This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa
File:                     f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json)
Hash identifier:          5RGX/OdZDKjjjPMuYUBcFl+tFeXBYodoOmSrSKX4a9k=
Subject key identifier:   7B:73:03:37:AF:AE:79:85:6B:9F:04:45:98:9E:9D:EE:13:08:F4:C7
Certificate issuer:       /CN=f0ba84c0-5d44-4547-a368-e574b20611e4
Certificate serial:       010D0C9F4328584CAA27086631CADF0457EAF9E0
Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     33040
IP address blocks:        199.48.216.0/21 maxlen: 21
                          2605:3d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:08:66:31:ca:df:04:57:ea:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=9489d98a-5f59-4ea1-b964-d04fd94a9955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:61:24:15:01:ad:dc:37:78:4b:04:e9:13:
                    14:f1:12:49:99:ed:6e:c9:f4:7a:79:cc:d4:43:c2:
                    84:80:2f:77:b7:73:df:6c:3f:b8:ba:08:52:ee:79:
                    b8:c7:e4:e5:73:54:c1:19:3d:54:aa:93:ca:b8:86:
                    9b:e4:9b:85:ff:09:f1:b9:ca:2d:ab:4b:c5:c8:65:
                    ca:d7:19:53:10:bd:dd:bd:08:f2:42:5d:36:95:13:
                    e2:d5:17:42:bc:f9:67:13:11:72:98:05:be:4d:d3:
                    64:0a:c4:e1:66:1c:9a:ff:4f:dc:e9:ea:90:13:29:
                    ed:11:f1:10:f0:de:38:0a:2c:b9:d1:e6:4f:77:04:
                    87:c5:27:92:aa:f9:c8:65:59:07:18:2e:0d:d5:f2:
                    61:de:f7:4d:06:3f:2d:3e:a2:0c:4f:69:9c:ea:82:
                    dd:ae:d3:67:9b:1e:c7:93:69:ec:11:87:45:12:03:
                    71:76:f1:20:7f:45:23:8c:a8:66:28:72:73:85:3d:
                    d8:d2:94:df:3b:fe:25:57:02:6d:fe:4b:c7:fb:79:
                    67:ac:90:ac:dd:bf:8a:d2:5c:93:83:2d:2e:89:19:
                    77:a7:24:0a:53:21:e4:b1:9f:28:f9:aa:a3:80:10:
                    70:36:23:0f:1e:82:e3:24:c0:e0:50:e6:7a:c1:5f:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:73:03:37:AF:AE:79:85:6B:9F:04:45:98:9E:9D:EE:13:08:F4:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl

            X509v3 Authority Key Identifier:
                keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.216.0/21
                IPv6:
                  2605:3d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:83:01:01:21:1f:4a:30:72:36:25:ad:d7:f1:b0:52:01:
         a6:9f:b1:6c:61:bf:23:ca:2b:cd:3d:12:a4:47:fc:7e:8b:cc:
         0b:2e:9f:48:a8:9d:78:b4:6a:09:39:4c:99:d4:a0:0c:d6:8b:
         ad:fb:b4:27:bb:81:32:f1:17:37:1d:c9:e8:b2:05:a8:cf:ae:
         8f:1c:d3:db:ff:63:0e:9c:29:db:d2:90:1e:74:21:a5:cf:c0:
         49:c5:f1:85:e5:b5:d1:eb:1a:d8:0e:a0:5a:34:9b:db:86:ba:
         e7:05:0e:2d:4a:95:c8:ea:aa:90:72:82:b5:76:54:ed:9a:85:
         c5:c9:99:a4:d3:df:e5:29:83:ce:7c:aa:8b:35:ab:6e:b8:96:
         e0:af:cb:1c:2b:f5:7d:85:1f:14:74:26:57:19:0e:8c:30:10:
         17:ea:27:a8:6c:3a:63:c4:73:4e:b7:a6:37:9e:09:0e:c0:07:
         3d:01:4a:4c:1e:91:41:00:65:59:1d:60:2e:5e:11:f3:87:5a:
         af:de:23:ea:43:b7:ec:83:e4:9f:32:8b:4e:64:ef:ca:db:31:
         1f:e9:17:52:a7:64:a0:59:78:95:71:d4:43:c1:35:9a:40:35:
         3b:7d:8d:ac:f3:87:4b:e1:27:60:31:9b:04:02:1a:50:a0:19:
         91:46:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 08:31:50 2026 by rpki-client