This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa
File:                     443219a0-efe0-327e-b60e-0844a2070c85.roa (raw, json)
Hash identifier:          5LPsUXCb8vsN2V5nDtVlsfHgKJLwB1yF4Xlu5/kZPow=
Subject key identifier:   B6:F9:02:12:BA:DF:1B:2C:66:74:41:B7:6B:B2:DA:87:52:20:87:F3
Certificate issuer:       /CN=60853e5b-d7a9-4bc8-8250-635257ad49bd
Certificate serial:       010D0C9F4328584CA5F70046A6DD8120B15E5880
Authority key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     11996
IP address blocks:        192.189.147.0/24 maxlen: 24
                          207.251.48.0/20 maxlen: 24
                          208.64.92.0/22 maxlen: 24
                          216.243.96.0/20 maxlen: 24
                          2605:6800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:00:46:a6:dd:81:20:b1:5e:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=ee2f82f6-523e-467a-9b6e-5a889bf94d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:7f:d8:4f:7b:fd:fa:28:07:84:0e:9a:38:
                    80:4b:99:6b:e4:c5:7a:e5:1c:b9:59:9f:e7:ce:fa:
                    85:1a:2c:30:2e:c2:33:17:8d:6d:09:73:ef:af:b7:
                    0f:4f:79:07:ec:0c:4d:d0:d9:e6:e2:55:f5:7a:a8:
                    0a:54:db:85:76:bd:e1:c3:2e:3a:55:80:6d:7e:98:
                    c8:a7:b4:5b:04:70:46:2f:9b:40:88:f9:e4:03:f8:
                    10:d9:a9:47:78:36:15:cf:db:0c:20:5f:5d:61:c1:
                    df:6e:8d:b2:c7:ac:61:24:c0:dc:54:42:ed:6c:f0:
                    e3:cf:94:c7:0e:31:85:d9:e0:5a:37:2f:de:e2:ce:
                    c0:da:03:df:a9:8d:fb:89:6e:2d:a7:9e:95:da:76:
                    4d:08:fc:b3:b5:e6:86:ed:9d:60:ad:95:e9:fa:18:
                    a4:85:4a:a6:e2:77:4a:73:f6:05:ad:1c:3d:5f:ed:
                    18:44:37:24:98:5e:6d:3f:b1:f9:67:c4:4a:b1:d7:
                    c7:0e:4d:96:de:22:5a:be:2b:0b:3a:e2:c8:19:69:
                    39:25:a4:34:26:54:e2:95:02:8e:bd:6f:bf:53:21:
                    15:46:4a:ac:8d:90:45:c3:b2:87:38:d8:67:d1:61:
                    35:c7:ad:7f:c4:0b:43:57:2e:78:9d:d3:cd:e3:e4:
                    94:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:02:12:BA:DF:1B:2C:66:74:41:B7:6B:B2:DA:87:52:20:87:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.147.0/24
                  207.251.48.0/20
                  208.64.92.0/22
                  216.243.96.0/20
                IPv6:
                  2605:6800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5b:4b:5f:01:c3:c2:54:bf:60:56:cc:ca:ab:c0:6c:38:69:
         72:0b:f5:19:2b:61:ee:d0:8d:46:db:e0:59:9e:3b:35:51:50:
         dc:c4:88:83:2a:de:16:bc:4f:92:2e:46:e7:cc:5c:de:35:19:
         48:aa:90:9d:ba:0f:c5:83:5e:3e:bd:34:f0:c6:16:de:78:89:
         3e:00:df:95:8b:03:5d:57:9b:3d:16:c2:2e:82:b2:b6:25:bd:
         0a:8d:60:60:95:92:ff:c7:07:8c:d9:a0:71:6f:48:f3:36:97:
         dc:7c:25:67:fa:f6:00:aa:db:60:5e:0a:30:77:33:50:67:9a:
         36:8e:c1:2f:8c:93:f3:c7:35:09:80:12:4f:10:51:b8:7b:dc:
         29:64:5e:fc:ff:f5:32:ef:a9:92:4f:27:8e:4c:29:40:97:e6:
         f4:bc:37:78:5a:c0:9f:c5:9d:89:d7:a0:7e:7f:80:d9:d4:ba:
         6d:63:0d:aa:31:79:61:f6:37:b3:f6:3a:37:bc:95:af:1e:58:
         e6:12:c9:b8:27:d7:52:92:16:9a:07:fe:e7:ff:12:01:03:0b:
         cd:50:e5:12:c2:e8:79:89:c7:59:9e:53:14:5f:b2:6a:48:d4:
         07:d4:f0:53:40:08:77:84:6a:6f:23:67:68:c2:96:a5:cc:82:
         9c:d0:d0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 08:30:20 2026 by rpki-client