This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b65c11-6fef-389e-ab38-5d699070625c.roa
File:                     04b65c11-6fef-389e-ab38-5d699070625c.roa (raw, json)
Hash identifier:          TtNJ8t/ZZ8E0ouIPnNRJA2KrBw2U0uLAvnzlPxwaY3c=
Subject key identifier:   9D:4E:95:26:A8:18:C7:25:14:B6:36:6A:5D:1C:54:4E:7C:8C:9D:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C751DD864F17D23E11FA83000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b65c11-6fef-389e-ab38-5d699070625c.roa
Signing time:             Thu 08 Jan 2026 14:00:39 +0000
ROA not before:           Thu 08 Jan 2026 14:00:39 +0000
ROA not after:            Wed 08 Apr 2026 13:00:39 +0000
asID:                     33662
IP address blocks:        98.39.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:1d:d8:64:f1:7d:23:e1:1f:a8:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan  8 14:00:39 2026 GMT
            Not After : Apr  8 13:00:39 2026 GMT
        Subject: CN=aab4657d-060e-4584-b5a6-ece581317b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:d5:10:6c:16:fb:a6:8e:a1:65:ea:b2:be:
                    0a:cb:e2:2b:35:8d:ad:27:92:92:b0:ff:96:02:fc:
                    be:2a:5f:6a:13:32:c6:2c:ba:64:75:85:32:cc:32:
                    a6:28:96:a2:84:ac:58:0b:be:47:27:bd:c0:69:31:
                    68:1b:0b:e6:50:7f:32:d7:c5:4e:4c:51:80:1e:ec:
                    44:83:4a:b0:6e:62:d8:8e:cb:33:ef:38:7f:ee:de:
                    71:d0:a8:d5:48:d9:ce:cb:42:ba:3e:e1:fe:f3:b6:
                    44:c2:9d:c2:d9:91:7f:b2:3e:c6:08:8b:41:8e:76:
                    75:ee:73:98:93:24:80:86:cd:d1:e6:fa:13:e2:89:
                    ed:72:31:33:34:83:79:3e:e7:7a:97:0a:e7:31:2d:
                    08:21:4a:83:cd:36:9b:75:90:aa:5a:6d:b7:22:de:
                    d1:96:f6:34:5e:c2:eb:9c:8b:a9:e9:42:21:bc:d6:
                    2f:f5:4b:54:50:1a:99:2a:d3:6a:b8:22:0b:51:d3:
                    07:fe:9d:dd:95:50:41:8f:86:03:e8:f9:9a:23:51:
                    5a:61:e1:1e:54:db:2d:85:cc:4c:97:0e:65:7a:6d:
                    0c:0c:7b:00:20:1b:99:2d:8c:5e:bd:34:77:ff:cd:
                    bd:42:7a:ed:7e:af:9e:40:30:9f:6c:0d:98:55:b8:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:95:26:A8:18:C7:25:14:B6:36:6A:5D:1C:54:4E:7C:8C:9D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b65c11-6fef-389e-ab38-5d699070625c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7d:3c:a3:b4:6b:f5:cf:ff:15:c9:99:f5:36:d3:c1:f6:1d:
         94:42:94:a6:ad:2d:a4:a3:2b:b9:f0:49:82:10:ff:c2:92:02:
         66:43:34:13:fd:98:5b:25:49:34:e0:f1:71:8f:4d:78:45:bc:
         5e:aa:8d:5f:02:81:2b:48:28:56:12:1b:40:b0:ae:dc:10:39:
         5d:0a:88:9e:5f:05:e0:4d:f8:c2:14:5a:ad:f7:29:1a:91:e3:
         44:7c:0c:0a:f5:fd:5d:c4:ca:0b:55:48:9b:d4:9a:df:f5:cc:
         5d:90:01:55:05:81:b1:75:2a:24:be:4d:8d:1f:21:b1:b3:79:
         5e:84:d6:b6:31:35:b7:78:72:c8:39:92:b8:a4:da:4e:b8:31:
         b4:20:86:55:a7:9b:d9:da:16:3c:63:e9:55:fb:e3:d6:ad:06:
         83:46:da:7e:cd:6e:6f:15:cc:ce:ac:e8:50:a8:8e:09:8d:51:
         ef:c0:34:f4:a2:61:86:17:78:4c:13:0e:6d:b5:a8:ca:95:f1:
         18:38:de:df:64:c8:b9:67:01:76:2c:d8:10:fb:cd:b8:63:62:
         c7:db:5a:a3:f8:b0:f0:45:5d:b8:38:94:cb:04:12:34:a9:02:
         90:19:0c:ab:49:df:be:26:6a:45:a0:00:8f:f0:1a:2e:e6:ec:
         5e:d5:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:27:56 2026 by rpki-client