This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa
File:                     01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa (raw, json)
Hash identifier:          9arSuOy2gH0sGeZDCFkHCVUnsAfiXsmhF7IbApB69LY=
Subject key identifier:   06:64:16:90:3D:DB:8A:72:DA:A6:64:D4:78:7A:01:C4:F0:AE:07:D7
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CAE571433EF14ED711334EB90
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     3356
IP address blocks:        8.29.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:14:33:ef:14:ed:71:13:34:eb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=68d85b23-3784-4f33-b161-396c66da54b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:81:a8:25:5d:6d:80:ed:26:12:41:3b:75:
                    bd:4e:90:05:82:47:b1:42:f2:0f:f9:08:2d:0b:89:
                    a4:6c:bf:1a:a4:3c:94:57:2d:92:f6:1b:1d:78:4c:
                    37:fb:70:59:f0:05:dc:84:c3:e9:92:8b:7e:ed:9f:
                    d1:ad:b8:ce:d4:24:60:29:1f:b3:9a:35:30:e0:81:
                    a3:50:ba:cd:d1:17:32:68:ba:85:3d:18:38:8d:cf:
                    ff:ea:84:cf:de:96:2e:1a:0b:56:30:33:6f:b6:97:
                    58:a1:f3:59:9d:3a:1f:ad:dc:9d:64:41:47:d5:58:
                    d9:3b:0e:93:b5:ce:04:5f:7b:e5:fc:b2:05:c4:b1:
                    6b:f7:f2:04:f9:b3:53:28:83:c5:50:f3:65:80:d2:
                    6b:7d:13:01:be:a6:e4:2d:a8:56:4f:54:b8:a1:55:
                    78:de:8b:2c:ad:20:43:9f:5b:27:0e:e2:dd:b7:15:
                    fc:90:da:92:7e:86:30:8a:6b:48:53:3f:a3:26:1a:
                    ba:94:a6:23:f0:6f:c6:54:67:89:f1:dd:71:1d:32:
                    ca:8e:52:f7:5a:e3:5b:a4:03:45:f0:0a:b7:06:3f:
                    2c:bc:6e:82:fe:3c:b9:43:db:35:02:91:d8:e0:66:
                    3c:fc:28:76:5e:8c:60:dc:c0:22:48:0a:e2:c2:6b:
                    a7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:16:90:3D:DB:8A:72:DA:A6:64:D4:78:7A:01:C4:F0:AE:07:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.29.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:cd:3b:ef:49:62:3a:37:8e:e5:c4:af:39:cf:aa:a3:fa:32:
         54:cd:49:1b:be:16:8d:d4:f2:51:34:05:93:72:e3:6b:0b:35:
         f7:06:eb:05:05:fa:40:b0:36:d7:10:36:27:e2:da:ea:07:f2:
         01:3a:01:5d:e9:87:bd:70:04:8f:eb:5f:bc:6f:09:5b:25:8a:
         a3:94:bb:8e:52:39:a5:f0:63:03:70:b4:27:ad:fe:eb:e7:20:
         4a:59:5d:e4:8c:7b:fd:68:52:6f:0a:57:9c:bd:92:62:60:c5:
         67:3d:17:9a:9d:f7:83:ae:75:34:12:c5:7c:c7:58:5e:38:0a:
         ed:11:32:27:6f:89:9c:12:77:16:f8:77:0c:2f:0a:de:e3:49:
         db:92:e7:24:a4:c1:1c:1b:83:9c:bb:7b:b9:39:e5:8c:52:a0:
         f3:80:26:54:08:05:db:cd:59:b5:49:bf:57:45:d1:1f:a4:1e:
         34:a1:1b:36:17:17:c0:16:69:ba:51:23:b7:f3:42:f1:df:d7:
         98:cd:69:1c:fe:d7:9a:11:08:e9:a7:fc:b4:05:79:91:ee:a5:
         fa:61:ca:17:5a:92:83:52:34:f6:e2:b1:c5:ef:39:7f:06:e3:
         e3:dd:ec:44:6f:fb:a2:44:ec:55:fe:d4:c2:54:3d:af:39:57:
         d4:00:15:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxQz7xTtcRM065AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjhkODViMjMtMzc4NC00ZjMzLWIxNjEtMzk2YzY2ZGE1NGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUCBqCVdbYDtJhJBO3W9TpAFgkexQvIP+Qgt
C4mkbL8apDyUVy2S9hsdeEw3+3BZ8AXchMPpkot+7Z/RrbjO1CRgKR+zmjUw4IGj
ULrN0RcyaLqFPRg4jc//6oTP3pYuGgtWMDNvtpdYofNZnTofrdydZEFH1VjZOw6T
tc4EX3vl/LIFxLFr9/IE+bNTKIPFUPNlgNJrfRMBvqbkLahWT1S4oVV43ossrSBD
n1snDuLdtxX8kNqSfoYwimtIUz+jJhq6lKYj8G/GVGeJ8d1xHTLKjlL3WuNbpANF
8Aq3Bj8svG6C/jy5Q9s1ApHY4GY8/Ch2Xoxg3MAiSAriwmun1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZkFpA924py2qZk1Hh6AcTwrgfXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDFiMWUzYzItMDI0NS0z
ZTg5LWJhMGItM2NiMWU2ZjU2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECB0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzNO+9JYjo3juXErznPqqP6MlTNSRu+Fo3U8lE0BZNy42sLNfcG6wUF
+kCwNtcQNifi2uoH8gE6AV3ph71wBI/rX7xvCVsliqOUu45SOaXwYwNwtCet/uvn
IEpZXeSMe/1oUm8KV5y9kmJgxWc9F5qd94OudTQSxXzHWF44Cu0RMidviZwSdxb4
dwwvCt7jSduS5ySkwRwbg5y7e7k55YxSoPOAJlQIBdvNWbVJv1dF0R+kHjShGzYX
F8AWabpRI7fzQvHf15jNaRz+15oRCOmn/LQFeZHupfphyhdakoNSNPbiscXvOX8G
4+Pd7ERv+6JE7FX+1MJUPa85V9QAFYE=
-----END CERTIFICATE-----
Generated at Sat Feb 7 06:34:42 2026 by rpki-client