This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa
File:                     eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa (raw, json)
Hash identifier:          hRYhPd6ZbnoKrFvpvZKW88SXPrcT+KUzTu/Gsr/00rk=
Subject key identifier:   CA:65:83:59:AC:41:DE:52:15:1D:0F:B1:3B:1D:A3:A9:58:C6:D1:F7
Certificate issuer:       /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a
Certificate serial:       010D0C9F4328584C645C03C0D14A21E4C7007680
Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa
Signing time:             Fri 02 Jan 2026 14:00:39 +0000
ROA not before:           Fri 02 Jan 2026 14:00:39 +0000
ROA not after:            Thu 02 Apr 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        198.99.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:64:5c:03:c0:d1:4a:21:e4:c7:00:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a
        Validity
            Not Before: Jan  2 14:00:39 2026 GMT
            Not After : Apr  2 13:00:39 2026 GMT
        Subject: CN=caf18adf-4741-44fe-8637-8867a69b59bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1f:a9:1f:b2:b6:a0:f2:12:76:47:b0:df:72:
                    5c:d5:92:54:60:1e:35:bf:12:25:f0:52:d4:b6:54:
                    ce:94:fb:9c:2d:81:59:15:22:7b:3c:08:e0:2c:d9:
                    08:0a:a1:d2:05:69:a3:8e:0a:b8:51:b4:29:6d:71:
                    82:42:64:4f:00:af:8a:0b:37:f0:d3:b0:6b:42:46:
                    c2:1b:c9:15:41:67:58:95:d6:4f:40:35:3a:a2:17:
                    9a:0e:74:c0:a1:bd:34:6b:b3:a2:67:60:37:a7:a5:
                    e2:db:6a:3a:c8:0f:ec:8e:6d:85:77:4a:f2:4f:6d:
                    a3:33:d7:c8:fc:9a:e9:0e:cc:ed:3f:1d:86:54:f0:
                    82:9c:90:41:e6:d3:5d:50:c5:cf:11:6c:24:42:ba:
                    80:51:4e:e5:5c:bf:75:cb:0a:f5:0f:ad:89:d2:4f:
                    e7:3a:be:57:3a:01:f5:be:67:39:c4:85:42:97:db:
                    18:81:29:be:48:3d:d2:22:04:0c:da:fb:34:62:0e:
                    cc:73:92:38:59:e9:7a:2a:b5:11:6e:60:bf:66:f0:
                    42:b4:b2:cb:61:ea:2f:12:0e:44:10:06:78:48:18:
                    17:f6:90:41:de:42:b3:75:d8:fd:e4:64:1a:c1:e7:
                    94:ba:ad:70:d5:a7:86:16:27:49:e5:4a:31:ed:31:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:65:83:59:AC:41:DE:52:15:1D:0F:B1:3B:1D:A3:A9:58:C6:D1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl

            X509v3 Authority Key Identifier:
                keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:0d:83:fd:33:b4:6b:15:83:03:be:10:17:bb:8e:9a:63:
         91:8b:10:c9:b8:94:10:4b:96:47:e6:f1:db:e0:b7:73:6c:c3:
         2d:fa:44:84:45:29:22:5f:f7:38:12:68:e0:3a:1e:6f:ab:fc:
         78:30:13:99:9f:ed:87:a3:3f:27:ab:fd:b2:fa:fd:f1:a9:30:
         f5:4f:96:1d:eb:14:6e:b4:98:4f:95:0f:de:af:41:d5:ff:8b:
         47:61:d8:81:92:c5:1c:da:73:20:79:7f:60:55:3e:f3:b5:69:
         16:33:16:39:b9:5a:3e:8c:9f:13:ad:cf:8b:55:52:3b:7d:0d:
         4e:65:75:a5:4f:0a:7d:af:c0:1b:c7:c0:fb:40:81:0f:c7:a6:
         e2:04:0b:24:6d:88:40:ea:22:e2:8c:cc:6e:68:d9:da:4b:84:
         67:73:c6:8b:20:1c:f2:45:4d:7e:5c:bb:28:72:79:3f:25:84:
         a3:5f:dd:bf:05:4c:29:2b:58:80:9b:96:d9:03:57:c1:c7:a3:
         5a:01:36:63:b1:03:3b:f9:5c:6f:6c:49:39:4b:7e:23:4d:a5:
         fd:c9:25:3f:df:d6:19:7e:9e:d6:da:a5:03:a5:1f:66:a5:b2:
         da:59:3b:b2:10:09:2f:d2:89:ba:e8:c0:ba:78:aa:2e:b1:a8:
         22:ac:01:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:03:44 2026 by rpki-client