This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
File:                     df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json)
Hash identifier:          0nHdii2JEQfaIVmcm+8YBEc9lYyi83MU5U02n9Qd6y0=
Subject key identifier:   61:B0:A1:43:75:CA:EF:EA:BB:A6:3E:8F:FC:36:D2:46:59:59:DC:2D
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584C7D7C5A4F0D75943ECBE50984
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     16696
IP address blocks:        161.38.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:5a:4f:0d:75:94:3e:cb:e5:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=c1f24126-4d54-4edb-adea-48ea587e45f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:39:40:5a:44:1a:5e:5d:00:d6:40:36:36:be:
                    a2:1f:94:ab:07:a3:aa:02:bd:aa:0f:52:2a:15:7e:
                    15:9c:0e:a0:98:db:ed:6b:06:be:c0:7c:e4:2e:c3:
                    db:b0:13:94:7d:d0:1f:eb:65:e8:a8:c4:67:17:7a:
                    bd:7f:ee:5a:63:e6:4a:55:61:77:98:61:25:e5:ad:
                    ca:db:e5:b2:bf:8f:6a:e4:42:3e:5b:f6:ea:f0:f1:
                    50:ca:03:32:4b:cf:93:93:31:b9:b9:07:ea:37:63:
                    a0:92:50:97:21:ad:ca:16:1b:96:53:0f:ed:76:7b:
                    22:3f:03:fb:1d:b2:82:82:70:8b:45:9d:e4:7e:fa:
                    a8:c7:84:ce:e3:79:12:5c:ec:0b:d6:da:5b:25:39:
                    cd:ab:8b:89:86:21:ae:14:28:05:b7:ca:8c:c1:ff:
                    55:0c:6e:ac:86:88:72:53:39:bd:a7:f6:dd:34:08:
                    2e:86:ff:7d:4d:2c:a5:c9:dd:36:f2:b8:cd:fd:3d:
                    58:0f:04:53:d7:99:40:4e:bc:7a:6f:27:9b:ac:19:
                    18:e7:91:f7:c6:34:df:fb:f0:1d:08:07:38:e2:59:
                    84:d1:f8:f8:f4:bb:fe:ff:bc:2c:70:3b:aa:cc:a2:
                    28:8d:c6:8f:fa:86:17:72:66:85:af:d4:ce:01:a1:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B0:A1:43:75:CA:EF:EA:BB:A6:3E:8F:FC:36:D2:46:59:59:DC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:03:46:29:47:b8:e1:bc:f6:44:b5:d9:e7:9d:1c:1e:3b:
         03:24:28:1d:1f:60:59:cf:f7:02:7a:4b:9c:f4:34:29:7c:49:
         5c:40:14:b9:cb:8d:d1:ba:31:d5:f2:2a:ca:f5:77:37:78:99:
         3e:ca:59:a0:1a:a9:3e:26:af:d0:19:84:1c:d8:f9:57:2d:c4:
         28:52:c4:fa:17:c9:c0:47:51:11:cd:f6:b3:d9:73:cb:01:6d:
         bc:fd:c0:26:16:3c:4d:49:d2:8c:0d:23:3d:02:17:2a:8e:f5:
         86:04:24:df:7d:cd:71:a2:1a:6c:94:25:04:3e:6b:e8:53:a8:
         67:b3:97:f4:50:c0:1a:8d:19:49:46:25:65:c7:fd:f6:29:dc:
         42:e4:a3:eb:7e:f6:e3:e1:79:f0:2d:6b:b0:16:35:23:51:09:
         13:ac:5d:5f:de:9e:69:30:13:74:9b:b1:74:8c:18:61:d8:f5:
         28:4a:c4:b6:1c:df:a7:97:3b:12:85:27:8e:fc:61:f4:64:fa:
         a8:0e:3e:dc:4b:4b:fa:0a:2d:74:d9:4a:00:ec:05:13:12:53:
         a2:22:da:f9:b4:5a:5b:f1:98:f2:d5:86:e4:53:4f:6b:a4:21:
         b8:fb:4b:5b:67:84:60:53:94:16:ff:4a:71:8f:98:61:c6:16:
         aa:41:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 02:00:56 2026 by rpki-client