This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa
File:                     faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json)
Hash identifier:          KqDRoIQRvu3twF+8WCovnqO1XQwYk5TOih29yrB/nOc=
Subject key identifier:   D2:7F:F8:D6:52:59:51:77:05:86:58:10:57:08:8F:E9:01:D4:5E:A1
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584C602BE8606DABA637833CE900
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     5511
IP address blocks:        66.112.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:e8:60:6d:ab:a6:37:83:3c:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=f26c6a82-00e2-465a-babb-abfdf7980d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:5e:b6:71:7d:e3:98:f1:bb:27:6a:0a:37:
                    0e:50:20:f7:85:19:86:81:37:2a:34:aa:61:f8:40:
                    85:d6:e6:f3:dd:a1:51:45:fc:39:73:79:a6:5c:eb:
                    86:16:39:f7:b4:a8:8b:12:20:0c:cd:53:a1:f0:36:
                    a6:95:0c:09:99:92:d6:f6:0c:37:b1:43:eb:d4:c3:
                    09:c1:68:31:cb:cb:55:40:b2:8a:b8:53:fe:fe:f2:
                    5e:dc:45:3c:0b:c0:56:36:33:30:0c:08:d2:ef:bf:
                    58:46:50:96:01:d6:84:7f:ad:96:38:15:9b:7e:ed:
                    45:53:50:05:40:fe:f9:2e:1c:bf:11:ee:62:41:e8:
                    2a:59:ac:fe:86:31:4e:4d:42:3b:8e:52:75:6f:9d:
                    d9:62:49:9d:8f:40:32:6a:50:1e:b9:db:d1:ea:5c:
                    9e:52:de:c3:7a:e7:42:93:2c:a3:41:1c:81:b8:f9:
                    fd:52:2b:13:87:81:96:f4:3d:53:63:a8:cc:68:ef:
                    fc:a9:83:8e:d1:2a:23:2a:50:17:d7:1c:f6:6c:14:
                    b1:6d:15:e4:76:9f:1a:94:c9:33:7a:cb:96:aa:5a:
                    9a:1b:91:31:00:69:4c:4a:0c:9b:4f:bc:76:5b:e3:
                    b4:03:59:c1:40:3f:2d:ad:0b:57:11:9c:57:51:dd:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7F:F8:D6:52:59:51:77:05:86:58:10:57:08:8F:E9:01:D4:5E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:c8:98:e4:7c:04:cf:63:60:c4:ca:75:ee:ab:eb:03:51:fe:
         7c:01:82:92:e6:45:a6:df:2a:eb:9c:fc:02:80:69:ec:38:a7:
         40:22:62:63:ca:c7:f1:9d:65:25:13:26:c7:c7:e7:8b:ca:cc:
         e4:19:47:d9:d8:cb:a9:02:14:d8:87:52:4b:1e:af:fe:71:a1:
         da:7a:46:1a:19:c1:e5:fb:9b:75:a6:15:6b:c0:ee:1c:4c:8d:
         4f:e1:77:d4:c3:d4:84:3a:d7:78:33:78:d8:5d:e4:87:53:78:
         37:db:16:46:c0:64:5b:9c:69:02:d4:9b:1f:ae:b2:eb:3e:0b:
         7f:4d:57:6c:69:9d:fc:3e:85:e1:b8:a0:a4:4e:e2:47:24:56:
         17:a7:26:7b:16:14:f3:f0:5b:b3:67:ab:ca:6c:15:91:9d:0b:
         0e:e0:39:25:46:43:fa:10:01:fb:46:d6:b5:7a:3b:ca:51:6b:
         e7:67:79:79:82:05:44:c9:e5:d2:36:19:44:c2:2f:27:88:e3:
         b9:bc:60:6b:e8:46:fb:5c:91:9e:65:1b:02:87:de:ee:0b:3a:
         8f:8f:a3:d7:0b:96:6f:1a:94:db:4f:a9:8e:9c:cf:bc:20:73:
         87:8e:1c:e0:bb:b2:5a:a3:3c:8d:0d:ee:49:39:79:54:61:cd:
         16:80:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 12:57:12 2026 by rpki-client