This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa
File:                     c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa (raw, json)
Hash identifier:          ftW27XvLjcsWGp2L4R16S289Xd+gWdvhh40cHCep6Kc=
Subject key identifier:   95:FE:07:BE:47:4C:AA:E1:76:E9:CE:11:4A:4B:AD:6A:3E:D1:4D:E7
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584CBF172460D38CA452B446E440
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     21928
IP address blocks:        65.76.0.0/16 maxlen: 24
                          167.20.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:24:60:d3:8c:a4:52:b4:46:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=99f75eb9-d70a-48fc-866c-8e2e9a513a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:93:c3:af:58:77:95:7c:2a:27:e7:75:bc:
                    45:4c:5b:ae:f3:87:04:44:d1:30:58:cb:13:5a:cf:
                    79:93:f4:4c:e0:46:56:05:60:cb:14:6c:e8:56:e6:
                    43:2f:5f:e0:a3:25:cb:17:53:f2:80:55:16:84:7d:
                    c3:83:aa:af:fe:ba:35:ad:f3:82:25:09:bb:af:90:
                    7e:f4:08:a3:ac:94:c2:14:29:f1:85:28:80:09:68:
                    01:14:a3:9c:1d:70:96:10:49:d7:70:b1:bf:bf:fa:
                    e8:76:c6:70:ec:78:5c:b7:58:b1:d0:73:3d:63:81:
                    a6:76:b2:f7:53:a3:2d:f0:01:b5:de:90:84:c2:6c:
                    10:c7:21:fa:1c:7f:31:fb:d2:1b:66:d4:e0:c5:56:
                    71:61:97:eb:6d:53:9a:11:21:68:29:69:4c:fc:7a:
                    8b:56:b7:e7:79:c3:fe:d6:a2:70:a9:ab:a3:77:2a:
                    bd:e9:79:a1:1c:66:3f:42:dd:4a:ea:5c:5a:9e:76:
                    a2:f9:e0:6a:e9:82:2b:c3:0a:60:cd:65:66:31:e5:
                    27:0f:39:39:8c:06:5c:31:ef:4d:f5:eb:c3:40:69:
                    0c:fd:c8:04:78:9e:5b:72:f7:15:aa:62:49:f3:e9:
                    d1:c3:da:fb:a4:19:e0:28:0a:46:39:68:ed:33:a1:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FE:07:BE:47:4C:AA:E1:76:E9:CE:11:4A:4B:AD:6A:3E:D1:4D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.76.0.0/16
                  167.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:85:8a:27:6f:2e:d7:9b:6a:ce:a8:9d:36:29:96:4b:8e:7e:
         66:fe:ef:eb:94:5a:b4:7a:88:18:5e:45:b0:4a:c1:3f:d9:74:
         f3:20:b5:38:ce:3b:06:64:2a:8f:d3:cf:d1:da:cf:91:4b:42:
         7d:e7:77:d5:d1:1a:42:dc:12:a3:97:86:92:50:dd:be:f3:8d:
         76:6b:5e:d7:0e:46:93:13:1b:43:4f:4a:3c:17:f4:90:15:aa:
         10:43:40:1e:75:1e:45:87:39:65:27:08:82:ee:32:2f:9d:d0:
         cd:c4:bf:6e:92:3b:c5:0d:9f:5d:e7:12:46:da:0a:29:e0:f8:
         c0:b3:00:db:79:27:e4:60:68:78:1e:b2:fb:55:c5:b8:b4:d4:
         7d:fb:94:5b:67:7b:63:72:07:41:d0:54:fd:7e:bb:b3:42:bd:
         0d:2b:b7:21:48:c7:c3:a4:a3:2e:de:ec:10:bf:e9:04:e6:a8:
         9f:00:4e:67:cd:8c:2d:e9:07:1d:dc:07:3f:58:e2:e2:5a:d8:
         98:23:e1:42:7a:98:aa:df:28:2e:52:a6:2a:fa:ef:eb:27:ff:
         84:17:9c:eb:bb:f9:c2:a6:ac:55:14:37:dd:4c:22:79:d0:df:
         54:ab:9e:e1:17:3d:ad:97:61:49:07:01:98:53:fe:af:b5:71:
         bd:34:9d:eb
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEy/FyRg04ykUrRG5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
OTlmNzVlYjktZDcwYS00OGZjLTg2NmMtOGUyZTlhNTEzYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfOTw69Yd5V8KifndbxFTFuu84cERNEwWMsT
Ws95k/RM4EZWBWDLFGzoVuZDL1/goyXLF1PygFUWhH3Dg6qv/ro1rfOCJQm7r5B+
9AijrJTCFCnxhSiACWgBFKOcHXCWEEnXcLG/v/rodsZw7Hhct1ix0HM9Y4GmdrL3
U6Mt8AG13pCEwmwQxyH6HH8x+9IbZtTgxVZxYZfrbVOaESFoKWlM/HqLVrfnecP+
1qJwqaujdyq96XmhHGY/Qt1K6lxannai+eBq6YIrwwpgzWVmMeUnDzk5jAZcMe9N
9evDQGkM/cgEeJ5bcvcVqmJJ8+nRw9r7pBngKApGOWjtM6FC9wIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFJX+B75HTKrhdunOEUpLrWo+0U3nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvYzA4Y2RkZjktYmExYy0z
MjZlLWI1ZjItZWFhOTFhYzk1YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAQUwDAwCn
FDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQABhYonby7Xm2rOqJ02KZZLjn5m/u/rlFq0eogYXkWwSsE/2XTz
ILU4zjsGZCqP08/R2s+RS0J953fV0RpC3BKjl4aSUN2+8412a17XDkaTExtDT0o8
F/SQFaoQQ0AedR5FhzllJwiC7jIvndDNxL9ukjvFDZ9d5xJG2gop4PjAswDbeSfk
YGh4HrL7VcW4tNR9+5RbZ3tjcgdB0FT9fruzQr0NK7chSMfDpKMu3uwQv+kE5qif
AE5nzYwt6Qcd3Ac/WOLiWtiYI+FCepiq3yguUqYq+u/rJ/+EF5zru/nCpqxVFDfd
TCJ50N9Uq57hFz2tl2FJBwGYU/6vtXG9NJ3r
-----END CERTIFICATE-----
Generated at Wed Feb 4 10:20:19 2026 by rpki-client