This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa
File:                     f7e7861a-7949-3299-a067-2db09c6ed01c.roa (raw, json)
Hash identifier:          CO1wZgjBbF2nLPsmAOh4KpKZyC9rzJ785iNOFpnK/uk=
Subject key identifier:   7F:1B:9A:DE:42:97:33:25:A2:E4:99:85:97:5A:24:E4:24:7B:8A:2A
Certificate issuer:       /CN=ac42ca24-d785-4ab8-81d3-baec3a30b660
Certificate serial:       010D0C9F4328584C645BFE9DA8FF66F839FC5900
Authority key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa
Signing time:             Fri 02 Jan 2026 14:00:39 +0000
ROA not before:           Fri 02 Jan 2026 14:00:39 +0000
ROA not after:            Thu 02 Apr 2026 13:00:39 +0000
asID:                     18786
IP address blocks:        162.254.112.0/22 maxlen: 24
                          192.157.20.0/22 maxlen: 24
                          199.193.180.0/22 maxlen: 24
                          204.62.56.0/21 maxlen: 24
                          208.77.8.0/23 maxlen: 24
                          216.146.224.0/20 maxlen: 24
                          2607:ffe8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:64:5b:fe:9d:a8:ff:66:f8:39:fc:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660
        Validity
            Not Before: Jan  2 14:00:39 2026 GMT
            Not After : Apr  2 13:00:39 2026 GMT
        Subject: CN=6834bd22-3e71-4548-97fa-24ea53811d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:b1:a2:e7:34:d0:b8:a7:b6:fb:50:14:bf:
                    57:7b:7c:b4:82:c1:99:cd:44:61:0f:9c:78:2b:77:
                    9b:1d:7a:ed:93:3c:16:53:94:b9:32:28:c3:a0:91:
                    34:1a:1c:f6:a3:ef:41:e8:e3:1e:5f:d7:88:4a:e3:
                    00:05:2e:1a:6d:cc:88:96:48:f0:18:0f:49:3d:6b:
                    58:29:19:a4:1c:f0:29:c2:32:54:24:9c:77:9b:72:
                    f9:e2:fa:c5:d8:b6:06:6e:d7:87:18:6c:2d:af:1b:
                    01:5a:19:e3:0a:5e:23:99:75:2f:2d:81:ce:23:74:
                    17:51:dc:89:e5:61:f4:61:10:15:12:2f:cd:29:25:
                    a1:01:a0:3d:58:c8:93:07:25:0f:79:bc:05:44:a7:
                    2b:d8:9f:b5:c2:6a:1e:d4:41:1e:81:02:d4:fa:ef:
                    a3:6c:20:7f:ec:e2:3d:ff:3e:24:5e:0b:86:3a:ea:
                    c8:06:05:5b:f6:94:30:2e:60:b3:a6:01:60:a2:ad:
                    34:fc:22:75:f4:b6:61:f7:20:a9:e6:09:5a:20:45:
                    a1:15:11:fa:59:bc:72:9f:56:bc:1a:59:d8:90:dc:
                    c2:a7:7f:a6:4c:6a:fc:a1:2d:bb:cb:09:15:fa:4d:
                    ea:29:98:b4:26:30:72:af:00:c0:b7:ef:1a:00:78:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1B:9A:DE:42:97:33:25:A2:E4:99:85:97:5A:24:E4:24:7B:8A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl

            X509v3 Authority Key Identifier:
                keyid:F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.112.0/22
                  192.157.20.0/22
                  199.193.180.0/22
                  204.62.56.0/21
                  208.77.8.0/23
                  216.146.224.0/20
                IPv6:
                  2607:ffe8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:38:66:8b:93:78:28:cd:57:89:10:6e:56:37:5e:a9:43:
         b3:48:1d:4c:cf:4a:15:c9:86:83:e5:1a:50:b2:65:79:14:76:
         75:a8:2c:22:86:56:8b:86:a4:1e:e1:e6:88:b6:9a:22:27:c9:
         29:42:b9:32:7e:c9:c8:86:99:a2:19:c5:c9:ba:26:93:ca:ae:
         f6:71:2a:03:2b:c4:82:fe:94:72:ab:6a:55:27:7f:d2:f8:6a:
         cf:de:7e:12:dd:25:2a:03:ca:17:ca:46:71:32:be:d3:34:5d:
         da:58:3b:50:c6:63:fa:c4:a4:38:d9:b6:22:17:8f:fe:61:fd:
         a2:0b:70:6c:90:71:b0:ac:6b:9f:40:81:0e:14:6a:98:80:78:
         e2:13:ee:ab:4c:f5:cc:55:1c:f6:16:23:d4:18:eb:a1:e6:2d:
         28:f4:3c:01:79:74:52:15:88:fc:b0:82:2f:e8:33:fd:d3:ba:
         e3:03:1a:0f:34:43:60:56:47:0d:84:12:8b:72:4a:b9:8a:88:
         0c:8d:91:91:d2:1a:54:40:61:0b:4a:54:a8:c7:29:39:d7:fb:
         0d:7c:5b:20:a3:40:1d:32:3d:bb:cb:03:6c:aa:30:92:15:e4:
         2e:d2:5f:c3:62:4e:c9:03:d6:21:0a:cd:84:70:d7:ab:fb:0f:
         ec:09:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:46 2026 by rpki-client