This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa
File:                     f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (raw, json)
Hash identifier:          TLFRD+HGPSX1gphb0cGagsr9Obo9cy51espKZkL/7lw=
Subject key identifier:   09:E0:A8:04:86:2E:E6:02:18:23:2C:C0:6E:A9:D5:47:6B:F4:6E:2F
Certificate issuer:       /CN=28ab384d-3018-413f-b253-d2f3ef552ffa
Certificate serial:       010D0C9F4328584C1630D06C95DF43DE2E31C500
Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa
Signing time:             Fri 05 Dec 2025 14:00:38 +0000
ROA not before:           Fri 05 Dec 2025 14:00:38 +0000
ROA not after:            Thu 05 Mar 2026 14:00:38 +0000
asID:                     399253
IP address blocks:        209.209.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:30:d0:6c:95:df:43:de:2e:31:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa
        Validity
            Not Before: Dec  5 14:00:38 2025 GMT
            Not After : Mar  5 14:00:38 2026 GMT
        Subject: CN=07e06569-d622-4ec9-919f-3c3eafdd59be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:45:28:84:96:0d:df:7a:1f:77:50:42:d6:
                    aa:8a:b0:fb:14:64:be:bc:49:b3:0f:c1:77:1c:a1:
                    a7:fb:ac:57:9e:fe:0f:e8:5f:9a:64:26:6b:fb:61:
                    6e:05:a8:08:53:a7:49:92:5d:ff:22:4a:e6:8a:1a:
                    25:7e:48:a3:36:aa:a6:c0:ab:75:f6:e9:40:e4:27:
                    06:9e:6a:f9:4f:10:aa:91:63:38:c6:de:15:74:19:
                    74:b9:6b:2e:e5:06:2d:5a:2f:cc:37:a0:6c:13:ac:
                    dd:8d:cc:f3:34:ee:c1:e2:0e:4d:70:54:81:4c:3b:
                    b4:8e:85:93:67:78:0a:b9:4d:5e:2a:4a:55:a4:f1:
                    3c:aa:e2:3a:8c:d4:38:ec:0a:34:20:eb:8e:b1:78:
                    d4:d6:d4:e6:71:2c:a8:20:dd:42:82:5c:85:14:62:
                    a1:5e:69:bb:48:26:c1:70:5b:d7:5f:74:e0:a4:ba:
                    cf:f8:a5:cf:7c:dd:f1:be:ab:92:a1:fd:ab:e4:39:
                    6b:8e:73:2d:fe:4f:46:23:2f:05:1f:b2:ed:eb:a2:
                    bd:e0:5d:f1:a6:c9:70:6a:e9:bf:77:5e:88:1e:ba:
                    c2:d9:4f:bf:b7:33:5d:48:84:6c:e8:95:0f:a1:6d:
                    0e:f0:db:f1:0f:d4:31:d9:6f:29:f4:2d:bd:6a:20:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E0:A8:04:86:2E:E6:02:18:23:2C:C0:6E:A9:D5:47:6B:F4:6E:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl

            X509v3 Authority Key Identifier:
                keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:53:46:ea:12:6e:3f:5f:c2:19:1f:39:99:f1:24:bb:b7:38:
         07:c2:cd:5b:bc:14:a4:9d:72:68:2c:10:cb:b0:84:b7:8c:8e:
         95:85:2a:74:5f:71:7c:12:6e:11:f6:3a:c5:7f:9f:a2:d8:5f:
         57:c7:25:bd:e2:ab:60:3c:39:ec:27:7e:9c:51:8e:76:6c:c7:
         cb:87:ed:9c:96:c7:46:30:6d:40:00:6c:81:2d:ac:ea:bf:b2:
         42:d9:ac:ca:f0:d9:d2:a6:de:1c:ef:82:97:63:c8:bb:d0:9e:
         4e:58:46:dd:0d:61:52:84:47:4b:35:3e:57:86:dd:2a:6c:eb:
         68:63:4a:2d:2d:8c:f6:c5:6b:87:a2:cb:be:84:22:6f:cd:d6:
         44:71:b7:02:69:a4:d9:52:dc:ec:62:0f:1b:09:74:83:38:11:
         69:5b:fe:52:74:8d:7c:5a:47:40:f9:31:0d:23:20:56:e1:f6:
         71:c0:44:95:e5:6c:20:6f:45:ef:12:72:78:fc:78:78:27:63:
         76:6a:18:42:e0:7a:17:89:04:68:c6:15:24:ad:d1:eb:18:e5:
         06:af:c8:e8:98:68:c1:75:86:51:7d:91:fa:21:9f:72:25:b7:
         2a:8a:a3:f6:61:ee:97:25:7a:ec:9e:c0:e6:07:fe:fe:16:c1:
         a0:84:ff:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNBsld9D3i4xxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhYjM4NGQtMzAxOC00MTNmLWIyNTMtZDJmM2VmNTUy
ZmZhMB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk
MDdlMDY1NjktZDYyMi00ZWM5LTkxOWYtM2MzZWFmZGQ1OWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQpFKISWDd96H3dQQtaqirD7FGS+vEmzD8F3
HKGn+6xXnv4P6F+aZCZr+2FuBagIU6dJkl3/IkrmiholfkijNqqmwKt19ulA5CcG
nmr5TxCqkWM4xt4VdBl0uWsu5QYtWi/MN6BsE6zdjczzNO7B4g5NcFSBTDu0joWT
Z3gKuU1eKkpVpPE8quI6jNQ47Ao0IOuOsXjU1tTmcSyoIN1CglyFFGKhXmm7SCbB
cFvXX3TgpLrP+KXPfN3xvquSof2r5DlrjnMt/k9GIy8FH7Lt66K94F3xpslwaum/
d16IHrrC2U+/tzNdSIRs6JUPoW0O8NvxD9Qx2W8p9C29aiDPuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAngqASGLuYCGCMswG6p1Udr9G4vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFi
Mzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYzZWY1NTJmZmEvZjBiMzNlYTEtNDVhMi0z
OWRkLThiMjctNzU0ZTRiNWY2Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYjM4NGQtMzAxOC00MTNmLWIy
NTMtZDJmM2VmNTUyZmZhLzI4YWIzODRkLTMwMTgtNDEzZi1iMjUzLWQyZjNlZjU1
MmZmYS5jcmwwHwYDVR0jBBgwFoAUbrd4ypCvJHlzNL90WIplampfKGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOGFiMzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYz
ZWY1NTJmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZTRuoSbj9fwhkfOZnxJLu3OAfCzVu8FKSdcmgsEMuwhLeMjpWFKnRf
cXwSbhH2OsV/n6LYX1fHJb3iq2A8OewnfpxRjnZsx8uH7ZyWx0YwbUAAbIEtrOq/
skLZrMrw2dKm3hzvgpdjyLvQnk5YRt0NYVKER0s1PleG3Sps62hjSi0tjPbFa4ei
y76EIm/N1kRxtwJppNlS3OxiDxsJdIM4EWlb/lJ0jXxaR0D5MQ0jIFbh9nHARJXl
bCBvRe8Scnj8eHgnY3ZqGELgeheJBGjGFSSt0esY5QavyOiYaMF1hlF9kfohn3Il
tyqKo/Zh7pcleuyewOYH/v4WwaCE/ww=
-----END CERTIFICATE-----
Generated at Mon Dec 29 01:26:58 2025 by rpki-client