This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa
File:                     f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa (raw, json)
Hash identifier:          olVGKooAAfHCV7OeQlysausn2S6BwI/bQvRL/3FrLJM=
Subject key identifier:   39:45:8E:63:A9:20:87:36:0C:BE:AA:E0:FA:70:85:97:CD:6D:EE:DA
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584C5EC69515532F79B8D8CB3800
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     30103
IP address blocks:        159.124.96.0/23 maxlen: 24
                          159.124.98.0/23 maxlen: 24
                          159.124.100.0/23 maxlen: 24
                          159.124.102.0/23 maxlen: 24
                          159.124.104.0/23 maxlen: 24
                          159.124.106.0/23 maxlen: 24
                          159.124.108.0/23 maxlen: 24
                          159.124.110.0/23 maxlen: 24
                          159.124.112.0/23 maxlen: 24
                          159.124.114.0/23 maxlen: 24
                          159.124.116.0/23 maxlen: 24
                          159.124.118.0/23 maxlen: 24
                          159.124.120.0/23 maxlen: 24
                          159.124.122.0/23 maxlen: 24
                          159.124.124.0/23 maxlen: 24
                          159.124.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:95:15:53:2f:79:b8:d8:cb:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=2d8ed679-ec28-4944-b755-17d70a78b526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:90:20:fa:dc:a0:c4:3c:ac:c1:33:04:b8:
                    40:50:ea:50:73:a8:cf:4e:d1:d0:14:4f:a6:56:be:
                    dd:be:95:6d:bb:ee:ab:47:0f:78:46:2e:7b:e7:c4:
                    e3:c7:34:31:f6:28:9a:a0:46:25:1d:c4:1f:fc:f9:
                    7f:9c:79:f2:ab:98:27:08:ee:07:dd:18:21:69:68:
                    40:d4:9c:be:d0:1d:fc:2d:36:6c:60:67:97:e8:29:
                    a2:f2:05:52:43:3e:ba:17:65:49:67:7c:d5:f0:ba:
                    22:46:cc:9e:18:75:af:82:dd:51:a7:41:54:bf:3d:
                    a4:40:a5:0a:28:83:5e:6f:fe:00:d1:fd:94:26:32:
                    ec:4b:b6:f9:df:b5:79:7a:d2:fa:c4:b4:fe:60:74:
                    0e:7e:fe:2d:24:d2:78:01:96:5d:04:ed:40:de:8c:
                    c4:e6:bf:6c:6b:a9:9e:c7:72:55:f9:3c:66:36:4c:
                    e0:46:05:31:99:38:7a:54:0d:60:c4:a7:77:4f:7f:
                    36:03:c1:b2:56:83:17:bd:2a:5e:5e:b9:b9:6e:09:
                    84:61:8f:2c:55:a7:98:ca:ae:a1:7a:7f:43:b8:b9:
                    d4:5e:2a:7f:e3:e9:ba:3e:2b:1f:41:1e:48:3c:74:
                    ce:fc:52:52:0c:76:2a:2a:5f:72:7c:8b:98:88:f7:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:8E:63:A9:20:87:36:0C:BE:AA:E0:FA:70:85:97:CD:6D:EE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:35:37:e4:6b:3d:8d:d0:e8:56:a9:0f:65:42:03:f8:82:
         c4:f3:b7:1e:f3:80:0f:d4:ca:d6:61:35:04:4c:25:e2:c2:ed:
         2c:e0:81:ff:bf:f7:50:e3:67:22:5e:ca:7a:5f:63:41:19:47:
         63:dd:a3:d1:79:d7:96:75:3d:a9:20:48:27:5c:93:6b:9b:be:
         c1:4d:58:95:3d:b6:7f:4c:fa:08:95:29:3d:91:16:d7:6c:fa:
         67:03:cc:d3:43:f0:6a:8e:dd:19:05:d0:35:2b:f0:f5:dd:27:
         ba:aa:7c:f2:1e:5e:c0:cd:0f:dc:d7:ef:c6:cf:c1:de:c3:72:
         7c:d7:49:ed:ba:97:ab:2b:e9:42:5a:a1:a4:e1:9c:e3:b0:5f:
         aa:37:87:50:5a:a1:6e:6d:b5:53:c4:cd:7e:b4:35:38:be:78:
         73:f9:bf:e3:19:e5:88:56:62:d8:86:ab:54:08:b5:1b:ea:c9:
         85:23:3d:73:f7:d3:11:46:90:55:9b:a8:a3:4b:74:b7:4e:b4:
         9a:b8:80:74:19:5b:b4:8b:ea:c1:06:f9:c7:cd:ae:f9:17:05:
         48:53:33:16:d1:cc:8b:e7:fd:08:39:2f:fe:aa:a0:41:ad:ca:
         d7:68:fa:c0:80:05:f2:3a:67:43:75:3d:cb:a1:f2:f1:d5:60:
         03:03:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:48:45 2026 by rpki-client