This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa
File:                     047692f9-4c45-3534-9455-58a8a7660d58.roa (raw, json)
Hash identifier:          VxlvUsLEja1t27pdcwTZO6zuRcoGJ4YlKSqrKGQr9bk=
Subject key identifier:   4E:A2:85:01:21:AF:2E:CE:7A:02:4A:8B:F3:83:96:AB:E5:5D:C3:AE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584C45A7F498908B43BA7691C080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        208.76.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a7:f4:98:90:8b:43:ba:76:91:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=ec5db35c-d105-4e24-8ac9-03546a4e580a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:49:53:ed:81:f4:f5:17:84:f5:89:5f:c1:
                    6f:21:e8:2c:6b:17:99:eb:44:ed:ba:7d:21:32:76:
                    19:81:25:52:84:63:f9:30:2b:16:a9:27:4c:e8:5f:
                    a5:29:f8:62:44:0f:66:39:f8:95:6e:68:5b:7b:e6:
                    6c:3f:ae:1d:a6:e4:f2:7f:97:ce:e0:34:dd:dd:70:
                    f7:6b:34:eb:05:65:45:76:32:fd:b5:29:67:90:60:
                    fc:10:ef:b7:ac:59:11:91:02:97:9a:54:d3:07:32:
                    2f:0e:32:0b:3c:8e:8a:a9:90:a4:f2:b2:25:3c:ec:
                    c0:7a:87:f8:47:46:1c:86:e6:0d:10:4d:8b:c6:6f:
                    35:08:a9:3a:72:6c:55:1e:3b:1c:52:35:64:57:cd:
                    6d:c1:65:61:c5:5c:6c:6e:29:f9:d4:33:84:96:d1:
                    c5:52:d7:09:c0:7a:d8:19:35:0a:8e:99:e5:b3:03:
                    8c:b3:f8:14:b7:55:58:dd:df:11:fc:62:94:cb:e1:
                    e5:bf:8d:f0:ed:49:b6:2a:8c:02:f0:8f:19:57:87:
                    11:e2:d5:61:61:6e:3e:b1:ef:a4:e0:0f:5d:a1:2d:
                    e9:d4:c7:1f:e4:ed:87:59:33:11:f3:f1:91:bf:17:
                    e4:c4:e5:ab:78:5e:8c:79:4e:e6:1e:62:e1:c1:08:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:85:01:21:AF:2E:CE:7A:02:4A:8B:F3:83:96:AB:E5:5D:C3:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3f:81:57:68:93:bd:04:7e:6c:f7:eb:07:9b:1d:0a:dd:ae:
         e3:be:6b:de:a7:ad:cf:83:97:fb:ab:03:cd:dd:34:6e:7b:69:
         57:5d:e1:12:71:18:ce:99:e2:87:7a:5e:fd:4c:16:0b:0b:98:
         4d:0c:9a:1a:da:26:fe:9d:1e:77:ec:5c:db:99:72:68:89:b0:
         bb:6b:45:8d:0b:45:65:3c:7d:57:07:da:cb:cb:b4:a2:11:c1:
         02:3f:12:5c:76:30:dd:fc:28:53:54:cb:44:e8:df:88:17:f4:
         e1:ab:21:cd:ca:f6:9e:d4:96:ce:f9:74:40:c9:0c:f4:22:60:
         ec:df:5c:20:3a:53:d4:87:08:97:9a:04:61:85:d9:48:30:50:
         cd:5b:ad:3d:e2:72:48:22:19:5b:56:a0:d6:1e:51:1c:05:c4:
         24:9a:dd:11:65:57:32:e2:fe:b2:a9:1e:92:7f:1a:9f:a3:f4:
         d3:07:1c:9c:06:71:c5:97:71:c9:13:19:04:74:25:f3:4b:ce:
         ff:52:61:b1:fe:73:3c:84:98:b0:f7:08:d0:ac:48:06:e3:d5:
         1e:2a:b8:9e:0f:25:02:f6:69:32:bb:12:24:ff:fa:77:f8:85:
         63:b8:26:89:a2:6c:f5:6c:0d:e7:a7:44:c8:c8:66:97:fc:e6:
         71:9a:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:16 2026 by rpki-client