This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/726bcada-906a-3438-916a-999c6f7bfee6.roa
File:                     726bcada-906a-3438-916a-999c6f7bfee6.roa (raw, json)
Hash identifier:          jCLIc+C5+7YkPj+qTsO8v4RIm4yC2JlmUUmDUImrl5c=
Subject key identifier:   8B:FE:38:7F:54:11:8D:A6:68:EF:1A:9A:8B:5B:B6:A8:5D:31:16:A5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C42DC07A9FE70CDB92009AEC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/726bcada-906a-3438-916a-999c6f7bfee6.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        65.22.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:07:a9:fe:70:cd:b9:20:09:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=d36bebcb-f82b-4f10-a2d0-ef9fdae0f254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:15:f1:3a:de:51:c5:6f:dc:ff:fa:29:c7:
                    d2:03:9a:17:c6:f2:54:4f:91:94:58:47:a0:f4:2e:
                    14:18:7e:0e:a9:67:ed:9f:7c:27:67:bb:25:70:c0:
                    d6:66:e2:68:0f:97:33:93:16:a7:19:5f:dc:04:db:
                    65:96:f6:1c:67:74:91:54:2a:50:e5:3f:90:89:5f:
                    31:fa:45:f8:70:7a:12:91:c1:20:ef:ed:55:66:a7:
                    d2:ca:78:99:25:08:bc:53:df:8c:73:71:36:61:b2:
                    19:e5:52:35:8a:24:94:64:10:7c:e8:91:a9:5c:d0:
                    0b:28:8f:8f:14:fa:ed:59:8e:d2:11:37:cb:51:55:
                    b9:b3:e7:34:d4:7e:cb:01:32:2f:8a:7c:af:12:0e:
                    76:fa:c6:23:0b:66:9a:13:a7:86:37:45:d4:0f:3b:
                    36:f4:cd:ff:43:75:bc:d5:fe:79:2b:ef:ca:23:4a:
                    0a:d3:9f:53:60:40:4c:1e:ef:8f:02:df:e8:c7:0d:
                    8d:6d:b3:de:fd:cd:d7:72:09:40:3b:1c:c6:94:2e:
                    3d:d3:46:cd:51:31:5f:88:81:e7:c6:0d:ce:19:27:
                    f1:cd:31:71:23:4b:9e:13:14:91:fe:45:f7:ab:00:
                    5c:bd:48:de:80:7a:37:a3:4c:8f:16:43:68:07:6f:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:38:7F:54:11:8D:A6:68:EF:1A:9A:8B:5B:B6:A8:5D:31:16:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/726bcada-906a-3438-916a-999c6f7bfee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c5:27:00:84:e0:8a:c8:31:f8:e4:98:1b:b9:13:c7:ba:cc:
         3e:6e:86:41:ff:b1:bb:73:1e:b7:3c:98:0d:74:0f:50:22:5e:
         ee:ef:54:2e:ed:df:8f:fd:d0:77:5b:2f:29:09:0e:4e:c8:01:
         c5:68:3f:c2:02:3f:1a:90:b5:db:80:e1:32:bf:7f:ec:eb:e3:
         50:23:59:47:7a:74:51:8e:8c:21:0e:fc:09:ba:f8:a3:55:3d:
         a9:1a:34:94:ed:9e:c7:6e:e5:0e:c1:50:6c:6d:ff:07:f2:5d:
         1d:2b:a1:a0:c5:18:54:cd:f8:d9:4f:bd:31:d2:91:55:51:1a:
         2d:50:b8:8b:58:fd:0b:26:64:b2:9e:de:19:4c:d2:87:a4:5c:
         42:cf:1e:ea:4d:33:45:5e:9b:b4:3d:1b:5a:1d:a1:2b:0f:5d:
         62:47:f8:45:b4:d2:ef:7e:0d:69:50:52:ce:9c:9b:84:ad:e9:
         2b:4a:c6:ff:09:e8:5a:b0:43:4a:ec:36:a8:8e:aa:eb:21:2e:
         d7:c6:14:d2:5d:5f:72:ea:92:e6:10:08:d9:f7:6a:79:af:5a:
         57:57:6a:e8:7f:09:e1:0d:34:54:98:ef:0d:49:7e:03:e6:e0:
         63:7f:cc:02:21:41:c0:42:bd:d5:a6:26:8e:a0:40:ff:c8:a5:
         d4:db:e9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:09:39 2026 by rpki-client