This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
File:                     88e68d52-7beb-3da2-9dcf-f259957a2388.roa (raw, json)
Hash identifier:          mQCJqjgKu6gDGOWO36P/tyHNLuLmlkpHtK6CLXxIG8o=
Subject key identifier:   82:C5:3B:B1:E8:F7:86:DC:58:2F:7E:AE:6A:0C:BF:8B:9B:A9:D3:0D
Certificate issuer:       /CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
Certificate serial:       010D0C9F4328584C602BEBCD91ADBA049F4A7600
Authority key identifier: E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     26292
IP address blocks:        45.73.128.0/20 maxlen: 24
                          64.30.64.0/19 maxlen: 24
                          199.180.212.0/22 maxlen: 24
                          216.49.144.0/20 maxlen: 24
                          216.195.0.0/19 maxlen: 24
                          2604:8100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:eb:cd:91:ad:ba:04:9f:4a:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=2455c6c7-9110-4796-9890-159c2fb16be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:a7:02:1b:48:ad:4b:1c:28:5d:a8:1d:28:
                    46:8f:ca:a6:9b:3c:56:ab:85:a1:f9:e8:51:b2:7a:
                    ca:e4:8c:f2:12:96:0e:bb:43:07:8b:c4:2c:f4:bd:
                    74:b8:f6:ae:79:ed:9c:dc:0d:cf:9f:63:17:55:af:
                    cb:d0:52:5e:21:d3:97:7d:23:59:f4:cb:3c:ed:d5:
                    25:3c:61:ab:1c:6b:c1:12:26:82:51:6d:78:3c:59:
                    3e:eb:12:e9:d3:7c:f4:67:f5:5a:36:f2:25:73:f1:
                    77:6d:15:1d:75:73:ee:58:14:8d:66:b2:04:1a:ad:
                    17:35:44:77:4b:3e:c0:13:da:d9:db:8a:03:67:27:
                    81:88:da:6d:88:db:91:bd:72:74:0e:af:cc:56:92:
                    d4:36:09:58:9f:7d:a0:75:0b:ff:2c:a7:8c:2d:c2:
                    ee:06:8b:be:51:da:4b:88:b1:98:ac:fd:17:63:b4:
                    85:e8:f5:8d:e7:68:66:ef:96:3e:ce:aa:27:fe:75:
                    04:69:c6:6f:a9:62:f7:43:49:17:37:56:8f:da:c0:
                    6f:3c:e1:91:9e:ac:ed:61:e8:0a:78:83:34:9a:98:
                    05:ed:a8:b0:be:c0:ad:34:1a:d8:5a:7c:37:ce:64:
                    11:75:e0:8c:32:f8:d1:43:25:d8:1e:f0:0f:5f:3a:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:3B:B1:E8:F7:86:DC:58:2F:7E:AE:6A:0C:BF:8B:9B:A9:D3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl

            X509v3 Authority Key Identifier:
                keyid:E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.128.0/20
                  64.30.64.0/19
                  199.180.212.0/22
                  216.49.144.0/20
                  216.195.0.0/19
                IPv6:
                  2604:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2d:04:51:bf:dd:34:51:34:88:0e:e1:d9:8a:c2:fd:7f:ca:
         db:d0:22:da:cc:3c:a7:2d:41:a0:b1:d1:1e:d7:42:51:51:72:
         b5:fe:9b:c8:eb:d6:e3:6c:63:9e:2d:c1:8a:d2:e7:e1:b0:4f:
         fa:38:12:75:38:ff:a5:d6:91:38:5f:23:74:64:99:2e:56:55:
         d6:64:04:8e:28:9b:97:ac:61:14:fb:fd:de:a6:da:ba:3e:c4:
         59:aa:01:d3:d7:9a:55:4c:8d:4c:2d:54:18:b3:a0:48:06:21:
         df:04:67:38:06:5c:e2:1e:b9:ca:42:56:02:62:bc:66:7b:60:
         18:b5:1f:91:d7:81:fc:00:45:16:57:5d:5d:82:27:cf:fa:a3:
         48:c1:ce:e4:d5:73:a6:c8:1b:42:48:f0:ce:34:27:2f:3b:0c:
         e8:1c:ac:28:f1:a1:61:e4:3e:7f:9f:ff:45:3f:67:8d:89:69:
         0c:13:9c:c0:9e:8f:09:21:fa:fe:0c:26:9d:88:21:34:e2:bf:
         83:00:56:6c:ca:0e:4f:43:46:33:4e:d7:59:b0:12:33:7a:0b:
         a7:be:c0:bc:58:41:46:24:9f:b3:9f:8a:f6:a4:14:4a:22:0c:
         3d:92:23:77:52:38:d7:f7:10:36:d1:0e:2f:73:77:59:94:fa:
         e1:84:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:58:04 2026 by rpki-client