This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
File:                     c6086dd9-635c-3d69-b167-00ce58160e62.roa (raw, json)
Hash identifier:          ol66jO2Qc7kL5vHcVdCmTYaOYvtt76uSXvcP58T8Kt8=
Subject key identifier:   7A:A4:3B:9D:9E:53:C9:A2:7F:50:0C:55:25:6C:55:1F:CD:FB:B5:9E
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584C8046D3FADA6A61C077D20080
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     1299
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Jan 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:d3:fa:da:6a:61:c0:77:d2:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=fd1f3936-ef2a-4030-8f71-590095517eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:a4:0e:c6:84:c5:b8:51:8e:ed:07:28:1f:
                    22:c5:1f:c3:53:d6:47:56:c2:65:2d:68:2b:65:26:
                    fa:b2:b1:70:bc:8f:70:a2:02:c8:70:7f:66:26:95:
                    5e:79:0a:49:08:83:46:23:ff:ed:a1:4e:48:0a:ea:
                    a0:0f:ba:8f:20:a6:a8:e3:27:7f:f6:88:b1:6a:74:
                    8e:35:12:9d:e3:e7:c5:84:b9:87:ef:81:42:eb:34:
                    da:b7:a3:73:c4:d6:da:24:83:60:6f:17:84:cf:fe:
                    76:9d:c9:7e:c6:53:b5:29:ba:59:76:a6:3b:d0:87:
                    7d:e5:63:7a:f7:23:5c:09:1c:2f:1f:80:2e:97:d7:
                    6b:a6:48:d5:0a:ff:cc:2f:f9:1e:42:e5:f4:be:da:
                    3c:c6:58:47:81:e4:f6:20:8c:17:c1:5c:a3:df:9b:
                    c2:df:df:e4:92:23:fc:89:83:80:64:4d:b6:2f:3f:
                    47:42:6a:d2:0c:c6:b3:aa:44:67:51:26:45:c3:a7:
                    8f:bb:91:37:9d:55:e8:ff:cd:2c:7c:13:4b:07:4b:
                    c9:9f:b8:ac:85:3f:88:ab:a4:9a:79:9a:99:78:19:
                    a9:f1:fa:06:a9:07:ab:95:d6:95:3a:04:ed:71:da:
                    ce:93:c2:18:1e:ae:e1:38:76:b2:eb:b2:3a:0f:25:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A4:3B:9D:9E:53:C9:A2:7F:50:0C:55:25:6C:55:1F:CD:FB:B5:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:34:84:4e:1d:a2:df:b7:d2:03:74:a8:51:24:86:9c:60:2e:
         34:6d:52:12:60:9e:e0:48:43:2b:a0:8d:8b:e9:b4:5a:f4:89:
         5f:0c:e1:c9:c1:c4:31:a5:0d:f6:70:f2:27:b7:64:f4:02:7b:
         f3:2d:3a:db:c5:49:4f:66:30:44:7b:81:4b:1e:e7:4a:1e:d9:
         3c:24:c0:cf:3f:95:33:38:19:ea:2c:7f:4b:19:4e:be:ef:fd:
         01:c8:7a:f2:d3:e6:38:6b:8d:3f:13:6c:e1:23:ae:a0:02:6f:
         6e:b7:38:a3:df:05:10:52:65:b1:3a:77:5b:51:3e:f5:9b:8b:
         38:df:88:c8:b0:56:2f:f1:bd:48:1c:cd:55:60:c3:3b:13:68:
         71:94:50:46:5b:91:45:25:c0:55:c1:65:8e:7f:d1:aa:4c:50:
         3b:c5:18:80:26:63:f8:24:2e:10:be:61:20:9a:9d:3b:d1:b3:
         38:bd:7e:25:25:ca:f5:cd:f9:58:01:47:50:1b:eb:a3:e3:f2:
         3f:1e:e1:4e:f5:e9:36:bb:89:af:c5:a3:da:85:85:0c:93:b7:
         05:fd:4c:d6:ea:0b:a3:81:af:c8:8c:1b:e2:56:29:0a:37:23:
         ea:71:25:25:0c:73:29:5d:e9:1b:3a:5a:77:a2:4f:61:cc:08:
         ef:bc:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:27:55 2026 by rpki-client