This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
File:                     8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json)
Hash identifier:          VxoMzYq3kP5IQJj0e4p+rlkrrnHeQjfSpU66lvEdj34=
Subject key identifier:   76:09:59:C6:F4:59:0E:B2:ED:AC:94:07:65:EC:63:04:85:C5:2A:9A
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F4328584C9ACC4BC9E223C38872EC9080
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     30158
IP address blocks:        199.189.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:4b:c9:e2:23:c3:88:72:ec:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=1c4d54b6-9983-4992-9274-1d466725b0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:4e:17:f4:6c:96:e2:31:ff:68:80:9b:4b:
                    41:a2:98:64:67:90:55:b6:89:a3:f9:0f:b2:18:49:
                    18:ee:91:25:11:4a:47:7d:69:02:ab:79:ee:34:b5:
                    53:d9:66:75:49:89:0f:fd:02:2d:32:1d:0d:84:e3:
                    8c:1c:e7:60:5d:d8:bc:90:1f:e7:c5:88:97:ca:43:
                    fb:b0:64:1a:7c:33:8a:68:e0:55:d6:d9:e3:29:91:
                    fa:98:99:34:5d:47:7b:4c:33:76:4c:dd:14:b7:69:
                    22:78:50:d8:b1:d2:6c:11:19:9f:48:76:66:f7:0f:
                    61:30:40:01:74:54:76:2a:ac:62:25:e5:f1:c2:11:
                    af:c9:66:d3:da:95:ec:c7:63:a0:d5:0d:54:5a:6d:
                    7f:ea:8f:fb:88:c8:c7:1b:42:ae:14:eb:2b:1e:65:
                    2e:ed:8a:fd:e7:28:44:cc:29:4c:e2:9c:8b:15:6a:
                    68:59:bb:83:fb:f8:cf:89:53:e1:b6:8f:08:08:b6:
                    0d:f8:86:14:e4:67:56:f0:db:bb:c2:c6:28:92:a6:
                    3a:5c:1b:a1:13:48:7b:b7:c2:c8:72:d9:4c:9a:79:
                    c3:6e:f6:e9:c1:d6:f4:3c:2e:6d:fc:21:5f:d2:fb:
                    5f:48:19:92:10:3f:4c:4c:6c:cb:fc:ae:11:ca:d3:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:59:C6:F4:59:0E:B2:ED:AC:94:07:65:EC:63:04:85:C5:2A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:47:52:a3:6c:5a:34:6f:b3:b7:b0:2b:46:64:3e:60:20:e5:
         25:b1:cd:31:fc:3c:ce:97:91:c4:cc:46:b3:14:81:80:04:df:
         29:92:bd:68:09:32:91:9d:d5:0e:eb:e0:c2:38:54:fd:e7:00:
         0d:86:4b:b3:ce:58:1c:ef:ce:02:82:23:80:63:49:de:1e:02:
         b3:eb:e1:d9:fe:58:52:54:31:25:10:61:d7:ac:8f:70:21:22:
         5d:04:22:44:8c:4a:88:ef:60:6a:a4:9f:5a:3d:cf:c9:2b:d3:
         ba:af:c2:49:38:f7:f4:50:23:2c:14:c7:4d:24:48:d6:55:72:
         d8:ca:f7:96:ea:0e:9e:d4:6c:6a:c2:85:72:c7:81:35:8f:37:
         ba:de:85:a7:bf:88:db:05:c8:df:70:97:67:98:51:ef:9b:f8:
         b1:00:82:c4:3e:a5:1b:b2:1c:39:86:68:d5:fb:67:05:10:d7:
         31:d7:e6:d3:9a:95:25:50:d8:ba:e2:73:70:b0:f8:84:c9:60:
         97:70:45:85:9f:bc:81:5a:af:76:9e:b0:ba:3a:fe:81:8d:b1:
         24:6a:cf:3f:ec:89:37:d2:05:ef:57:99:0f:0a:bb:1c:fa:f1:
         5e:8f:b6:45:51:7e:b6:d6:28:1e:55:af:97:98:63:00:49:4a:
         1b:a8:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 01:56:53 2026 by rpki-client