This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa
File:                     f4eee786-dbd9-307a-9a11-b190b93526d8.roa (raw, json)
Hash identifier:          dGAB6M8t78xwLKDhEGE3+6oUA1gZiguTDNrhlvmTXZ0=
Subject key identifier:   30:D8:A3:C8:DA:41:2D:37:95:6F:CB:0C:EC:DB:FC:D3:24:D9:BF:9C
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584C8A0C2C31F67823F14372F980
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     14340
IP address blocks:        128.17.0.0/16 maxlen: 24
                          128.245.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:2c:31:f6:78:23:f1:43:72:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=a64e988a-8c72-48bb-b176-2d41fbdb4a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:97:81:c0:d6:66:22:1c:78:f5:4f:ca:83:
                    d6:52:c9:bc:72:65:12:37:e3:4f:b7:6c:de:7c:99:
                    fc:b4:8e:27:37:34:31:7b:f9:e5:c1:ba:1d:f0:e4:
                    2a:4d:b9:3a:06:fb:04:7e:af:fc:2c:64:50:88:3b:
                    47:eb:a0:ef:21:6c:dd:a2:9f:7b:c4:fb:40:ad:74:
                    69:99:bf:6f:c2:c4:1c:45:38:77:b2:5e:43:1f:8d:
                    0b:51:fe:4b:55:70:1b:6a:09:f6:ce:ef:40:e3:df:
                    07:66:72:c6:2c:00:83:77:8e:1b:13:5f:5b:c9:74:
                    80:d2:a5:b6:ba:c8:b9:91:22:64:85:86:7c:95:9c:
                    cc:0e:8c:19:9e:ed:46:16:9a:07:1e:89:8c:fc:f1:
                    3a:ad:2f:c5:4b:64:68:1b:7b:e8:0d:f7:91:4d:19:
                    af:92:e7:24:12:b7:44:f3:d2:4c:a3:df:b5:c3:d4:
                    a5:3c:f1:a2:38:03:97:c0:7c:7a:81:50:3b:e2:54:
                    a0:fa:11:08:cb:85:c5:a2:0f:e2:92:c7:96:2a:15:
                    b1:47:e1:41:80:13:b2:ee:ba:f0:c9:0c:dd:c6:c7:
                    e4:b4:51:06:e0:02:c1:ad:eb:49:ef:8d:ac:7b:ea:
                    eb:2e:1f:f1:4e:e9:f2:37:87:0a:d5:41:f7:ce:2f:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:A3:C8:DA:41:2D:37:95:6F:CB:0C:EC:DB:FC:D3:24:D9:BF:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.17.0.0/16
                  128.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:13:ea:46:59:44:fc:2e:bc:0f:2c:f3:f6:89:81:07:84:db:
         a0:eb:bd:df:28:15:e6:e9:e7:6f:54:0d:a5:10:ea:e9:c6:9a:
         9d:1d:1f:bb:5c:8f:14:ac:6a:98:95:0d:5c:39:f7:fe:18:27:
         6b:eb:83:a3:6f:fc:94:02:34:96:68:f6:d7:de:f9:ca:67:29:
         0d:35:e1:d0:77:0c:41:7d:b4:ba:ba:8a:e2:28:b3:7d:40:03:
         b6:79:32:94:aa:60:c2:a4:c1:69:db:3a:9b:ff:47:e8:d4:00:
         24:8c:1d:be:24:5a:e0:06:bb:1c:22:4d:64:2c:04:23:6b:65:
         38:13:d9:3e:4c:98:3d:47:af:13:86:a5:90:f0:b9:4f:14:dd:
         ff:9d:34:87:e2:ec:a9:f8:fc:36:11:c4:1e:2c:fd:6d:34:78:
         dd:88:00:64:8b:cc:56:47:ae:04:3c:25:81:e8:f1:25:38:01:
         0f:3d:7b:43:6c:cd:43:dd:5b:63:e3:8f:55:f6:f3:44:36:9b:
         b3:9d:66:b4:76:9d:b8:35:6f:22:36:79:d1:dd:26:fc:72:65:
         bf:bf:a2:05:84:f0:69:88:6c:e0:90:c5:33:e3:39:93:54:ec:
         c8:43:a6:84:fb:f5:62:7c:7a:12:77:94:ee:6a:a3:f6:77:2e:
         2c:0d:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:26:42 2026 by rpki-client