This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa
File:                     1a1b3802-ea48-3d76-a847-7894a6c024c8.roa (raw, json)
Hash identifier:          zSi+C/3gSHvL80yRhrHy8Lyp0yFVuy3IUYa5l6Lhz48=
Subject key identifier:   0E:40:63:98:6E:6B:00:9D:2A:7F:46:1A:72:84:3C:40:70:BC:7A:7E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584C45A7FF488D82FFA777CFD280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        172.217.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a7:ff:48:8d:82:ff:a7:77:cf:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=2f03fcc1-dcc5-44ad-b46c-1554be5a6230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:3b:77:f4:3f:6e:8c:94:6c:bc:c6:5c:88:
                    8d:f9:e7:d7:85:56:53:cb:dc:d2:b8:da:4a:b1:d1:
                    6d:08:7d:34:41:32:ab:d8:d2:b0:e1:8d:6e:9b:54:
                    3e:13:0f:04:69:86:0b:fa:4b:ff:8b:46:f4:fe:9e:
                    5a:73:c3:98:40:dc:90:42:f3:7d:d0:c6:78:ab:c3:
                    e5:6b:33:7d:fc:cd:20:1c:6c:aa:63:e2:21:d8:5f:
                    81:28:91:dc:78:fb:ce:4e:29:22:09:05:0b:d7:fb:
                    8c:6e:52:40:81:4a:ab:4d:0f:50:28:35:df:f1:40:
                    68:bf:e6:cf:b0:8d:10:39:49:35:2f:b1:bc:6e:0d:
                    a2:08:14:bd:33:68:c0:0f:89:df:22:8b:f6:35:99:
                    8b:8c:35:71:bb:43:ef:cb:f6:49:0e:a0:67:f9:29:
                    b9:c2:70:3a:14:7a:bf:29:15:ac:40:e5:79:69:ee:
                    52:30:77:30:c8:0c:7c:a4:7d:5b:1c:9d:c9:5c:c1:
                    e9:c3:eb:e4:e9:74:5c:65:98:ee:6c:ab:23:67:5a:
                    bc:d5:5b:5e:51:2d:32:c4:54:b4:af:e1:1d:21:02:
                    3b:1f:7a:f6:7f:67:36:80:0b:fa:3f:5b:55:ed:e4:
                    7c:88:0f:8b:30:87:e4:fb:44:d9:d9:4f:7d:32:33:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:40:63:98:6E:6B:00:9D:2A:7F:46:1A:72:84:3C:40:70:BC:7A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:63:98:4f:17:79:8e:83:9f:fc:6f:97:09:9d:fd:48:98:
         92:b7:45:de:fc:fe:75:6f:cc:d7:d5:f7:c5:02:01:c4:44:96:
         8a:e2:8d:3c:ed:9f:89:91:8e:0b:a4:32:99:58:ed:11:0b:f4:
         92:8c:15:c9:5e:3c:83:a0:94:3b:27:b1:45:00:ee:13:81:01:
         ba:b1:5e:59:f0:90:03:7e:e7:d6:89:27:f1:8d:d7:10:f7:38:
         47:78:d3:4f:23:52:5b:8e:00:c6:87:e4:89:3b:79:78:b1:b7:
         bb:c3:4b:af:a6:34:e6:f6:bf:f3:34:31:b2:00:7c:91:76:16:
         1f:9b:da:3a:66:92:43:eb:1f:31:2e:66:db:07:c8:56:a6:fe:
         a5:4a:9c:85:48:a6:44:dd:f7:49:eb:05:06:e0:2d:96:70:57:
         be:51:a8:a9:bb:39:d4:56:29:d5:43:60:ed:42:44:17:75:7c:
         d4:34:1a:60:14:79:f9:b1:ed:21:44:83:40:24:38:da:12:e2:
         40:79:15:91:81:53:05:2c:b6:c1:9b:25:2c:16:53:c6:a2:84:
         77:95:6e:a6:22:c5:09:3a:90:bc:28:dd:13:71:43:77:0c:35:
         9b:14:51:91:f4:5d:78:4d:f1:38:88:e7:29:d7:09:f5:d8:4e:
         d3:a8:b6:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp/9IjYL/p3fP0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
MmYwM2ZjYzEtZGNjNS00NGFkLWI0NmMtMTU1NGJlNWE2MjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvA7d/Q/boyUbLzGXIiN+efXhVZTy9zSuNpK
sdFtCH00QTKr2NKw4Y1um1Q+Ew8EaYYL+kv/i0b0/p5ac8OYQNyQQvN90MZ4q8Pl
azN9/M0gHGyqY+Ih2F+BKJHcePvOTikiCQUL1/uMblJAgUqrTQ9QKDXf8UBov+bP
sI0QOUk1L7G8bg2iCBS9M2jAD4nfIov2NZmLjDVxu0Pvy/ZJDqBn+Sm5wnA6FHq/
KRWsQOV5ae5SMHcwyAx8pH1bHJ3JXMHpw+vk6XRcZZjubKsjZ1q81VteUS0yxFS0
r+EdIQI7H3r2f2c2gAv6P1tV7eR8iA+LMIfk+0TZ2U99MjNYOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5AY5huawCdKn9GGnKEPEBwvHp+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWExYjM4MDItZWE0OC0z
ZDc2LWE4NDctNzg5NGE2YzAyNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERMY5hPF3mOg5/8b5cJnf1ImJK3Rd78/nVvzNfV98UCAcRElorijTzt
n4mRjgukMplY7REL9JKMFclePIOglDsnsUUA7hOBAbqxXlnwkAN+59aJJ/GN1xD3
OEd4008jUluOAMaH5Ik7eXixt7vDS6+mNOb2v/M0MbIAfJF2Fh+b2jpmkkPrHzEu
ZtsHyFam/qVKnIVIpkTd90nrBQbgLZZwV75RqKm7OdRWKdVDYO1CRBd1fNQ0GmAU
efmx7SFEg0AkONoS4kB5FZGBUwUstsGbJSwWU8aihHeVbqYixQk6kLwo3RNxQ3cM
NZsUUZH0XXhN8TiI5ynXCfXYTtOotqA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:06 2026 by rpki-client