This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
File:                     77adbc7d-1a74-3f6a-936e-813416ad3582.roa (raw, json)
Hash identifier:          laCGbX0rx1scSTzTkxWKwM7GpPdWrSe3aWUKDz2OrNw=
Subject key identifier:   18:21:F0:3A:F7:BC:BD:C5:0A:10:20:4C:34:C4:70:1D:15:EA:E4:C2
Certificate issuer:       /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Certificate serial:       010D0C9F4328584C9536D8B6CEC7364158EC69C0
Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     397142
IP address blocks:        23.163.32.0/24 maxlen: 24
                          192.251.149.0/24 maxlen: 24
                          198.99.80.0/22 maxlen: 22
                          204.107.184.0/24 maxlen: 24
                          2605:b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:36:d8:b6:ce:c7:36:41:58:ec:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=14d7a568-e475-4dc4-8f74-c9af9dd6f46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:99:41:f8:f9:dc:0a:72:35:b6:1c:fc:32:
                    75:6b:db:3c:e4:fa:14:3c:99:d2:da:4d:42:3b:16:
                    a2:30:00:74:a5:34:49:ba:b9:4f:06:5a:14:8d:a1:
                    ff:04:dd:95:48:7b:43:40:ed:b5:08:b9:7a:92:eb:
                    4d:35:32:de:24:12:ca:54:9b:5a:e8:bf:65:04:cd:
                    5e:d9:5d:3c:a3:11:1f:76:c7:85:7c:e5:55:15:0e:
                    81:68:88:08:2d:1a:49:ea:57:f2:68:91:66:d8:13:
                    e8:43:ce:d7:fc:89:68:21:fb:9a:18:14:79:69:c8:
                    0e:a8:de:39:23:5f:c8:71:0f:aa:1e:59:76:39:eb:
                    50:0e:7b:5d:10:69:d8:f5:ab:4d:34:52:b2:ac:2e:
                    4d:75:62:12:55:12:b9:e7:7f:17:be:b7:1f:73:5e:
                    96:0b:8e:9e:89:9e:02:f3:d8:ae:58:c2:30:e8:b1:
                    30:3c:47:02:40:be:13:1a:71:dd:9c:45:35:68:76:
                    c0:d8:ba:66:5c:af:fc:c6:64:b9:8b:4a:6c:d0:93:
                    ea:81:86:fb:e5:3d:00:a1:6c:35:da:34:cf:76:30:
                    77:03:27:c7:90:b5:18:d3:9e:de:53:09:47:c5:c6:
                    0a:5e:75:1a:cc:1a:44:14:96:c6:10:50:27:06:36:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:F0:3A:F7:BC:BD:C5:0A:10:20:4C:34:C4:70:1D:15:EA:E4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl

            X509v3 Authority Key Identifier:
                keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.32.0/24
                  192.251.149.0/24
                  198.99.80.0/22
                  204.107.184.0/24
                IPv6:
                  2605:b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:4f:94:d0:ea:33:b9:92:55:1e:91:3c:33:9b:10:3b:9e:
         cf:45:81:7b:db:6d:d2:22:27:37:d7:9f:7a:9b:6b:58:d6:df:
         19:99:97:70:56:91:3b:ae:3a:43:a9:45:d7:2b:93:87:41:e3:
         55:ea:7b:7f:73:a6:5d:71:a3:78:b6:96:68:fd:c0:0c:f0:8c:
         f9:54:0c:f8:92:37:94:ff:77:95:af:84:e0:21:a1:3e:fd:84:
         8c:3e:0e:4a:b6:03:be:76:0d:aa:7f:4b:21:f7:ca:e8:ec:10:
         81:60:24:bf:9d:9f:7b:03:f1:4b:51:79:15:09:98:ed:ba:9a:
         f9:3c:91:e9:47:02:a9:53:d1:e5:4f:13:e1:ab:17:a1:69:df:
         da:65:47:e8:73:12:ac:c6:b3:79:b1:e1:0c:23:d2:b1:2e:33:
         cd:6f:be:c4:8d:52:fa:02:af:5f:cc:5d:4b:0f:76:36:41:19:
         2b:f1:19:ee:2b:49:c0:46:7d:ae:91:fe:92:54:70:04:a2:8e:
         ca:0c:eb:7c:4a:77:61:14:ff:33:de:06:b7:d0:c0:5a:39:fb:
         0c:1f:02:c3:9f:5a:65:51:c9:b9:8e:27:a5:4f:35:4c:7e:35:
         3c:85:25:5e:a0:88:1d:d3:c8:9c:df:be:61:cc:58:94:a8:f4:
         40:32:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 08:28:14 2026 by rpki-client