This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa
File:                     132e7b72-2d06-316b-afaa-74c07ae106c5.roa (raw, json)
Hash identifier:          XaNAPNAtBx21K8t3p5LatIibWySUFDQhlyAHmVTbGZI=
Subject key identifier:   C5:68:73:12:7E:91:5E:34:FA:75:74:E2:47:E4:8B:CB:28:27:73:DC
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584C794C9CA701550AF5D4CAE468
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     63293
IP address blocks:        129.134.191.0/24 maxlen: 24
                          157.240.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:9c:a7:01:55:0a:f5:d4:ca:e4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=996918bb-421d-4fda-a20a-b39fdbb0e178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:0f:db:f3:48:22:77:13:c9:59:f9:79:ca:
                    0c:d7:de:9a:47:6f:d4:01:85:c8:f2:1d:38:dd:cb:
                    84:73:0a:1d:38:58:7f:19:57:08:1a:77:c1:71:0b:
                    f6:b6:c0:21:e6:80:a0:c8:c4:76:62:41:48:d8:2c:
                    dc:91:78:39:01:39:ff:85:22:08:c4:8f:90:91:56:
                    fe:51:01:80:c4:98:0b:d2:be:98:6b:5d:a6:2e:aa:
                    99:06:fc:33:15:5e:2f:bb:f3:cf:d3:09:70:a1:e1:
                    ae:b9:22:da:b3:6d:e1:24:38:a9:46:8b:6f:f2:ff:
                    b3:22:85:2c:29:9c:44:14:8f:b4:7c:c9:15:fd:89:
                    87:79:48:6b:ef:0d:32:d9:30:de:97:20:c5:57:3c:
                    3c:8a:7b:63:82:a9:ee:24:de:f5:f5:66:0e:59:dc:
                    17:0e:00:08:36:63:0b:20:79:40:06:0d:2d:74:ac:
                    f5:2c:38:4a:d6:1e:09:26:a7:a5:b0:39:76:ce:8d:
                    9b:9f:ee:30:47:c2:8a:a9:23:b1:a3:10:29:ba:0a:
                    6b:8e:90:76:87:96:78:30:61:53:e0:b5:e8:94:b2:
                    80:8a:f1:bd:ad:20:18:eb:ba:3f:5f:f0:5a:9a:87:
                    db:34:a7:d5:9f:4b:66:2d:8f:6c:a5:0c:a9:b3:f9:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:73:12:7E:91:5E:34:FA:75:74:E2:47:E4:8B:CB:28:27:73:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.191.0/24
                  157.240.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:72:9e:21:80:22:58:0a:52:d0:3f:08:b9:90:ff:69:dd:
         0e:b7:48:66:d3:38:11:1f:e9:88:fd:6d:e4:6f:77:5d:9e:be:
         6b:6d:70:b4:54:13:03:2c:b0:ac:6e:e6:7d:04:03:5e:dc:5b:
         a2:d4:3c:a5:d4:f7:1e:8c:95:51:09:4a:e1:a9:41:85:5f:3c:
         84:0e:10:2b:82:61:fe:91:4c:a4:7a:d7:94:e9:e4:69:e2:18:
         99:68:18:90:e5:6d:e7:a0:3f:b0:59:91:c3:6f:ec:eb:83:23:
         ef:d6:ac:bd:fb:c4:46:cd:d9:c8:6f:ae:cd:e9:80:1e:8c:e6:
         a7:ec:7e:b3:68:4d:f6:1d:76:a0:ea:7a:ee:a9:3d:59:df:ca:
         37:ec:6f:27:fb:c4:90:0d:bf:9e:cf:1c:58:06:26:2c:0e:ac:
         04:08:b1:ad:89:0e:ad:f6:61:7a:84:6d:cc:98:bf:32:ed:6a:
         81:e6:29:29:84:13:26:9c:23:1c:e7:d3:c6:6d:c0:9a:a5:f9:
         3d:02:88:98:94:45:ef:44:42:b5:dc:8e:05:f5:88:fb:60:c6:
         7d:4e:24:6c:7a:50:0b:23:71:35:1f:7d:2b:c3:07:7a:85:75:
         0d:2a:7b:33:af:70:05:4e:74:a2:ad:18:23:9e:7e:b8:3e:df:
         71:f4:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:40:57 2026 by rpki-client