This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa
File:                     dbfc0664-0294-36d7-b0bb-77ae346459b8.roa (raw, json)
Hash identifier:          /d65e3zlJodOWjDymc3JcI0eVnbSCqzSaGUkdOeXiJQ=
Subject key identifier:   21:06:FB:30:D0:9D:32:4C:3E:C0:65:AB:34:71:F9:D2:AC:FB:26:DC
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584C6E2167E61D746F35086E09C0
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     40703
IP address blocks:        157.166.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:67:e6:1d:74:6f:35:08:6e:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=6efa1660-2e7d-42eb-90ff-3216eb5b072f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:9d:63:e6:ba:61:12:ce:4e:48:22:9a:37:
                    05:c2:74:8e:23:51:e4:43:f6:64:06:61:74:24:c4:
                    8b:8a:27:64:ab:97:01:ae:5d:22:6e:9e:75:46:ee:
                    65:b7:fd:01:9d:40:d8:0b:37:ab:0e:4b:b7:02:15:
                    4d:71:29:2a:76:e0:cf:84:ab:51:03:f1:96:90:54:
                    b4:a3:7e:17:aa:0d:a2:0d:bd:2a:be:98:68:58:41:
                    55:80:13:01:64:9e:22:56:de:5e:eb:a0:fb:50:21:
                    86:40:d4:b6:b8:e9:32:03:fc:d4:b4:db:99:6e:67:
                    5b:18:be:4a:82:29:52:06:14:5f:a0:b4:a0:d5:e0:
                    0f:24:f2:2f:49:65:71:89:70:f2:f4:ab:4b:d8:80:
                    75:02:9b:0d:ac:1b:8f:ba:11:1b:09:b6:09:7d:d8:
                    ef:7a:bd:0f:52:28:6e:c3:22:ba:6a:01:3f:fb:b7:
                    dd:66:bd:d0:69:2b:c4:22:43:78:67:89:c1:e3:df:
                    a1:78:8a:aa:d3:cf:59:fa:87:f0:01:52:11:f8:9e:
                    51:e8:b4:17:3b:b6:dd:7d:a2:36:04:0c:57:fe:c0:
                    83:e8:eb:17:bc:d6:3f:f1:68:0c:42:c8:64:5b:46:
                    4d:a6:bf:c4:7b:4f:3f:75:ec:e0:e7:97:ef:a2:07:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:06:FB:30:D0:9D:32:4C:3E:C0:65:AB:34:71:F9:D2:AC:FB:26:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:77:28:a1:90:b3:99:43:6c:cc:c1:63:f3:0f:e2:e7:be:
         90:bf:cb:b5:d2:60:35:94:37:53:a3:cd:80:28:a9:c5:8d:ab:
         55:87:22:3c:08:ed:4b:25:ad:92:98:3b:d0:bf:65:91:a9:51:
         f9:2a:ee:a5:27:25:99:a3:af:46:21:81:5a:50:5f:3a:f1:d0:
         b1:c7:14:5e:a6:ec:26:30:51:16:6f:c8:fd:bf:01:ec:7a:11:
         41:f0:75:31:2f:e1:8e:13:2b:84:3f:c4:2c:af:a4:47:03:16:
         07:a0:77:ac:1d:b3:ad:84:90:a1:85:78:01:42:42:71:ed:ab:
         bb:0c:c8:5c:ed:72:f9:63:be:8e:54:6a:1a:8f:d2:d7:1f:fe:
         21:5a:27:25:be:5f:be:be:3e:a1:f0:79:29:40:c9:01:10:05:
         a8:99:f4:de:ba:cc:5c:52:ee:7f:11:a1:b3:26:7b:9a:81:cb:
         2f:ca:9e:df:8f:0d:56:dc:6d:71:c7:99:b7:71:ce:ce:8d:dc:
         41:64:71:3e:18:01:9b:28:1c:a2:ee:3f:25:7f:3e:39:f2:17:
         a1:a2:47:3a:18:1d:2a:07:a3:f8:7e:dc:1b:73:92:4c:e5:5e:
         4b:32:f4:69:3d:a7:66:96:e7:0c:fe:79:2f:fb:d3:7e:69:61:
         5c:9b:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:37:26 2026 by rpki-client