This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa77e14e-ae33-38da-969d-aba0dcf37c47.roa
File:                     fa77e14e-ae33-38da-969d-aba0dcf37c47.roa (raw, json)
Hash identifier:          1A2B4gfMO6U4EmlZ8SxcleQvpgWzdFO/DLYbp67u7Ps=
Subject key identifier:   D3:EF:20:A8:48:91:6B:4D:B8:54:C1:E0:F9:55:C5:35:5D:1E:C6:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584C45A6BDC20F5F75F0E111A3A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa77e14e-ae33-38da-969d-aba0dcf37c47.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     7155
IP address blocks:        72.173.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a6:bd:c2:0f:5f:75:f0:e1:11:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=ae47ea93-55e1-44a2-92e5-e59b5cd28436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:5d:1e:ca:a3:69:e3:85:c0:cd:62:9d:27:
                    6d:69:47:28:a8:86:d8:82:ed:34:09:d9:2f:95:c7:
                    87:8d:4c:ed:53:97:4f:fc:a8:ca:5e:61:15:89:3b:
                    42:a0:63:c2:1c:24:1e:7f:1f:69:25:27:08:f2:8a:
                    4e:34:a8:09:08:ba:ad:7f:c1:18:9a:c5:3b:a3:0e:
                    72:87:96:62:22:55:ac:96:09:42:e2:fc:9a:5a:9d:
                    4f:13:66:2c:b6:8c:45:d8:f7:e0:c0:dd:35:3e:ee:
                    47:80:b6:d9:fd:0d:ef:87:7d:71:97:17:16:0d:dc:
                    82:91:12:1d:92:4c:66:86:3a:a9:2e:36:9b:16:89:
                    0b:5b:7b:b8:c4:b4:cd:98:9c:c3:5f:8f:be:24:36:
                    b7:09:26:96:22:5c:11:10:0c:45:8c:d3:6a:0a:5e:
                    57:f5:cf:0b:a7:1f:2d:58:49:c9:58:4b:94:89:63:
                    e1:b2:e0:8f:42:de:38:9e:d7:8a:26:0f:52:52:8a:
                    ed:8b:b2:af:65:6e:42:06:a4:67:7e:a4:ed:72:45:
                    e4:f7:ff:97:20:14:2b:d3:e0:ee:1f:86:33:f3:7e:
                    3f:1d:b7:29:43:14:72:d1:f1:c3:0a:db:cd:5e:f0:
                    46:ba:6f:60:19:9f:3a:28:f6:54:b9:20:47:76:58:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:20:A8:48:91:6B:4D:B8:54:C1:E0:F9:55:C5:35:5D:1E:C6:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa77e14e-ae33-38da-969d-aba0dcf37c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:b6:59:d2:2e:98:c1:82:90:9a:2b:10:1c:96:a8:82:f3:
         64:72:4d:17:7d:a0:cd:6c:1a:f7:1a:cf:9a:40:84:d2:c3:e7:
         23:b3:d9:af:dd:dc:6b:ab:84:34:20:e5:e4:4d:e5:9c:11:56:
         fb:c4:18:49:d7:74:ea:e0:7b:7a:dd:13:20:9a:1e:9e:06:cb:
         f9:60:47:c6:c8:67:ea:55:13:ff:2d:19:32:96:82:92:17:9e:
         09:aa:93:c3:a3:cc:dd:8d:ff:1d:5f:e3:8d:4e:b0:d6:64:ac:
         ea:f7:c5:d2:81:77:28:fd:aa:a3:8a:d0:3a:c0:b0:86:1b:2f:
         99:6b:ba:07:b8:40:69:8f:dd:7f:6b:1c:ea:84:0c:d6:d2:bf:
         63:21:c5:51:ee:4a:7d:71:72:d0:ad:9d:36:ea:da:0c:9b:b7:
         33:b7:3b:18:0a:18:11:f8:93:ac:b6:01:ad:7b:86:5c:84:83:
         32:d0:1e:82:57:9f:78:69:11:6d:a0:a3:f7:0a:63:d1:43:8e:
         77:ee:ae:dc:d4:09:cb:f7:eb:72:c3:95:6b:b1:56:51:38:01:
         d3:31:e3:a4:ff:2e:27:77:cb:ac:31:40:9c:4d:02:bd:84:cb:
         c6:f0:59:f2:80:11:03:89:aa:c3:4e:00:ab:09:91:e6:a2:1c:
         14:c2:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:28:15 2026 by rpki-client