This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa
File:                     b649b1d0-5d8d-301d-a8c5-4412afe89287.roa (raw, json)
Hash identifier:          68eOXim3xeeLPo2SU3Svuz9xzwq5ZyUtxECcpBCL2Ig=
Subject key identifier:   94:F4:A7:2F:95:B7:26:D1:60:29:FC:E2:8D:BB:AC:01:31:1D:E3:13
Certificate issuer:       /CN=1de513f7-173f-4447-a34f-d58d3b1ce99d
Certificate serial:       010D0C9F4328584C61913A5EB878E26B2694CB40
Authority key identifier: 88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     174
IP address blocks:        142.248.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:3a:5e:b8:78:e2:6b:26:94:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de513f7-173f-4447-a34f-d58d3b1ce99d
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=26b527c3-6e3a-45e6-8d2c-1d1738960959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:b2:f8:9b:4a:73:41:6f:c4:a2:9f:54:a8:
                    eb:7b:df:96:fb:77:ba:ab:93:e4:e6:d0:b1:0d:9a:
                    e3:72:ef:20:07:7b:3f:b2:58:18:af:59:63:90:1a:
                    bb:6d:83:3c:35:6f:66:cb:f5:51:c7:64:e7:ca:d0:
                    6f:de:38:72:78:9e:b1:d1:09:68:2b:eb:e4:c7:03:
                    68:6a:f6:83:2b:f5:56:4b:ca:f4:4e:d8:56:d8:d8:
                    c3:93:67:10:f8:fa:1f:a5:21:ee:37:c2:9f:f7:94:
                    f3:92:07:7a:b7:1c:d7:7f:df:b3:8a:13:5d:88:d8:
                    62:6c:66:7c:02:74:3d:87:e7:7a:b8:a6:fc:13:a4:
                    08:5c:42:2c:13:22:2d:21:21:da:08:06:85:9a:9b:
                    8b:02:84:31:13:db:06:c4:43:bd:b3:e4:38:ce:2e:
                    aa:d7:ff:ed:ee:10:0d:aa:36:04:0e:b4:1f:21:f9:
                    64:e5:3d:6d:23:68:ce:a8:6c:22:6a:52:5a:d8:63:
                    d4:38:bf:82:55:03:bd:1f:50:2f:27:7d:80:d0:02:
                    c7:e7:d1:0e:c1:ad:17:95:e2:2d:b0:b7:b5:ce:a7:
                    74:04:56:32:1f:72:b5:6d:2b:19:62:87:42:a5:c1:
                    8b:66:bc:5e:d1:b5:c0:30:4e:3f:f7:9f:e8:f6:4f:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F4:A7:2F:95:B7:26:D1:60:29:FC:E2:8D:BB:AC:01:31:1D:E3:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl

            X509v3 Authority Key Identifier:
                keyid:88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ff:0e:7a:7a:a4:ef:df:f5:ea:d3:09:45:dc:30:19:4c:2e:
         6e:e9:56:cf:0f:20:44:2f:75:7b:ec:f9:42:d4:48:e0:b5:54:
         81:1f:47:a1:df:5d:8d:7a:31:af:de:72:ca:1a:f8:8b:cc:90:
         79:38:42:07:14:13:65:ac:d7:25:17:8b:ce:aa:ea:76:d9:ce:
         c6:58:ff:fe:64:c4:aa:0e:4a:aa:e9:8e:a0:7a:3e:0a:be:76:
         6b:0c:8f:e2:58:da:07:50:d3:7e:3b:f9:59:36:b6:5d:77:85:
         ed:35:b5:a7:d4:2f:5d:96:92:88:e3:24:02:67:b8:72:b4:af:
         ce:34:0d:be:2c:02:90:c0:e1:1f:28:f2:77:f1:bc:76:55:ec:
         a0:92:c5:4f:d0:01:07:36:70:b9:ba:02:df:87:ec:34:e4:c4:
         88:02:74:fc:a7:6b:f5:06:ec:a3:5d:4d:ee:85:a6:e5:30:44:
         01:75:da:ed:5e:49:ef:94:02:25:d0:2c:04:c7:b9:f3:fb:bf:
         58:17:42:fe:a7:64:ea:df:b2:d5:e2:80:e8:0d:1d:1d:74:5e:
         77:77:3b:23:80:59:a6:0b:8b:cf:10:95:5b:62:6f:a6:04:dd:
         b6:06:9d:9a:db:e1:50:c7:e2:5d:9a:31:11:b8:1d:1f:58:bb:
         39:3b:0b:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkTpeuHjiayaUy0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRlNTEzZjctMTczZi00NDQ3LWEzNGYtZDU4ZDNiMWNl
OTlkMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk
MjZiNTI3YzMtNmUzYS00NWU2LThkMmMtMWQxNzM4OTYwOTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRey+JtKc0FvxKKfVKjre9+W+3e6q5Pk5tCx
DZrjcu8gB3s/slgYr1ljkBq7bYM8NW9my/VRx2TnytBv3jhyeJ6x0QloK+vkxwNo
avaDK/VWS8r0TthW2NjDk2cQ+PofpSHuN8Kf95Tzkgd6txzXf9+zihNdiNhibGZ8
AnQ9h+d6uKb8E6QIXEIsEyItISHaCAaFmpuLAoQxE9sGxEO9s+Q4zi6q1//t7hAN
qjYEDrQfIflk5T1tI2jOqGwialJa2GPUOL+CVQO9H1AvJ32A0ALH59EOwa0XleIt
sLe1zqd0BFYyH3K1bSsZYodCpcGLZrxe0bXAME4/95/o9k/xTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJT0py+VtybRYCn84o27rAExHeMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1
MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThkM2IxY2U5OWQvYjY0OWIxZDAtNWQ4ZC0z
MDFkLWE4YzUtNDQxMmFmZTg5Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWRlNTEzZjctMTczZi00NDQ3LWEz
NGYtZDU4ZDNiMWNlOTlkLzFkZTUxM2Y3LTE3M2YtNDQ0Ny1hMzRmLWQ1OGQzYjFj
ZTk5ZC5jcmwwHwYDVR0jBBgwFoAUiPFj7pAvQgbSHjSJ2D5eHngcCiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThk
M2IxY2U5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvjsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABX/Dnp6pO/f9erTCUXcMBlMLm7pVs8PIEQvdXvs+ULUSOC1VIEfR6Hf
XY16Ma/ecsoa+IvMkHk4QgcUE2Ws1yUXi86q6nbZzsZY//5kxKoOSqrpjqB6Pgq+
dmsMj+JY2gdQ0347+Vk2tl13he01tafUL12WkojjJAJnuHK0r840Db4sApDA4R8o
8nfxvHZV7KCSxU/QAQc2cLm6At+H7DTkxIgCdPyna/UG7KNdTe6FpuUwRAF12u1e
Se+UAiXQLATHufP7v1gXQv6nZOrfstXigOgNHR10Xnd3OyOAWaYLi88QlVtib6YE
3bYGnZrb4VDH4l2aMRG4HR9Yuzk7C9w=
-----END CERTIFICATE-----
Generated at Tue Jan 13 12:33:30 2026 by rpki-client