This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa
File:                     adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa (raw, json)
Hash identifier:          xrNpfZs3+yi9xKiSJvm1kFuugcCODrikzP5RGoMJkp0=
Subject key identifier:   D6:67:DC:DE:B1:F3:1F:9C:FB:B5:0D:B1:8C:19:2D:6A:3B:47:08:64
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F4328584C69F16023C96FB1D7397EA400
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa
Signing time:             Sun 04 Jan 2026 14:00:38 +0000
ROA not before:           Sun 04 Jan 2026 14:00:38 +0000
ROA not after:            Sat 04 Apr 2026 13:00:38 +0000
asID:                     33458
IP address blocks:        170.39.172.0/24 maxlen: 24
                          170.39.173.0/24 maxlen: 24
                          170.39.174.0/24 maxlen: 24
                          170.39.175.0/24 maxlen: 24
                          208.65.84.0/24 maxlen: 24
                          208.65.85.0/24 maxlen: 24
                          208.65.86.0/24 maxlen: 24
                          208.65.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:69:f1:60:23:c9:6f:b1:d7:39:7e:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Jan  4 14:00:38 2026 GMT
            Not After : Apr  4 13:00:38 2026 GMT
        Subject: CN=bbcb7e28-1d0a-400c-8188-887682df3309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:69:ce:f6:fc:bf:d0:54:5d:f0:3e:80:bd:
                    80:fd:c4:de:21:fd:fa:ac:6e:6b:1c:26:d0:d3:da:
                    a9:a5:f7:59:e6:da:3b:10:de:86:73:14:9e:24:cf:
                    4b:86:5a:0b:1e:53:ed:75:4c:29:28:7c:d1:e9:b2:
                    e2:cb:1b:a1:1c:71:5d:4b:b8:aa:b6:16:f7:98:14:
                    08:c9:88:96:a1:33:ce:16:2f:7a:3e:7d:32:7f:0e:
                    47:e3:0e:ff:d0:08:df:92:a4:df:5f:c4:20:ae:67:
                    21:1c:c0:c1:1b:64:d7:2a:ce:03:9e:db:11:0c:f6:
                    6c:25:fa:50:87:16:7d:57:9e:ea:b7:ab:de:e7:44:
                    92:8d:93:2f:46:42:2d:a1:50:eb:e2:a1:2c:13:36:
                    b1:98:02:9c:fa:a0:0e:0c:df:c2:f0:0e:d6:36:1a:
                    d7:7b:cf:4b:05:aa:83:fd:be:89:4e:26:38:0f:0e:
                    30:41:e3:f1:66:84:37:c6:93:fe:a1:41:60:fe:12:
                    34:6c:68:1f:fc:65:d7:54:5c:11:fd:a5:c5:70:be:
                    50:2c:cd:b0:28:6e:3e:a1:ee:ef:b4:d2:f7:f4:07:
                    33:eb:e6:30:61:a4:32:6a:1c:db:bd:14:f6:fa:0e:
                    34:0f:e5:93:9b:ef:81:9d:f4:ea:c7:17:77:6b:c2:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:67:DC:DE:B1:F3:1F:9C:FB:B5:0D:B1:8C:19:2D:6A:3B:47:08:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.172.0/22
                  208.65.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:33:70:41:9f:87:f3:9e:52:cd:25:bf:a7:fe:9f:4f:83:
         cf:5f:ea:f3:83:67:0c:6a:5b:d3:00:63:2c:ee:e9:7e:a1:b3:
         e1:b3:91:69:10:0c:06:e7:38:c6:cd:46:fe:7b:11:c3:14:97:
         6a:d3:b7:ea:5a:12:a8:a9:9f:a9:fe:5d:72:c3:bd:e8:7c:35:
         7a:65:ca:90:45:39:5f:5f:65:16:03:3f:17:d6:1b:2b:01:11:
         df:c8:fe:68:60:4c:b9:0b:e6:3f:d5:03:2c:e3:57:fd:56:dd:
         75:fb:bc:0f:47:0a:f4:09:21:90:4f:4f:e6:70:ea:e9:3b:8d:
         e1:e3:c7:e2:08:41:20:70:cc:ce:b4:de:20:e9:ea:e1:57:d4:
         a4:4b:38:ab:d8:cb:28:39:5e:17:95:1c:73:8b:fc:a0:87:02:
         a4:1c:1a:50:a4:12:33:94:96:92:0e:bd:02:f4:89:86:ca:e0:
         5c:5b:73:26:41:05:10:0d:04:83:37:61:f8:41:0a:dc:e3:bd:
         a6:e7:40:15:64:8b:95:70:1c:90:fb:19:c5:bc:62:f8:2b:81:
         82:4d:66:a6:0d:0d:bf:24:0f:46:da:93:b1:7c:41:e6:e1:aa:
         42:5c:e3:02:59:05:ce:3e:a2:59:eb:02:f2:7f:55:4f:16:b3:
         5b:96:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:18:00 2026 by rpki-client