This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa
File:                     50598dc8-c270-395c-891a-6dffce02191c.roa (raw, json)
Hash identifier:          7c/HjC6vRxwrYApswLwYbstp+7oUdntg/rPdZtuahIs=
Subject key identifier:   5F:CB:C2:79:64:13:EC:76:08:E5:36:71:7B:66:3D:3D:93:8A:7B:B5
Certificate issuer:       /CN=d0a540d7-50ef-458a-abc4-e11f9c1f88aa
Certificate serial:       010D0C9F4328584C70EBEED5989DAD760F5E2B80
Authority key identifier: E5:3F:4E:D1:F1:17:6B:1D:87:91:B4:A7:20:11:3F:94:88:54:41:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa
Signing time:             Wed 07 Jan 2026 02:00:30 +0000
ROA not before:           Wed 07 Jan 2026 02:00:30 +0000
ROA not after:            Tue 07 Apr 2026 01:00:30 +0000
asID:                     54466
IP address blocks:        66.234.4.0/24 maxlen: 24
                          66.234.5.0/24 maxlen: 24
                          66.234.6.0/24 maxlen: 24
                          66.234.7.0/24 maxlen: 24
                          216.49.164.0/24 maxlen: 24
                          216.49.165.0/24 maxlen: 24
                          216.49.166.0/24 maxlen: 24
                          216.49.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:70:eb:ee:d5:98:9d:ad:76:0f:5e:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a540d7-50ef-458a-abc4-e11f9c1f88aa
        Validity
            Not Before: Jan  7 02:00:30 2026 GMT
            Not After : Apr  7 01:00:30 2026 GMT
        Subject: CN=d547b429-6873-4628-bacd-0005094df0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:60:84:a3:d1:0c:78:9a:1c:f8:1d:d2:08:
                    55:04:c0:3a:9e:a4:79:31:32:ac:ae:2e:b1:c4:81:
                    50:cd:0c:08:21:a6:2a:df:57:66:35:3d:d1:28:40:
                    ff:b9:7e:56:13:b1:ee:e5:9f:cd:f8:d8:dc:a6:c7:
                    49:5f:e6:41:73:df:05:83:47:23:3f:e2:c5:1b:88:
                    c2:9d:cc:5d:fa:56:04:85:45:cd:de:e6:59:b6:0e:
                    be:fb:a0:7a:a9:75:ce:15:fe:50:d0:43:99:e1:2b:
                    ab:fd:18:68:8b:e2:ab:04:d1:66:31:5a:08:b7:d7:
                    e9:86:7f:58:70:90:bc:5b:65:fe:ad:5e:49:de:57:
                    b6:e9:58:6b:7a:7e:86:65:7a:30:3c:6a:a6:6c:dd:
                    51:78:8b:1c:3c:0c:bf:e2:09:ce:0d:5e:31:8b:e9:
                    ec:be:9b:e6:0f:9c:cd:6f:0f:d5:da:25:79:13:58:
                    c9:d4:86:5f:fd:5f:f6:37:bd:2e:59:79:bb:34:56:
                    6a:ac:c0:9f:10:57:bb:60:73:2a:88:35:4a:e7:b4:
                    b6:e4:9b:67:f4:b1:b8:be:cb:44:a7:81:74:f5:d9:
                    14:79:4b:bd:e6:8e:a1:1a:97:31:7f:d2:62:17:d4:
                    5b:a6:45:22:31:57:9c:ba:d1:31:8d:5e:44:0b:0c:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CB:C2:79:64:13:EC:76:08:E5:36:71:7B:66:3D:3D:93:8A:7B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.crl

            X509v3 Authority Key Identifier:
