a9:23:c7:dc:52:51:e8:27:3e:50:23:19:
         a9:c1:67:15:9c:32:c8:53:fe:b8:83:07:80:bd:81:e4:3d:06:
         45:67:15:1e:84:df:39:64:73:2e:0e:d1:22:44:f0:ac:ff:68:
         32:40:e9:82:55:03:36:f3:a3:69:72:38:c2:fb:4e:55:b8:a1:
         51:92:49:aa:1f:ac:7c:12:53:3b:b8:c8:72:da:18:b0:07:39:
         3d:60:b5:62:04:c5:84:72:5b:79:dd:72:a3:46:6b:fa:ab:cc:
         bd:5e:f7:20:d2:ec:c3:b4:aa:78:5f:42:bb:55:e1:d7:f0:e7:
         1e:0b:10:58:49:b4:b7:e4:87:03:05:dc:51:a7:dc:be:1e:67:
         53:9a:c8:08:c1:7e:8a:03:e4:42:24:7c:60:24:4b:33:74:0d:
         2d:08:29:d8:9d:65:d1:e9:5d:f1:97:95:9f:97:b7:79:8d:1a:
         0a:73:a1:a6:e9:4a:e6:f1:35:c4:53:6a:ea:6b:9a:e1:99:28:
         67:7e:38:91:b6:c1:31:c7:1d:49:19:47:dc:14:48:fd:49:2e:
         45:48:43:ea:80:ed:91:51:00:ad:b3:58:23:7c:3f:39:e8:71:
         fc:0b:eb:07:10:3f:fb:26:41:47:0c:c8:61:d4:d3:4d:4d:ef:
         d0:ae:d9:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIVIH24Kc+LB9rwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk
YzY2ZTVmNDgtNWExYS00ZGIyLTk4ODUtM2NhZDc3M2YzMzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQFpcKRr+pNWpHkY4v8W+AAACfeAloY75STi
teNDVEjdmZOzoOUV7TQ1Fu8p4ahNfzWEvBVPEEQYMw73mhlmYm1cq+iUAIYidXW5
7N3H87zK4t6ObwvjUivyDHu/fPqOd6rEzGezF5UExD9yj5LuXZ5JI4kFd15FQ4zQ
BXXlftVqoRW0n5R/Pv6kT7eH/KUdFyRNid9BYytVvufLv6jRvuaO7P1BZfnagKq/
B6AkAmy7LiqCs8mjcI2+SyNpByEQlkh7zdbSs2L8ruISKlh5jWGU0ewa+akJ9Fji
+5LMTC3FiSgmYtNF7+5Xp48hCNBvnq+YQtV95nIlFQsaENFYCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWsEMmOh2K/QaytRyD/+pZx9OxLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzRjMmZiY2YtMzdiNS0z
OTgzLThlODItNWI3YjMzNDNmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK2J2R816kjx9xSUegnPlAjGanBZxWcMshT/riDB4C9geQ9BkVnFR6E
3zlkcy4O0SJE8Kz/aDJA6YJVAzbzo2lyOML7TlW4oVGSSaofrHwSUzu4yHLaGLAH
OT1gtWIExYRyW3ndcqNGa/qrzL1e9yDS7MO0qnhfQrtV4dfw5x4LEFhJtLfkhwMF
3FGn3L4eZ1OayAjBfooD5EIkfGAkSzN0DS0IKdidZdHpXfGXlZ+Xt3mNGgpzoabp
SubxNcRTauprmuGZKGd+OJG2wTHHHUkZR9wUSP1JLkVIQ+qA7ZFRAK2zWCN8Pzno
cfwL6wcQP/smQUcMyGHU001N79Cu2TQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:37 2026 by rpki-client