This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa
File:                     07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (raw, json)
Hash identifier:          5AUGyZKnBeAbeRKqA9gFZHO1PvekIG+taHnAvC1SbfQ=
Subject key identifier:   EB:C6:00:21:52:5F:B3:3D:30:69:FF:9D:04:3F:B2:88:80:DC:3E:E6
Certificate issuer:       /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b
Certificate serial:       010D0C9F4328584C612905A39FABDEA69F97CA00
Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     393524
IP address blocks:        23.134.16.0/24 maxlen: 24
                          23.134.17.0/24 maxlen: 24
                          23.135.18.0/24 maxlen: 24
                          104.192.96.0/22 maxlen: 22
                          104.245.136.0/22 maxlen: 22
                          2602:ff44::/36 maxlen: 36
                          2602:ff44::/38 maxlen: 38
                          2602:ff44:400::/38 maxlen: 38
                          2602:ff44:800::/38 maxlen: 38
                          2602:ff44:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:29:05:a3:9f:ab:de:a6:9f:97:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=18b11b7b-6770-47a5-b373-de712cd4d1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:5f:d2:81:f3:7c:07:d0:16:cc:9e:15:e3:
                    79:07:77:5e:24:e6:bb:f5:b9:44:92:58:29:23:5f:
                    ef:25:9c:05:24:bc:f0:07:2a:55:57:07:44:04:c3:
                    30:6c:0b:2b:b4:b2:05:5b:ef:de:21:b2:81:6a:b7:
                    47:2c:36:4f:90:e2:5a:bf:70:2c:a4:b5:4a:65:e5:
                    00:6a:7a:b5:e2:61:07:bc:7b:34:84:6e:a1:8f:af:
                    d4:90:c1:8c:cc:68:70:d4:ff:f5:5e:9e:9f:22:d4:
                    fb:5c:31:eb:71:ad:4f:ae:28:26:82:e5:bf:8a:ff:
                    2d:14:b7:a7:4b:ba:65:07:81:e7:6b:ec:4f:11:22:
                    d6:e8:5d:23:90:ca:c9:53:ef:a4:2e:f0:2d:0c:e6:
                    36:d7:aa:9c:dd:50:0b:33:78:c4:6c:01:bc:35:f7:
                    7e:09:32:1b:30:03:95:d4:c0:cb:80:cb:69:f9:11:
                    a5:ee:db:6a:a1:da:4a:30:0d:8e:b8:ad:77:35:e0:
                    7b:ba:fd:c4:27:7f:00:9d:f4:79:e9:b8:ae:d6:d1:
                    f3:38:11:22:ef:16:89:bf:a1:21:18:55:04:85:ca:
                    6b:6b:51:25:76:87:23:0a:fb:e1:18:1e:e2:c6:47:
                    06:28:a1:b1:c4:50:1f:b9:18:57:d3:05:d9:af:d8:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C6:00:21:52:5F:B3:3D:30:69:FF:9D:04:3F:B2:88:80:DC:3E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl

            X509v3 Authority Key Identifier:
                keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.16.0/23
                  23.135.18.0/24
                  104.192.96.0/22
                  104.245.136.0/22
                IPv6:
                  2602:ff44::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:bd:08:1e:7e:82:6f:f0:97:4c:b8:e0:f3:aa:cf:b9:64:
         95:52:54:64:cc:71:93:71:5f:fe:25:4f:07:b9:ca:38:29:84:
         53:0d:aa:d6:d0:62:ff:ef:67:da:3a:6a:e8:2e:05:c3:86:dc:
         99:71:39:df:99:74:6b:5d:96:cc:44:91:1a:08:d5:9f:72:e5:
         fc:a3:2b:de:da:b8:d3:43:4e:a8:04:50:97:6f:b6:44:d9:f0:
         c9:97:36:19:e5:79:41:78:9c:4d:4d:7f:88:ed:92:40:20:02:
         7f:72:c6:7c:37:e7:5c:35:f9:8b:06:87:c2:f7:50:dd:5c:66:
         66:1c:78:dc:f3:2c:ac:a0:96:20:55:0a:12:35:47:d0:54:25:
         b3:7d:ee:00:3d:58:3e:ea:d4:c3:d0:d8:98:da:35:81:d6:fa:
         9c:73:0f:0f:ce:dc:a7:8c:5a:93:df:50:70:a4:e5:67:e9:2c:
         15:82:4e:73:14:ed:63:b7:89:89:6f:fe:7d:82:79:95:fc:07:
         ce:1f:5c:82:48:0c:93:3a:99:16:5b:21:a8:96:a5:10:6f:5a:
         39:ec:7f:b2:98:7b:83:c0:dc:95:67:74:4e:13:f1:c4:82:00:
         73:c9:a1:11:02:e6:cc:fa:d1:33:d7:38:b2:2e:f8:75:27:80:
         1a:2c:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:52:29 2026 by rpki-client