This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa
File:                     523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa (raw, json)
Hash identifier:          CkKAqrD+/tX6NK0RThXJn3EICF/y4mnm/tsg+/mRFls=
Subject key identifier:   BF:E5:FA:05:CC:5E:6E:2E:94:95:E3:4C:6E:4E:C8:BF:A3:E4:73:9F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584C87417D8790EFC7265A40ACC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa
Signing time:             Thu 15 Jan 2026 02:00:31 +0000
ROA not before:           Thu 15 Jan 2026 02:00:31 +0000
ROA not after:            Wed 15 Apr 2026 01:00:31 +0000
asID:                     13335
IP address blocks:        104.18.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:41:7d:87:90:ef:c7:26:5a:40:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 15 02:00:31 2026 GMT
            Not After : Apr 15 01:00:31 2026 GMT
        Subject: CN=fa2e3977-3821-4cd8-a1d0-6d68a3a35e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:b2:3f:f5:c6:1b:cd:f5:d5:23:f6:35:c4:
                    35:52:ff:18:c3:54:d9:de:cb:33:56:b8:5f:b6:ce:
                    8d:27:71:43:f5:18:84:0c:fd:3a:8c:cd:f8:3c:9f:
                    8d:14:d5:aa:93:0c:41:98:ed:31:7c:6b:f2:b3:e6:
                    8d:c1:60:38:ad:fe:bb:69:93:6a:6c:50:40:41:5b:
                    e8:c7:91:61:8e:49:91:fe:d2:74:ec:2b:99:62:fc:
                    65:c9:c3:04:db:13:78:4d:23:b0:db:97:59:34:32:
                    59:1a:2e:af:1a:2a:1c:ed:a5:d0:e5:48:9f:f6:07:
                    13:fa:20:3e:e0:37:64:a5:bc:65:29:1e:14:c5:7e:
                    74:64:49:dc:09:45:ac:49:69:bb:fe:cb:b2:c3:37:
                    eb:7f:62:4e:ae:16:22:d2:ed:0f:31:db:c4:f9:c2:
                    73:5a:30:52:0a:fb:99:83:d3:3a:e6:e7:06:ac:13:
                    3d:c1:d7:68:28:ab:1b:12:d9:df:39:a0:7e:70:43:
                    59:de:bc:9d:37:6e:56:85:a6:c4:ab:11:95:4b:db:
                    e4:24:ed:c8:e0:73:76:31:db:c4:1e:6e:45:50:be:
                    5f:37:81:43:59:16:9a:05:8b:19:48:ef:b5:95:f6:
                    e7:37:e4:fc:a8:25:89:90:30:0a:42:41:f7:de:ce:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:FA:05:CC:5E:6E:2E:94:95:E3:4C:6E:4E:C8:BF:A3:E4:73:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:87:bc:9c:db:f3:de:6f:93:1b:59:f8:08:b9:c9:be:26:eb:
         35:bd:bd:03:5a:f0:3d:f2:39:bc:88:19:3c:db:7b:5f:9b:66:
         f9:38:3f:56:fc:21:d3:11:bc:d0:4f:82:64:56:ef:53:63:f8:
         c2:93:b9:41:98:8d:6e:22:2f:62:6b:04:1b:d4:9d:c4:7a:b8:
         48:1f:ce:46:4f:b6:36:cf:93:c2:6c:41:61:1c:4d:6a:d5:ea:
         b3:7a:22:f8:9e:34:ce:bf:f3:68:d7:82:07:2f:36:52:05:39:
         b7:10:17:32:3e:7f:dc:31:09:7f:03:63:ed:76:22:dd:7e:0c:
         9a:ad:f0:44:76:8b:b0:b1:fc:16:b9:14:cc:99:82:2a:60:60:
         db:10:22:7e:fd:e9:51:72:6b:4b:3f:16:9c:c6:64:24:dd:31:
         f1:71:4c:7e:a0:2a:3a:a6:6a:88:a0:bf:75:71:3e:42:46:b4:
         58:18:fe:27:d3:1f:5b:db:b1:d7:64:d5:9d:55:a1:46:a3:2f:
         a8:88:11:bf:51:59:22:b6:72:4a:53:b2:8d:a7:43:c0:d4:eb:
         6e:84:ee:b4:28:aa:ed:40:ec:1d:a6:f7:3f:c5:37:30:ed:da:
         1a:e3:56:17:b5:74:72:d9:83:5a:35:8a:1a:7f:b6:31:f1:b1:
         34:5c:98:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:09:02 2026 by rpki-client