This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/9da6f060-a560-3787-bee1-a42a2ad96ddc.roa
File:                     9da6f060-a560-3787-bee1-a42a2ad96ddc.roa (raw, json)
Hash identifier:          Rd1+yI5Zr8sXnywz4ApV9daBJH1OBXUOUaTlQtyPXRY=
Subject key identifier:   13:E2:85:6B:C5:81:BC:DA:3B:A7:98:8D:A4:C9:B3:4B:C8:D2:2D:8E
Certificate issuer:       /CN=45644f39-69e4-4e08-bb44-b87bd3387626
Certificate serial:       010D0C9F4328584C4CA124D04B0745A6670DF2C0
Authority key identifier: 8D:11:F6:78:78:90:C7:14:99:72:0F:30:5D:A5:8D:CB:4A:10:A7:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/9da6f060-a560-3787-bee1-a42a2ad96ddc.roa
Signing time:             Thu 25 Dec 2025 02:00:31 +0000
ROA not before:           Thu 25 Dec 2025 02:00:31 +0000
ROA not after:            Wed 25 Mar 2026 01:00:31 +0000
asID:                     398813
IP address blocks:        204.235.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/45644f39-69e4-4e08-bb44-b87bd3387626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/45644f39-69e4-4e08-bb44-b87bd3387626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4c:a1:24:d0:4b:07:45:a6:67:0d:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45644f39-69e4-4e08-bb44-b87bd3387626
        Validity
            Not Before: Dec 25 02:00:31 2025 GMT
            Not After : Mar 25 01:00:31 2026 GMT
        Subject: CN=2f85e91d-1937-4aff-8380-59d876f45856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:d9:03:ca:88:bd:db:03:5d:a4:0c:97:6f:
                    e5:85:da:ee:b1:02:a7:99:21:93:54:eb:98:37:09:
                    c9:7c:49:62:89:22:b7:1a:c5:99:52:7d:da:a8:78:
                    8a:45:b4:63:a4:25:1f:bc:f5:69:9d:83:6d:3f:42:
                    66:f9:19:24:3b:04:92:ed:27:09:b8:a0:83:ab:67:
                    4c:58:6c:4c:59:d1:96:c1:b0:38:9e:26:47:b7:09:
                    e0:ac:a0:06:a7:99:0f:86:62:55:e3:e7:e9:54:e0:
                    04:eb:8f:3b:4a:24:d9:3f:f9:56:40:06:72:20:43:
                    4f:aa:7e:14:e2:6f:96:e1:f6:26:d0:90:d2:33:99:
                    37:40:d1:66:38:e8:d7:08:f5:c4:11:46:25:ad:87:
                    e3:71:ce:1c:83:82:6e:c5:b5:5e:de:f0:f6:14:78:
                    68:b0:46:84:ec:ee:62:3f:c2:34:b9:27:ea:62:6c:
                    9c:ba:f5:1e:5b:ca:e5:eb:f1:fe:bf:e2:5a:ef:c5:
                    cd:e6:97:c9:14:6c:0d:af:7c:9d:ec:08:28:ae:8a:
                    0c:7e:ef:67:c1:f4:03:56:63:f8:bb:5c:8e:29:c0:
                    c8:99:1e:6d:d3:de:b8:1e:b0:c8:ef:cb:d6:b8:e1:
                    7e:a9:f0:49:cc:e5:b6:24:5f:3b:6a:db:47:a3:ff:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:85:6B:C5:81:BC:DA:3B:A7:98:8D:A4:C9:B3:4B:C8:D2:2D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/9da6f060-a560-3787-bee1-a42a2ad96ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/45644f39-69e4-4e08-bb44-b87bd3387626.crl

