This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
File:                     1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json)
Hash identifier:          rwuUW3B1wiYrBgfXxvk55UWienlTum4XGKMM5+7urmQ=
Subject key identifier:   01:FC:2F:A3:A5:CF:AA:66:94:13:E9:B0:FB:25:42:B6:24:E7:F4:48
Certificate issuer:       /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Certificate serial:       010D0C9F4328584C5666E3CFEFDE4747E40E5880
Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
Signing time:             Sun 28 Dec 2025 14:00:38 +0000
ROA not before:           Sun 28 Dec 2025 14:00:38 +0000
ROA not after:            Sat 28 Mar 2026 13:00:38 +0000
asID:                     36667
IP address blocks:        198.35.120.0/21 maxlen: 24
                          2620:c:8000::/48 maxlen: 48
                          2620:109:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:56:66:e3:cf:ef:de:47:47:e4:0e:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
        Validity
            Not Before: Dec 28 14:00:38 2025 GMT
            Not After : Mar 28 13:00:38 2026 GMT
        Subject: CN=61c4dee1-3873-41ef-baf6-7364011b60ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:76:6d:b3:16:85:7d:16:a2:c4:a2:66:d8:
                    92:1b:39:c6:76:e8:e2:7e:5b:01:ec:d5:bc:ec:3f:
                    59:87:c0:5c:e2:a9:a5:20:31:e6:66:2f:ba:6d:30:
                    94:61:ea:ee:34:18:63:29:c6:3a:86:6e:71:ad:60:
                    ae:d4:f6:4d:bd:91:bd:da:50:9d:8e:3d:66:b0:75:
                    83:16:24:d6:82:e9:ae:74:e5:1d:ec:f9:9a:95:19:
                    58:26:23:d7:85:3c:9f:62:e8:d7:98:71:31:68:b8:
                    be:f7:1d:69:99:4a:5d:13:04:41:0c:ca:ba:1b:2d:
                    5c:86:f0:4c:65:79:c8:18:45:12:df:f9:aa:dc:82:
                    46:8d:56:06:cd:d9:b9:7d:7a:e2:75:c5:2e:58:44:
                    78:3c:2f:fb:5d:82:fc:c5:58:64:af:49:c1:7a:68:
                    a9:4b:09:26:cb:a6:15:64:cc:dd:d3:10:20:cb:93:
                    03:94:4e:10:31:08:62:1e:c2:ac:d5:da:42:b8:c1:
                    69:e6:85:ed:bf:ae:36:66:4d:42:34:46:fc:4f:e7:
                    b3:25:fe:77:66:5d:70:1e:a2:14:48:95:43:cb:b3:
                    9f:48:06:5a:5f:c9:d7:81:fc:0d:e5:3a:28:c9:cb:
                    3c:25:fa:78:fb:02:9e:ed:27:41:1d:f3:74:9b:6d:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FC:2F:A3:A5:CF:AA:66:94:13:E9:B0:FB:25:42:B6:24:E7:F4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl

            X509v3 Authority Key Identifier:
                keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.120.0/21
                IPv6:
                  2620:c:8000::/48
                  2620:109:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b8:fb:30:3a:8a:d9:a4:23:da:45:58:36:b2:88:b4:21:6d:
         a8:7c:2b:5c:e5:37:55:18:74:25:35:6e:89:fd:3a:f4:dc:40:
         a7:60:39:5f:3a:c0:41:94:ab:25:91:82:df:f8:e0:36:22:41:
         95:57:20:37:f7:8c:10:cc:3f:a5:f1:ab:eb:84:9b:34:cc:99:
         66:15:f3:35:51:82:ac:94:e8:fe:fd:8d:45:6f:46:82:f3:bb:
         52:f2:e3:bd:57:9e:97:02:0e:90:dd:12:a8:41:f3:40:a2:0a:
         63:84:6e:e7:0d:13:5b:6c:be:c7:18:15:33:7a:5b:95:36:22:
         f4:dd:39:17:7a:34:6a:92:11:ed:f5:0c:c0:36:aa:fa:50:72:
         cd:85:f0:79:a8:88:f0:f6:1c:5b:03:6a:3b:80:ee:79:35:53:
         74:cf:5b:dc:4a:5e:bb:02:20:84:b6:28:64:bd:f5:43:5d:cf:
         68:6d:9e:19:6f:34:88:ce:f7:1b:43:25:94:51:5a:9b:97:ef:
         13:b5:15:64:e5:f7:7d:8e:a5:4c:08:11:65:6d:f5:37:1d:32:
         08:98:c4:72:81:6f:ea:fc:b1:54:8a:6b:fd:99:cd:d4:30:90:
         90:63:04:ff:e4:bd:cb:ba:e8:b2:92:b5:a2:3f:09:84:16:ca:
         fb:48:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:02:44 2026 by rpki-client