This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa
File:                     a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json)
Hash identifier:          GqlZWxOWPZjehBKQG4Q/ibJvCD8wAThY8XkQKiTZHzE=
Subject key identifier:   4B:75:37:A5:CD:7E:89:66:19:89:39:F1:A2:29:2D:EA:B4:25:44:AB
Certificate issuer:       /CN=8df83f2e-e4b4-4953-8acc-7816b333d332
Certificate serial:       010D0C9F4328584C619154086FD5AC87F440C380
Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     46844
IP address blocks:        45.58.128.0/18 maxlen: 24
                          64.32.0.0/19 maxlen: 24
                          67.21.64.0/19 maxlen: 24
                          70.39.64.0/18 maxlen: 24
                          104.37.244.0/22 maxlen: 24
                          104.160.160.0/19 maxlen: 24
                          107.167.0.0/19 maxlen: 24
                          170.178.160.0/19 maxlen: 24
                          174.128.224.0/19 maxlen: 24
                          198.148.80.0/20 maxlen: 24
                          199.115.100.0/22 maxlen: 24
                          204.188.192.0/18 maxlen: 24
                          208.98.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:54:08:6f:d5:ac:87:f4:40:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=df709e15-6d98-472b-8675-515799c78e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:15:93:57:56:74:01:97:e5:23:d2:67:e0:
                    86:91:b6:01:7b:db:0d:eb:3d:d0:ee:2c:8b:ef:42:
                    04:d6:6a:13:69:94:bf:02:97:9e:81:76:41:a7:12:
                    36:4a:72:1c:0e:be:3a:06:5d:eb:d4:91:7a:27:f2:
                    fc:63:87:67:9c:72:6f:fb:71:cc:ee:84:f6:5d:b2:
                    8b:b4:f4:6f:8f:18:03:ed:a9:d8:f7:9b:81:42:02:
                    71:93:be:cc:51:a3:97:fb:ec:02:ed:85:42:13:16:
                    1f:7c:d3:ab:d8:e1:15:c8:60:76:7f:87:52:b9:4c:
                    5e:37:1d:e9:9a:cd:00:9b:c2:8a:2b:eb:52:de:36:
                    ad:94:73:63:d3:46:9e:4d:f6:31:7c:b5:75:b0:ef:
                    fc:ec:5e:80:68:1d:ec:06:77:61:b5:c7:aa:48:df:
                    c2:06:de:86:ef:e8:9b:85:f4:29:ef:de:2d:a6:9c:
                    0c:ec:4d:18:ca:1a:46:5d:e5:d1:ae:4b:01:6b:9b:
                    b0:44:d1:d9:c8:43:4e:92:7f:dd:d3:4c:de:a0:0c:
                    e0:11:68:b8:fe:e7:f4:7b:7d:77:a2:aa:10:c2:3e:
                    e0:12:b5:ea:f0:1e:f7:0c:e5:d0:19:f5:4c:e7:41:
                    51:8e:44:9d:ea:93:24:0b:a4:5b:4b:3e:e4:60:ab:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:75:37:A5:CD:7E:89:66:19:89:39:F1:A2:29:2D:EA:B4:25:44:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl

            X509v3 Authority Key Identifier:
                keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.128.0/18
                  64.32.0.0/19
                  67.21.64.0/19
                  70.39.64.0/18
                  104.37.244.0/22
