This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa
File:                     2917b113-9e5f-3763-84e3-6da8775eeb3e.roa (raw, json)
Hash identifier:          KPwI6qY3XKt58O6SWi8zwmGC4AQSU21rQ2EbobRmhns=
Subject key identifier:   AD:9C:B1:DF:21:CB:85:E0:CF:AA:FC:87:F0:9F:2B:9C:BA:10:49:37
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584C4871690E7E9C6ABDAD9C4DB0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa
Signing time:             Tue 23 Dec 2025 14:00:39 +0000
ROA not before:           Tue 23 Dec 2025 14:00:39 +0000
ROA not after:            Mon 23 Mar 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        70.32.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:48:71:69:0e:7e:9c:6a:bd:ad:9c:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Dec 23 14:00:39 2025 GMT
            Not After : Mar 23 13:00:39 2026 GMT
        Subject: CN=f34c0175-30ca-4d8a-8783-efba43821714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:62:c4:26:df:12:ba:d3:20:72:62:3f:ae:
                    98:05:82:17:4b:f8:f5:fe:9e:25:85:97:a9:fc:45:
                    2d:6d:1a:a7:e9:4b:9a:de:ca:e1:bc:73:dd:a2:52:
                    92:25:0a:a8:43:b8:3f:e5:05:07:6f:ef:90:81:17:
                    ea:5c:36:92:d3:22:e3:79:2e:18:05:86:6a:f0:a9:
                    15:14:2e:cf:53:d7:d0:00:05:c1:a7:66:03:65:3b:
                    81:30:b6:22:94:07:7b:4b:e0:bc:aa:b7:ee:cb:8b:
                    3f:80:fb:38:3f:7f:01:37:04:5f:64:5c:19:93:77:
                    02:e7:17:76:98:00:4f:25:da:06:58:c4:ba:7c:8f:
                    24:3e:be:2a:f8:7f:91:96:ab:0f:f3:27:5f:48:5e:
                    36:ac:31:ae:9f:58:63:b1:53:95:2a:3a:d9:ae:8e:
                    8c:d8:f1:94:0c:31:bf:f2:78:52:78:12:6d:d2:99:
                    1a:d4:86:7c:56:d4:31:bb:66:81:bd:16:de:c6:61:
                    b6:24:1e:81:d1:f4:ed:15:fe:b0:70:bf:e2:61:68:
                    41:5c:3f:69:a1:d9:3f:2c:84:9f:57:98:59:7b:27:
                    c2:39:35:86:78:6d:bf:f6:ca:f1:88:52:16:77:c0:
                    e8:99:f0:52:a7:48:75:fd:c8:45:4a:33:c5:f5:a7:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9C:B1:DF:21:CB:85:E0:CF:AA:FC:87:F0:9F:2B:9C:BA:10:49:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ca:d9:ba:0c:1c:0e:ed:55:f3:03:ca:a9:53:35:b3:30:a7:
         40:19:2b:de:11:12:47:eb:26:2d:c1:fd:64:9c:99:46:7a:3b:
         16:0d:2a:b9:bf:ca:c8:23:fc:af:0a:88:a3:9c:26:f4:85:20:
         60:3b:05:8a:3e:5a:20:ac:e5:13:ba:e0:45:a1:d6:d7:8e:44:
         6c:87:91:ed:98:41:65:1c:0c:bc:61:50:63:7c:64:ae:41:07:
         96:89:03:d7:59:2f:09:76:13:1c:ec:a5:fc:36:7d:e4:1b:15:
         b9:e8:ba:d0:e0:c5:d6:c4:a7:9f:2a:67:35:b3:df:82:ac:d6:
         c8:8c:a8:ec:fb:2d:33:b4:98:6b:68:49:d5:52:e1:d5:e9:d6:
         a8:d1:e0:22:7a:74:17:8b:69:6e:70:fa:89:4c:7b:9e:40:da:
         4a:94:13:fe:72:7c:b2:b2:e4:eb:06:6b:00:e1:81:ef:2f:a5:
         14:53:6a:4a:c8:5b:82:c6:a9:14:48:b7:0d:e5:5d:bf:c9:bb:
         ee:57:c2:6b:3a:0e:a5:44:dd:8d:32:fe:dd:15:4a:58:8a:48:
         c2:2a:7f:74:2a:3e:ab:09:0d:f5:7b:e4:af:6f:7a:79:74:b9:
         cd:f7:3d:91:5e:7c:61:ad:ca:94:64:ff:8c:1e:d9:f8:4a:3a:
         78:58:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:58 2026 by rpki-client