This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/52325883-70f6-3b1a-84c1-4311d9418dbc.roa
File:                     52325883-70f6-3b1a-84c1-4311d9418dbc.roa (raw, json)
Hash identifier:          XadOaduL2Zve87e+QHAYP4kbFVq6yK9G0P4oJi/5cTY=
Subject key identifier:   11:24:63:76:CE:44:AB:8C:EE:F5:9C:31:AD:A4:78:AC:ED:B6:42:43
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584C87419A8C82AC064FC9606C90
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/52325883-70f6-3b1a-84c1-4311d9418dbc.roa
Signing time:             Thu 15 Jan 2026 02:00:31 +0000
ROA not before:           Thu 15 Jan 2026 02:00:31 +0000
ROA not after:            Wed 15 Apr 2026 01:00:31 +0000
asID:                     1299
IP address blocks:        198.174.212.0/23 maxlen: 24
                          198.174.214.0/23 maxlen: 24
                          204.221.17.0/24 maxlen: 24
                          204.221.18.0/23 maxlen: 24
                          204.221.144.0/22 maxlen: 24
                          206.9.80.0/24 maxlen: 24
                          206.145.178.0/23 maxlen: 24
                          206.145.224.0/23 maxlen: 24
                          206.146.48.0/22 maxlen: 24
                          209.32.64.0/21 maxlen: 24
                          209.32.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Jan 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:41:9a:8c:82:ac:06:4f:c9:60:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Jan 15 02:00:31 2026 GMT
            Not After : Apr 15 01:00:31 2026 GMT
        Subject: CN=484de695-74bb-4088-8f65-c11005f85977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:62:7a:e1:8c:5c:93:d4:5e:5c:3c:7f:e3:
                    0b:e6:93:b9:e3:d5:a8:8e:f2:97:62:a3:11:aa:0c:
                    f4:4b:c0:2e:9f:21:ba:7c:b0:5f:bf:4d:8d:3d:67:
                    44:13:23:32:19:56:62:9a:e6:69:41:5b:3e:c8:4e:
                    3f:59:81:e4:17:a6:dd:e1:6a:cd:97:87:25:53:a6:
                    dd:89:f6:a7:cf:dc:bf:d9:81:d0:06:3b:33:a6:6b:
                    48:42:64:6d:34:96:ba:2f:5b:79:6f:67:65:0e:2e:
                    92:09:be:bf:95:ce:57:d8:58:9f:a1:84:e3:41:7f:
                    a5:b1:ca:e5:91:d5:01:9a:3b:59:d0:27:c5:76:6a:
                    1a:0d:58:26:ea:00:47:48:5a:e0:5e:d6:9a:e4:3a:
                    8e:c1:c3:fe:7d:19:cc:1e:70:7e:cc:4d:44:b5:a5:
                    b3:10:17:30:95:a6:75:22:3a:16:9f:41:8e:9f:d2:
                    8b:76:e6:87:24:0f:3b:d1:de:37:b2:23:3d:78:cc:
                    ab:4c:21:ba:5c:01:b2:49:88:2d:17:f4:db:d0:28:
                    87:e5:8b:8b:b8:d8:a8:3b:81:9d:1b:19:ca:28:3e:
                    fa:ec:e3:c4:16:7f:c9:2d:46:79:6d:de:67:5c:24:
                    8c:5e:fe:12:18:53:08:a3:78:ed:99:04:b2:b7:18:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:63:76:CE:44:AB:8C:EE:F5:9C:31:AD:A4:78:AC:ED:B6:42:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/52325883-70f6-3b1a-84c1-4311d9418dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.174.212.0/22
                  204.221.17.0-204.221.19.255
                  204.221.144.0/22
                  206.9.80.0/24
                  206.145.178.0/23
                  206.145.224.0/23
                  206.146.48.0/22
                  209.32.64.0/21
                  209.32.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:7b:46:4c:57:4f:f3:d7:03:ee:8a:c2:8a:1a:24:79:3f:
         25:7a:ad:c9:f0:4d:05:65:1b:0a:1e:61:d7:92:cc:31:c6:02:
         be:69:96:e3:5f:19:17:3c:ae:09:4e:bd:57:e6:b9:dc:66:6c:
         3b:cb:9f:5d:8b:18:63:4b:19:ba:74:c1:9e:7c:2b:63:fb:9f:
         d0:92:b0:20:7f:a4:72:80:ae:0d:b3:54:6f:8b:fa:ad:f3:d9:
         34:3e:f9:0b:f1:26:14:a2:60:ea:67:59:7d:4e:8f:40:bd:11:
         34:5f:72:7c:ba:b5:04:13:34:98:f2:26:cd:46:dd:77:cf:9b:
         9c:45:d6:3a:16:21:17:8d:21:12:74:14:3c:68:88:fa:91:82:
         7b:7a:92:13:3a:c8:96:3d:8f:7a:2c:04:a2:d9:db:81:2e:47:
         bd:3c:08:7d:7c:fe:df:96:34:05:da:2c:20:4f:22:28:ef:d2:
         35:cb:c6:ec:e9:09:3b:4c:cb:74:3a:69:a4:e8:b7:e4:cb:59:
         2d:79:52:39:46:7d:c3:95:23:9a:e5:53:a4:78:0e:2d:1f:e3:
         fe:81:f9:47:e2:e2:9f:25:38:41:e7:37:e4:f1:7b:e1:da:71:
         26:9f:93:bb:27:34:f6:de:61:86:c9:9b:68:a3:91:cf:8d:41:
         94:c0:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:28:37 2026 by rpki-client