This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa
File:                     ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa (raw, json)
Hash identifier:          YYgEK/HsZ/NuQchmzHtmwqactP5cG3KZTu20Y5MiuQA=
Subject key identifier:   06:D6:2C:02:2F:E8:86:5D:2C:4B:B8:4F:1D:D0:03:0B:81:83:C2:43
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584C45A80349A6E5BC7E2B159180
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     36492
IP address blocks:        136.23.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:03:49:a6:e5:bc:7e:2b:15:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=b8ebb13d-0544-4caa-8c9f-9b8e8579239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:66:04:74:89:8b:a7:3c:7c:c0:20:48:d4:
                    f5:ea:88:03:33:dd:0c:6c:fa:f2:bd:3d:a1:8e:d0:
                    38:9c:35:46:43:52:b9:7b:be:67:49:a1:4a:9a:68:
                    66:a2:a4:0e:98:97:79:f8:4e:55:55:d5:81:7c:a5:
                    1d:19:ee:ad:02:d4:fa:c5:58:fa:f7:91:36:a4:90:
                    21:56:af:bc:2f:cc:f4:db:0e:f9:9a:68:91:aa:27:
                    4e:00:0f:48:62:b5:ea:0f:87:01:fe:b0:ec:6e:c6:
                    e3:bb:f8:b4:c2:be:df:33:db:c9:24:01:8f:4c:52:
                    a1:5e:b2:44:46:23:4a:b2:b7:e4:23:2d:50:7c:48:
                    ea:84:41:71:a6:97:0b:4b:52:6a:b3:22:76:2b:dd:
                    17:89:30:0f:a4:95:8f:b4:4f:66:18:bd:19:6f:b0:
                    6a:ef:52:60:ec:51:95:15:ad:42:2b:d8:2d:51:d3:
                    63:92:54:e8:19:22:4f:1e:5a:5f:ee:cc:cb:c4:dc:
                    e9:6f:b9:be:46:02:2b:7f:e7:ad:f4:78:d2:64:c6:
                    39:b1:92:7f:29:58:e0:14:85:da:77:15:1a:5f:b4:
                    15:0d:d8:76:e4:71:1b:65:02:dd:47:d6:e1:f0:b1:
                    54:c4:01:c9:86:a3:1f:3c:eb:2f:6d:83:0d:cf:fd:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:2C:02:2F:E8:86:5D:2C:4B:B8:4F:1D:D0:03:0B:81:83:C2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:99:e6:45:1f:f5:50:da:f9:8c:7a:5a:27:e5:25:97:1f:c8:
         d1:2b:6c:7c:b1:e8:72:18:f6:16:8b:1d:70:23:a5:04:6f:11:
         3b:ac:33:02:d5:58:33:fd:98:87:84:12:da:36:76:6a:65:85:
         ed:82:9b:44:b6:12:4c:ab:af:97:2f:d0:de:af:39:9f:fb:c1:
         5a:d2:d0:f8:f7:e1:2f:7f:57:47:f4:04:fe:cb:c7:e4:66:52:
         8e:c8:70:8a:9e:fe:fa:2b:8a:a7:49:74:bd:2d:25:eb:d0:1b:
         9c:7f:a9:94:a0:0d:e9:1c:34:6a:d9:20:42:c0:09:77:7b:63:
         23:65:74:53:a3:86:ed:a6:82:73:14:e5:b8:58:af:97:4c:f7:
         d8:8d:33:52:21:2a:90:01:3d:1b:2d:fe:f3:82:10:90:39:e2:
         b6:03:75:f5:44:9b:15:3a:20:5f:cb:bc:54:8f:40:6b:34:e1:
         17:bd:b5:2e:70:04:6c:d7:20:5c:9a:4b:05:7b:27:c5:2c:d4:
         f8:71:7b:be:68:a6:0a:2c:37:31:5f:b9:2f:f1:bb:f9:48:75:
         64:85:df:c5:65:2c:6d:88:b9:73:c3:40:3f:93:02:99:ce:95:
         24:72:95:41:61:e8:f3:db:33:bf:38:00:da:28:d5:02:61:7e:
         ef:e4:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 20:16:04 2026 by rpki-client