                keyid:E5:3F:4E:D1:F1:17:6B:1D:87:91:B4:A7:20:11:3F:94:88:54:41:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.234.4.0/22
                  216.49.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:94:9a:b7:e3:e8:ea:7f:a9:f0:68:0a:be:96:3c:29:82:ea:
         b8:73:7e:a7:a1:be:b4:db:33:de:5a:89:9b:2b:c4:39:90:16:
         67:e6:86:72:4f:1c:6d:e2:b8:2b:68:74:1b:ba:36:e2:da:04:
         20:48:45:c6:1f:15:a3:65:cd:b8:82:b9:49:ad:1c:b5:be:47:
         92:d7:df:3e:c5:3f:bf:fb:ce:8f:e6:8b:ad:89:5b:0e:cd:ee:
         2c:dd:3d:6d:98:30:35:9e:0f:c7:af:f4:fa:54:89:ec:84:08:
         6b:77:63:8c:5d:8f:d0:87:78:ca:d3:bc:b2:d8:13:4c:6c:0e:
         aa:0d:81:98:bc:7e:61:45:b2:9c:89:f4:cd:df:f9:5a:4e:15:
         bb:e7:d7:df:09:26:e5:c6:6a:09:38:49:e8:19:3e:c6:ea:43:
         40:2d:25:54:eb:15:cb:75:d5:75:12:67:e9:4b:3e:95:2d:53:
         d1:da:eb:1e:33:4c:b3:92:4b:d1:8e:8d:31:dd:7f:da:f8:16:
         a7:a9:9d:58:09:c2:ab:90:9a:fa:ca:ce:19:7a:f2:47:9f:f2:
         52:68:5d:00:1b:0d:41:69:78:40:e8:39:0e:46:8a:83:c5:48:
         64:d8:5f:ac:ea:08:c0:8a:df:9c:1e:34:df:79:ff:12:30:53:
         c2:5d:6f:c1
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExw6+7VmJ2tdg9eK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBhNTQwZDctNTBlZi00NThhLWFiYzQtZTExZjljMWY4
OGFhMB4XDTI2MDEwNzAyMDAzMFoXDTI2MDQwNzAxMDAzMFowLzEtMCsGA1UEAxMk
ZDU0N2I0MjktNjg3My00NjI4LWJhY2QtMDAwNTA5NGRmMGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmFghKPRDHiaHPgd0ghVBMA6nqR5MTKsri6x
xIFQzQwIIaYq31dmNT3RKED/uX5WE7Hu5Z/N+NjcpsdJX+ZBc98Fg0cjP+LFG4jC
ncxd+lYEhUXN3uZZtg6++6B6qXXOFf5Q0EOZ4Sur/Rhoi+KrBNFmMVoIt9fphn9Y
cJC8W2X+rV5J3le26Vhren6GZXowPGqmbN1ReIscPAy/4gnODV4xi+nsvpvmD5zN
bw/V2iV5E1jJ1IZf/V/2N70uWXm7NFZqrMCfEFe7YHMqiDVK57S25Jtn9LG4vstE
p4F09dkUeUu95o6hGpcxf9JiF9RbpkUiMVecutExjV5ECwzh/QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFF/LwnlkE+x2COU2cXtmPT2Tinu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMGE1
NDBkNy01MGVmLTQ1OGEtYWJjNC1lMTFmOWMxZjg4YWEvNTA1OThkYzgtYzI3MC0z
OTVjLTg5MWEtNmRmZmNlMDIxOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDBhNTQwZDctNTBlZi00NThhLWFi
YzQtZTExZjljMWY4OGFhL2QwYTU0MGQ3LTUwZWYtNDU4YS1hYmM0LWUxMWY5YzFm
ODhhYS5jcmwwHwYDVR0jBBgwFoAU5T9O0fEXax2HkbSnIBE/lIhUQdcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kMGE1NDBkNy01MGVmLTQ1OGEtYWJjNC1lMTFm
OWMxZjg4YWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQuoEAwQC
2DGkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJaUmrfj6Op/qfBoCr6WPCmC6rhzfqehvrTbM95aiZsrxDmQ
FmfmhnJPHG3iuCtodBu6NuLaBCBIRcYfFaNlzbiCuUmtHLW+R5LX3z7FP7/7zo/m
i62JWw7N7izdPW2YMDWeD8ev9PpUieyECGt3Y4xdj9CHeMrTvLLYE0xsDqoNgZi8
fmFFspyJ9M3f+VpOFbvn198JJuXGagk4SegZPsbqQ0AtJVTrFct11XUSZ+lLPpUt
U9Ha6x4zTLOSS9GOjTHdf9r4FqepnVgJwquQmvrKzhl68kef8lJoXQAbDUFpeEDo
OQ5GioPFSGTYX6zqCMCK35weNN95/xIwU8Jdb8E=
-----END CERTIFICATE-----
Generated at Wed Feb 11 01:59:40 2026 by rpki-client