This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa
File:                     01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json)
Hash identifier:          nSfBl9eXuaAikWeklTpKEaCzOqHlOXuBz3hMP5eE1pU=
Subject key identifier:   0F:A6:5F:DC:49:DB:14:91:A6:64:02:E4:20:0D:5A:8C:F2:7E:DF:DB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584C45A80A1997B5A1D71C06B700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     396982
IP address blocks:        172.253.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:0a:19:97:b5:a1:d7:1c:06:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=c792e4ef-ad42-489c-864b-5913f64ad4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:04:4b:9d:10:7c:bb:73:08:e6:42:69:0e:d1:
                    25:bc:21:b6:3d:1f:19:44:9a:e2:0c:4e:ac:ba:ac:
                    6d:52:f1:97:4e:7f:ef:3f:35:5c:3b:b7:1a:fd:8b:
                    51:6c:2b:ce:63:f9:a0:75:61:49:0b:23:c1:c6:45:
                    08:76:3b:24:93:db:53:68:a5:58:9b:66:f6:54:f1:
                    a5:e5:18:47:ab:ad:17:55:ff:b0:b5:79:78:b0:84:
                    54:9d:52:ae:5c:9a:49:99:68:42:23:96:fc:e2:12:
                    5c:ec:cc:f8:90:27:8d:53:54:73:c7:6d:16:b3:0f:
                    f3:7d:b8:7c:e3:7d:3d:76:06:0b:a7:bf:8b:a2:29:
                    fc:ee:8a:78:ab:87:28:90:c0:43:d2:0e:1f:44:c0:
                    dd:3c:2b:f1:e7:fd:b6:d2:5a:fa:e0:53:0b:97:eb:
                    2c:27:08:4e:bf:49:13:24:e8:58:db:21:9d:94:6f:
                    ca:fb:7e:35:bd:51:d4:7e:74:fe:77:1b:05:f2:5b:
                    08:77:92:db:0d:62:c8:f2:7d:16:20:fc:23:ec:e1:
                    09:3e:d0:6b:2b:f9:14:bd:b4:62:a6:87:92:ac:7c:
                    bd:e5:fd:d3:a0:be:df:38:2b:74:4d:23:e4:44:e6:
                    48:14:2a:f9:a1:e9:5a:88:08:3e:58:37:f8:a6:0b:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A6:5F:DC:49:DB:14:91:A6:64:02:E4:20:0D:5A:8C:F2:7E:DF:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9d:76:9c:3f:99:3f:13:4c:3b:ca:25:74:f8:3c:8b:b5:32:
         e4:49:fa:27:23:3d:e4:a0:7f:fa:c5:0b:d2:76:47:f0:cf:f9:
         81:3e:0a:2e:e2:96:b1:99:c3:ae:be:6c:51:4a:24:6d:98:1a:
         6d:6d:8e:3d:3f:81:45:bd:fd:2a:87:33:a1:d5:66:dc:58:a3:
         cc:a8:06:9e:62:65:82:ec:f8:a8:24:54:18:a7:89:6e:77:0b:
         bf:08:c7:de:3f:e8:e3:04:38:d4:9c:78:ba:62:76:d8:08:08:
         75:f1:50:da:62:e5:8f:67:32:a2:5f:e6:78:be:5b:a3:2e:4c:
         d5:f0:47:7c:b7:ba:8a:27:22:7a:cf:f6:54:0d:b9:c1:8b:70:
         cf:af:80:40:72:0e:d8:b0:df:86:ee:6f:83:66:d5:34:56:78:
         bf:08:96:86:d7:58:0e:2a:bc:0b:49:ee:4a:26:b1:c9:30:96:
         2f:00:c3:17:91:8e:25:35:0d:52:44:37:84:57:8e:3e:ca:c9:
         77:30:4c:43:9a:f8:5c:a3:a8:a9:03:bf:ad:7c:26:0d:07:75:
         5a:ca:c5:bd:36:ea:c0:1b:78:02:72:e6:2b:53:12:8c:9e:0d:
         8e:2a:74:ff:0b:74:18:97:68:26:2d:f7:58:74:e2:95:23:2a:
         5d:9b:d6:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqAoZl7Wh1xwGtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
Yzc5MmU0ZWYtYWQ0Mi00ODljLTg2NGItNTkxM2Y2NGFkNGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wRLnRB8u3MI5kJpDtElvCG2PR8ZRJriDE6s
uqxtUvGXTn/vPzVcO7ca/YtRbCvOY/mgdWFJCyPBxkUIdjskk9tTaKVYm2b2VPGl
5RhHq60XVf+wtXl4sIRUnVKuXJpJmWhCI5b84hJc7Mz4kCeNU1Rzx20Wsw/zfbh8
4309dgYLp7+Loin87op4q4cokMBD0g4fRMDdPCvx5/220lr64FMLl+ssJwhOv0kT
JOhY2yGdlG/K+341vVHUfnT+dxsF8lsId5LbDWLI8n0WIPwj7OEJPtBrK/kUvbRi
poeSrHy95f3ToL7fOCt0TSPkROZIFCr5oelaiAg+WDf4pgsKZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+mX9xJ2xSRpmQC5CANWozyft/bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFhZDljNGEtOWY2NC0z
MDYwLThiMDAtZWRlNGUwZGRjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImddpw/mT8TTDvKJXT4PIu1MuRJ+icjPeSgf/rFC9J2R/DP+YE+Ci7i
lrGZw66+bFFKJG2YGm1tjj0/gUW9/SqHM6HVZtxYo8yoBp5iZYLs+KgkVBiniW53
C78Ix94/6OMEONSceLpidtgICHXxUNpi5Y9nMqJf5ni+W6MuTNXwR3y3uoonInrP
9lQNucGLcM+vgEByDtiw34bub4Nm1TRWeL8IlobXWA4qvAtJ7komsckwli8AwxeR
jiU1DVJEN4RXjj7KyXcwTEOa+FyjqKkDv618Jg0HdVrKxb026sAbeAJy5itTEoye
DY4qdP8LdBiXaCYt91h04pUjKl2b1rs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:43 2026 by rpki-client