This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa
File:                     936da8a2-1bee-3c6b-89ea-d0219b876b97.roa (raw, json)
Hash identifier:          Rhnkg+vXLgXRDLaeVN6SQYq0r/xv5pkFB++Vo+8djnc=
Subject key identifier:   FE:20:74:F9:FF:EC:08:8B:5F:01:BA:BF:56:86:93:96:44:B8:44:53
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584C7AB16304470C75F37F610C00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa
Signing time:             Sat 10 Jan 2026 14:00:39 +0000
ROA not before:           Sat 10 Jan 2026 14:00:39 +0000
ROA not after:            Fri 10 Apr 2026 13:00:39 +0000
asID:                     33659
IP address blocks:        149.143.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Jan 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7a:b1:63:04:47:0c:75:f3:7f:61:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jan 10 14:00:39 2026 GMT
            Not After : Apr 10 13:00:39 2026 GMT
        Subject: CN=a159a7e7-d4ed-46ea-a4c1-24f1be4fc373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:99:bc:6f:da:df:5e:dc:36:32:fb:00:4f:
                    f7:d8:52:1b:43:22:55:ce:40:c3:03:01:b8:26:d7:
                    51:a8:08:c7:e3:2a:8b:c9:00:44:9d:5a:21:d5:c9:
                    de:ae:b7:92:49:ad:41:70:d7:5b:d3:5d:2d:8b:09:
                    e9:03:2b:3a:9e:14:50:f8:6b:81:d2:6f:1c:07:60:
                    c4:c2:64:c8:41:12:1b:e7:2f:9f:95:40:97:aa:d5:
                    c6:78:ea:fb:61:a8:03:4b:32:f7:ec:4c:12:c5:aa:
                    51:cf:3f:ac:e3:f4:a3:56:a3:d2:35:9a:11:e8:12:
                    9c:d4:62:36:b3:92:cf:da:d8:4a:ce:a4:64:f0:55:
                    b0:88:9d:a2:f9:62:0b:1d:e3:a9:23:c9:f2:ec:e4:
                    27:6a:92:6c:61:70:58:0f:d5:b5:22:aa:15:ae:ae:
                    bc:66:12:7a:78:19:c4:9e:60:81:9f:2c:f5:28:e0:
                    28:0a:0b:60:f6:50:8d:b3:9a:f5:f2:e5:8e:c6:69:
                    f0:d4:2c:3d:fd:19:ab:12:16:c6:15:46:29:41:0a:
                    4b:06:2d:b0:d0:45:99:33:f2:01:42:35:4d:99:e5:
                    80:25:27:fb:ca:1a:45:70:ed:4f:b4:34:b7:77:2d:
                    f3:67:0c:d6:b1:44:6a:7e:f6:c4:bd:ed:ea:a0:ea:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:74:F9:FF:EC:08:8B:5F:01:BA:BF:56:86:93:96:44:B8:44:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.143.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:49:35:32:f5:2c:7c:29:da:f4:57:b7:0a:be:33:6f:cf:04:
         16:bb:0e:b1:f5:66:8d:b1:41:25:29:28:49:a0:53:cd:54:2c:
         10:80:b1:cd:00:a4:66:c3:a6:24:6e:91:fd:75:1a:8b:97:18:
         b4:8e:6d:e2:02:69:52:32:c9:a8:f1:b3:1c:15:20:ea:f9:ea:
         24:8e:b3:5d:38:32:d2:4c:ea:84:53:05:d1:f0:df:2d:93:ac:
         95:a4:f7:76:2b:49:4e:18:ea:d7:17:aa:81:bd:ba:46:c1:e7:
         95:85:20:2e:5a:8a:4c:d0:35:98:8c:94:e9:ea:b0:e0:d5:51:
         9e:66:6c:62:f8:f8:88:53:8a:92:c5:b8:d1:d9:76:43:2d:2a:
         50:b6:a9:d0:f1:71:c4:15:ec:33:f2:61:a5:c1:3d:a8:a6:d5:
         99:ab:64:76:56:aa:23:6d:f2:0b:9a:17:75:75:60:c5:2c:c1:
         71:0b:f6:f0:ad:c8:91:90:f8:a3:24:b2:83:5d:e8:8e:51:2c:
         4c:17:ff:bd:dd:76:b1:77:52:d7:8d:32:78:95:6b:3a:16:08:
         f9:94:97:f8:72:94:65:dd:85:76:3c:86:c9:47:79:9d:c6:da:
         a5:9e:1c:26:89:6e:d7:1b:a8:20:1b:ce:ed:10:1f:19:39:6f:
         5a:72:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 04:15:44 2026 by rpki-client