This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
File:                     68dae09f-47df-3c08-b3d6-68592a6158bf.roa (raw, json)
Hash identifier:          LmInzsN9qwQrNLS/qobtEmQIrh371oV4s6CGUdrU+h0=
Subject key identifier:   A4:92:45:35:87:25:56:C8:83:58:A8:62:67:C2:02:20:16:FF:6C:57
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584C8A0C2BE0172E8962E8236BC0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     14340
IP address blocks:        13.110.0.0/16 maxlen: 24
                          96.43.144.0/20 maxlen: 24
                          96.43.152.0/23 maxlen: 24
                          136.146.0.0/16 maxlen: 24
                          136.147.0.0/17 maxlen: 24
                          136.147.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:2b:e0:17:2e:89:62:e8:23:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=ef32507f-66b1-454a-ae7a-3e7169ed4c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:9c:d2:d5:33:99:b8:8e:66:de:c4:c2:d8:
                    86:0f:5d:c4:02:19:02:39:b6:f6:bf:e2:5f:6b:2b:
                    0d:04:76:94:55:01:6c:e4:eb:db:df:dd:bf:66:b1:
                    0f:51:52:80:cb:31:48:c3:cd:11:db:f7:db:60:98:
                    f4:ba:45:35:89:e3:0d:fd:d8:5b:98:ca:4a:21:85:
                    0c:75:6f:ea:fa:45:3d:9f:6c:0a:de:16:bc:df:e7:
                    61:2e:e2:fd:35:93:73:cf:bd:12:24:39:05:ab:cc:
                    ed:9a:27:83:49:c5:c0:ab:0e:6a:ce:7a:10:84:8e:
                    4e:bc:f6:53:5c:e4:9d:df:b4:e6:48:3b:2d:3b:37:
                    c8:b8:b8:9d:c9:ea:b5:2e:1f:bf:d3:b0:07:d8:51:
                    dd:65:9e:e7:88:23:be:16:64:53:7c:1a:47:16:bf:
                    83:bf:6c:55:d7:45:e0:6d:5d:33:36:e9:68:f4:d0:
                    21:8f:02:26:2b:e3:67:c0:1e:30:d1:8e:32:7c:ef:
                    32:98:41:c3:f7:59:79:c5:03:f0:fa:40:70:2c:55:
                    99:bf:ef:28:57:4a:7b:a9:87:b4:b2:36:ae:a2:80:
                    4f:d1:70:2a:3b:5d:7a:f1:67:5b:5c:e8:2c:05:fa:
                    84:11:8f:f3:4f:e2:96:e7:08:fb:a8:7e:8d:21:e0:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:92:45:35:87:25:56:C8:83:58:A8:62:67:C2:02:20:16:FF:6C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.110.0.0/16
                  96.43.144.0/20
                  136.146.0.0-136.147.127.255
                  136.147.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:23:a5:83:95:b7:d8:ab:a3:66:c9:96:ef:bc:2c:03:96:31:
         4a:4c:eb:6b:96:78:8c:7d:b6:1c:1b:60:f3:aa:14:42:9a:1b:
         95:e1:fc:23:d8:2f:0d:f1:72:ce:46:4b:21:4a:fc:67:ed:33:
         d2:50:94:4b:43:dc:af:24:fb:af:89:25:ec:79:5f:f5:43:55:
         0d:f9:4a:e3:6b:18:44:1a:75:2e:74:cd:1e:69:0c:55:83:25:
         c5:42:82:20:aa:ad:bc:86:91:44:33:3f:9e:b8:b4:87:68:80:
         1a:3c:44:5f:68:46:9f:b7:e8:0e:d0:84:0d:f2:e2:d0:a8:d5:
         75:50:d5:82:23:8b:da:e8:75:e1:6f:05:47:56:df:b6:e4:59:
         bf:a0:02:e9:55:e2:46:7a:32:52:06:ad:89:a2:9d:4f:08:7f:
         61:c2:4a:53:91:1e:97:19:64:fe:7b:b2:fc:5f:b8:20:6c:a3:
         61:76:62:ae:77:67:4f:62:34:e3:db:68:28:b8:9c:2f:8a:48:
         21:50:01:d8:be:54:b7:2c:88:4d:1a:93:db:87:de:94:3e:2c:
         6c:1b:69:a1:c8:e7:5c:df:38:26:4d:3f:cc:64:9f:21:f2:9d:
         6b:d9:bc:84:67:cf:3e:ec:75:84:4b:72:68:c7:a9:5e:da:0d:
         85:9c:a9:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 19 13:26:42 2026 by rpki-client