This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4237cb45-dbd2-33bc-988b-46b0ee1a0d21.roa
File:                     4237cb45-dbd2-33bc-988b-46b0ee1a0d21.roa (raw, json)
Hash identifier:          XWv8pduPXsIejk42Hwkhd/4e45MZJRdRYuFe88fXoZI=
Subject key identifier:   D8:03:24:34:1A:73:18:6C:C8:9B:72:F3:BD:2B:5D:52:64:CA:C8:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C751C401478C094583FB02380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4237cb45-dbd2-33bc-988b-46b0ee1a0d21.roa
Signing time:             Thu 08 Jan 2026 14:00:39 +0000
ROA not before:           Thu 08 Jan 2026 14:00:39 +0000
ROA not after:            Wed 08 Apr 2026 13:00:39 +0000
asID:                     33490
IP address blocks:        67.168.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:1c:40:14:78:c0:94:58:3f:b0:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan  8 14:00:39 2026 GMT
            Not After : Apr  8 13:00:39 2026 GMT
        Subject: CN=1a35a489-ce41-45c3-bb32-6711f89ce9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e5:1b:9a:cc:c8:ff:94:a5:07:75:ac:97:ed:
                    82:c0:a6:52:18:ad:42:f8:2c:56:81:be:f1:ff:c0:
                    92:4d:52:d4:02:55:5c:31:a8:02:a2:59:67:40:bc:
                    01:48:37:b3:88:ad:87:5e:24:f2:c7:7d:f6:21:03:
                    e0:2c:f4:69:1a:46:9c:75:09:e8:ad:64:cc:7c:ca:
                    92:24:aa:8e:94:85:24:13:f9:35:e7:05:1a:87:d9:
                    58:68:00:b3:30:40:ac:06:76:be:4a:85:39:6a:75:
                    8e:4a:0a:58:ec:64:74:2b:60:4a:81:4c:6d:50:8f:
                    81:ff:96:ad:fa:5b:ab:76:7a:c3:8b:d1:ee:8d:0e:
                    2b:d1:f3:8c:d4:25:44:0b:15:45:29:74:fd:97:30:
                    a6:6c:c0:a8:39:4a:f6:11:9f:82:7d:93:7b:68:68:
                    79:75:bb:79:9a:12:81:64:c8:99:3c:04:ae:8f:e0:
                    46:ff:17:99:d0:61:60:12:be:ee:ea:37:09:bc:8a:
                    85:f2:fc:f7:cf:cf:9c:99:3b:a8:b9:7e:6f:d4:1e:
                    af:c5:40:35:4e:25:dd:8f:6c:b1:65:d3:c1:df:7e:
                    e1:4b:f5:8f:2d:8d:7f:f2:5b:fe:76:85:d2:a5:93:
                    f9:8a:06:40:d9:72:cc:9a:18:e5:e5:9e:87:3e:f1:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:03:24:34:1A:73:18:6C:C8:9B:72:F3:BD:2B:5D:52:64:CA:C8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4237cb45-dbd2-33bc-988b-46b0ee1a0d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.168.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:fb:3b:d2:1e:33:c3:58:ac:16:3a:bf:e8:7a:66:5e:89:fd:
         40:b8:c0:b5:76:92:f0:7c:3d:22:2b:09:41:d4:55:3b:a0:d7:
         8b:b8:7d:bf:24:77:20:6f:f5:91:68:cf:a5:63:5e:54:2d:8c:
         c4:f4:14:4a:fa:84:d8:c0:ad:98:76:dc:34:db:f0:78:3e:bc:
         4e:b7:98:db:1d:90:df:4e:45:5d:92:48:36:ed:07:ff:0f:20:
         e4:88:c3:fd:4f:67:60:8c:da:67:49:44:45:00:d4:e4:2b:0b:
         57:88:c7:f7:75:63:1f:48:51:55:3e:23:83:ea:a4:70:22:c4:
         84:05:08:91:c4:eb:54:e9:55:24:b9:c5:c6:65:0c:86:e0:36:
         52:83:a1:33:4c:08:29:6b:42:be:ff:4c:6c:a7:7c:39:a4:e0:
         c4:e7:3e:ad:65:4a:f7:54:d2:93:f5:37:52:37:93:2a:f0:8f:
         27:23:16:c3:b4:82:af:8d:0f:47:6d:d2:eb:4e:f5:6a:87:c8:
         f2:b6:94:7f:57:4c:49:66:0d:b7:38:64:f5:da:64:32:8b:a7:
         a9:39:94:e2:a5:c3:6a:a2:c7:cf:07:af:f3:9f:90:6d:8a:d6:
         97:a9:8f:54:c6:93:b2:a9:8d:df:5d:5b:a4:ee:64:c1:8b:4a:
         6f:c2:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 18:48:41 2026 by rpki-client