                  104.160.160.0/19
                  107.167.0.0/19
                  170.178.160.0/19
                  174.128.224.0/19
                  198.148.80.0/20
                  199.115.100.0/22
                  204.188.192.0/18
                  208.98.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:a6:2d:85:05:fe:50:e0:f5:41:a8:b7:93:10:f8:ff:e4:
         4b:42:6a:38:05:f5:fb:5d:86:54:f3:b6:1d:d1:8f:39:2c:ad:
         7c:45:88:f4:28:23:8d:e5:b0:3d:a7:5d:30:e9:64:ce:58:4a:
         5b:71:b5:6e:0e:da:d6:bc:97:4f:c7:ae:5e:e8:55:ed:6c:35:
         23:b5:9f:e9:60:65:54:a3:d9:3e:40:1c:7b:2f:30:c6:d2:8d:
         69:72:02:7f:ed:f6:93:62:ea:03:a3:82:d1:5a:b3:25:c6:8f:
         37:98:71:8c:e7:63:36:74:16:1e:58:ca:41:b8:ca:fd:85:50:
         57:75:6b:f1:f4:5c:a0:86:9b:61:6e:72:66:3c:9b:72:9d:7d:
         aa:78:a5:9e:40:95:2c:87:24:9d:1f:72:f4:8c:8a:f6:aa:75:
         e0:be:b9:65:04:f0:2f:cb:7a:2c:58:ee:8a:35:dd:8a:da:b7:
         f0:da:55:f2:87:39:af:06:c1:b0:ee:a2:5e:0f:6b:82:b4:19:
         36:f9:30:f4:08:15:6a:2c:fe:36:45:36:40:c5:ef:eb:95:74:
         2f:92:ca:23:a1:3d:a4:16:52:48:37:46:a6:5a:1b:53:cd:09:
         25:b9:eb:0c:73:61:41:ba:1f:62:e9:85:4c:d9:8b:eb:54:96:
         af:ec:2f:63
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWExhkVQIb9Wsh/RAw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk
MzMyMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk
ZGY3MDllMTUtNmQ5OC00NzJiLTg2NzUtNTE1Nzk5Yzc4ZTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWAVk1dWdAGX5SPSZ+CGkbYBe9sN6z3Q7iyL
70IE1moTaZS/ApeegXZBpxI2SnIcDr46Bl3r1JF6J/L8Y4dnnHJv+3HM7oT2XbKL
tPRvjxgD7anY95uBQgJxk77MUaOX++wC7YVCExYffNOr2OEVyGB2f4dSuUxeNx3p
ms0Am8KKK+tS3jatlHNj00aeTfYxfLV1sO/87F6AaB3sBndhtceqSN/CBt6G7+ib
hfQp794tppwM7E0YyhpGXeXRrksBa5uwRNHZyENOkn/d00zeoAzgEWi4/uf0e313
oqoQwj7gErXq8B73DOXQGfVM50FRjkSd6pMkC6RbSz7kYKv8bwIDAQABo4IDnTCC
A5kwHQYDVR0OBBYEFEt1N6XNfolmGYk58aIpLeq0JUSrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4
M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYTVjYjRlOGItNTJiNy0z
ZjNhLTgyNTktZjQ3YzU4NTVhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh
Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz
ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2
YjMzM2QzMzIuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQGLTqAAwQF
QCAAAwQFQxVAAwQGRidAAwQCaCX0AwQFaKCgAwQFa6cAAwQFqrKgAwQFroDgAwQE
xpRQAwQCx3NkAwQGzLzAAwQG0GIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF3zpi2FBf5Q4PVBqLeTEPj/
5EtCajgF9ftdhlTzth3RjzksrXxFiPQoI43lsD2nXTDpZM5YSltxtW4O2ta8l0/H
rl7oVe1sNSO1n+lgZVSj2T5AHHsvMMbSjWlyAn/t9pNi6gOjgtFasyXGjzeYcYzn
YzZ0Fh5YykG4yv2FUFd1a/H0XKCGm2FucmY8m3Kdfap4pZ5AlSyHJJ0fcvSMivaq
deC+uWUE8C/LeixY7oo13Yrat/DaVfKHOa8GwbDuol4Pa4K0GTb5MPQIFWos/jZF
NkDF7+uVdC+SyiOhPaQWUkg3RqZaG1PNCSW56wxzYUG6H2LphUzZi+tUlq/sL2M=
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:39:55 2026 by rpki-client