            X509v3 Authority Key Identifier:
                keyid:8D:11:F6:78:78:90:C7:14:99:72:0F:30:5D:A5:8D:CB:4A:10:A7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:7e:6b:c6:a4:5e:84:b8:de:7f:eb:6d:3d:dc:d2:c2:8b:
         4d:7a:a1:e8:d0:cb:2d:1a:ea:1e:b3:aa:ef:dd:83:38:85:9d:
         0e:26:87:af:c1:7e:b0:bd:2a:b4:82:36:01:07:b5:84:86:44:
         cf:22:74:fd:27:2c:e5:a7:0a:0b:9d:95:4b:e0:13:18:27:66:
         fb:34:27:1a:cc:83:7c:3f:3d:60:32:16:ef:44:83:64:42:b0:
         84:29:47:07:05:9b:65:f8:ef:59:51:1d:a5:cf:1c:6e:78:2b:
         c9:1e:8b:83:04:b1:d0:28:6a:2e:22:0d:01:56:88:a6:38:8f:
         68:02:8f:e3:b6:97:dd:79:c7:e9:95:36:4c:e4:0d:38:f0:f1:
         b8:79:20:ad:0a:79:b1:c8:42:8d:cb:8d:3d:82:3b:15:3a:a0:
         d4:1e:15:65:8c:7b:32:bd:77:0e:d5:f7:29:e2:a9:24:5e:ca:
         e2:21:23:b6:94:a8:b2:18:6c:31:be:1a:ea:b1:d6:93:d3:08:
         19:c8:39:32:59:dc:15:22:16:b0:d6:01:c3:bd:5a:e9:c6:a2:
         1f:7c:6a:44:dd:50:8f:32:72:20:15:fa:f5:d8:dd:4d:50:a4:
         05:c3:ce:14:a2:65:f4:58:69:ec:fe:09:d9:76:5b:83:ee:7d:
         79:92:83:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoSTQSwdFpmcN8sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU2NDRmMzktNjllNC00ZTA4LWJiNDQtYjg3YmQzMzg3
NjI2MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk
MmY4NWU5MWQtMTkzNy00YWZmLTgzODAtNTlkODc2ZjQ1ODU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGrZA8qIvdsDXaQMl2/lhdrusQKnmSGTVOuY
NwnJfEliiSK3GsWZUn3aqHiKRbRjpCUfvPVpnYNtP0Jm+RkkOwSS7ScJuKCDq2dM
WGxMWdGWwbA4niZHtwngrKAGp5kPhmJV4+fpVOAE6487SiTZP/lWQAZyIENPqn4U
4m+W4fYm0JDSM5k3QNFmOOjXCPXEEUYlrYfjcc4cg4JuxbVe3vD2FHhosEaE7O5i
P8I0uSfqYmycuvUeW8rl6/H+v+Ja78XN5pfJFGwNr3yd7AgorooMfu9nwfQDVmP4
u1yOKcDImR5t0964HrDI78vWuOF+qfBJzOW2JF87attHo/+iVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPihWvFgbzaO6eYjaTJs0vI0i2OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NTY0
NGYzOS02OWU0LTRlMDgtYmI0NC1iODdiZDMzODc2MjYvOWRhNmYwNjAtYTU2MC0z
Nzg3LWJlZTEtYTQyYTJhZDk2ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDU2NDRmMzktNjllNC00ZTA4LWJi
NDQtYjg3YmQzMzg3NjI2LzQ1NjQ0ZjM5LTY5ZTQtNGUwOC1iYjQ0LWI4N2JkMzM4
NzYyNi5jcmwwHwYDVR0jBBgwFoAUjRH2eHiQxxSZcg8wXaWNy0oQp0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NTY0NGYzOS02OWU0LTRlMDgtYmI0NC1iODdi
ZDMzODc2MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzOuoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADF8fmvGpF6EuN5/62093NLCi016oejQyy0a6h6zqu/dgziFnQ4mh6/B
frC9KrSCNgEHtYSGRM8idP0nLOWnCgudlUvgExgnZvs0JxrMg3w/PWAyFu9Eg2RC
sIQpRwcFm2X471lRHaXPHG54K8kei4MEsdAoai4iDQFWiKY4j2gCj+O2l915x+mV
NkzkDTjw8bh5IK0KebHIQo3LjT2COxU6oNQeFWWMezK9dw7V9yniqSReyuIhI7aU
qLIYbDG+Guqx1pPTCBnIOTJZ3BUiFrDWAcO9WunGoh98akTdUI8yciAV+vXY3U1Q
pAXDzhSiZfRYaez+Cdl2W4PufXmSgxg=
-----END CERTIFICATE-----
Generated at Thu Feb 5 17:05:53 2026 by rpki-client