This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
File:                     309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (raw, json)
Hash identifier:          3M1SkHDl/5lb2RFlHT0OIOq2ZAFY+EDzU0a4b7ihzp0=
Subject key identifier:   3B:8E:94:C6:6D:24:DF:AC:43:2D:83:95:75:CC:F4:DB:26:1F:5E:C5
Certificate issuer:       /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
Certificate serial:       010D0C9F4328584C6E21674FED74CC69045974A8
Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     63362
IP address blocks:        104.254.204.0/22 maxlen: 22
                          104.254.204.0/23 maxlen: 23
                          104.254.206.0/24 maxlen: 24
                          104.254.207.0/24 maxlen: 24
                          205.143.40.0/22 maxlen: 22
                          205.143.40.0/23 maxlen: 23
                          205.143.42.0/23 maxlen: 23
                          205.143.42.0/24 maxlen: 24
                          205.143.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:67:4f:ed:74:cc:69:04:59:74:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=7a57c8ae-222b-4c8f-a099-c7f039bd38ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:91:ea:53:04:67:12:f7:de:6f:90:e7:c9:
                    20:bd:29:f8:4e:d7:c3:71:0f:9b:56:95:23:99:87:
                    7e:12:9b:c0:76:cd:2e:18:07:11:0b:8f:c9:64:e0:
                    ff:43:88:69:6f:b0:79:c5:70:9a:ba:bd:28:7b:a5:
                    42:ee:6e:fb:22:ad:00:6d:98:bd:82:ae:9b:62:bd:
                    55:e5:2a:27:67:54:6e:b4:f4:95:90:77:43:0a:0a:
                    25:15:23:97:ee:9c:03:44:17:c5:14:69:80:bc:c3:
                    83:0b:49:4d:b1:f0:99:fe:73:76:1d:e5:08:8c:27:
                    08:e4:1b:5b:41:43:4d:39:30:39:a5:5c:d4:1c:d1:
                    b6:da:19:2a:15:70:f8:60:70:38:65:e8:34:fc:ea:
                    fe:1d:64:ca:ac:71:9b:3d:be:86:00:ca:d3:aa:ed:
                    e4:69:b2:9c:66:ba:93:c9:a4:c5:a9:e0:66:ea:eb:
                    89:84:6d:a1:94:3d:73:be:64:55:b8:2f:4f:47:56:
                    39:3d:ad:3c:09:25:96:79:d7:25:b9:53:05:de:2a:
                    8c:99:57:ab:c8:f2:bb:45:86:04:8a:a5:21:e6:9d:
                    d7:41:9e:d3:0d:2b:a5:a5:aa:cb:18:d0:24:f6:c0:
                    da:b1:ea:6f:62:0f:8c:01:46:30:ec:0f:45:85:43:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:94:C6:6D:24:DF:AC:43:2D:83:95:75:CC:F4:DB:26:1F:5E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.204.0/22
                  205.143.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:73:14:45:81:51:4b:c2:eb:f3:09:bb:22:25:b4:30:cd:
         d7:66:7b:85:07:54:fe:ad:ce:f9:df:c6:20:18:db:69:b2:af:
         f6:1e:c6:a6:cb:64:a7:b7:ad:2b:03:a7:47:7d:ae:ca:71:d3:
         c8:f0:db:8a:91:88:89:ec:92:1c:68:ea:9a:d5:4c:5c:d6:fa:
         07:51:4f:a7:9c:6b:b0:79:66:62:5e:3f:94:c0:bd:1e:50:46:
         b6:be:04:69:75:7a:c3:9b:f8:31:4a:48:82:5d:f2:9b:f2:ef:
         4f:5d:50:a6:3f:c1:35:7d:6c:5c:90:65:83:f1:7e:f1:7b:8f:
         db:1e:f5:b1:12:ad:57:02:47:b0:4c:cc:cd:2a:e8:d9:a6:1f:
         f1:24:1f:18:86:33:a8:73:97:e8:47:28:f3:d9:e4:12:b5:20:
         01:53:04:67:2d:3b:65:e2:a3:6a:66:9a:be:21:78:2e:f6:6e:
         0c:6b:6b:7d:38:b1:9f:88:23:85:31:7b:64:e0:6b:0b:8d:81:
         39:3d:6f:fb:88:7c:d7:55:47:a7:6f:08:9c:ce:62:f2:97:2c:
         5c:60:3f:7f:cd:2d:f9:b3:17:67:0d:31:09:c4:df:a1:ce:a1:
         0f:06:50:aa:c1:3e:74:1e:81:35:41:07:2a:12:86:35:e4:e0:
         86:5b:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 02:21:44 2026 by rpki-client