This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
File:                     2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json)
Hash identifier:          FelHHMTJCdOpQJ2hJ+/9MaQapneIhc7EalPO9bSYRz0=
Subject key identifier:   FA:18:DD:5E:2B:C9:0C:04:54:D9:6A:D4:6A:AF:72:83:26:BF:9F:40
Certificate issuer:       /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
Certificate serial:       010D0C9F4328584C50D13678F79A56EAD68A0E80
Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
Signing time:             Fri 26 Dec 2025 14:00:39 +0000
ROA not before:           Fri 26 Dec 2025 14:00:39 +0000
ROA not after:            Thu 26 Mar 2026 13:00:39 +0000
asID:                     400893
IP address blocks:        23.153.0.0/24 maxlen: 24
                          172.82.8.0/22 maxlen: 24
                          2602:ff2a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:50:d1:36:78:f7:9a:56:ea:d6:8a:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
        Validity
            Not Before: Dec 26 14:00:39 2025 GMT
            Not After : Mar 26 13:00:39 2026 GMT
        Subject: CN=a8b28822-2008-4063-ba9f-897262cf4a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:4d:0d:bf:f5:2e:77:d9:c3:a0:2c:9a:af:
                    33:49:d7:80:ab:fc:8a:4e:49:3f:28:a0:26:01:38:
                    cb:ba:87:a9:92:9a:4e:f7:d2:46:56:72:a1:72:f9:
                    34:22:e0:fe:2a:0a:a0:a6:6d:96:44:10:53:1f:21:
                    ea:34:bf:e7:30:45:d6:7e:cf:ab:28:02:2b:36:61:
                    82:49:c7:ec:1b:17:d4:cf:41:1d:e7:f0:04:48:c3:
                    5b:9a:81:2d:50:a5:b2:16:19:88:99:c3:04:82:42:
                    18:06:e2:03:72:ed:4b:b0:f8:b2:a3:a1:c7:3b:2d:
                    b2:39:cb:0a:8a:cc:bb:b3:55:26:7e:f2:52:ce:1b:
                    eb:b7:1f:c0:56:d1:6c:91:8f:ed:da:b0:fc:46:36:
                    05:17:a3:c4:07:6a:ab:2d:7e:fb:93:c2:e1:2a:3b:
                    61:41:26:12:50:fe:a6:d7:0e:27:0f:11:d4:e5:e9:
                    b2:42:f6:0b:dd:35:27:a0:ea:f2:ac:e4:2b:c9:19:
                    9a:00:43:1a:06:13:ae:9e:32:a3:b3:32:d0:31:c3:
                    4a:cc:a4:3f:4d:d5:6c:ae:84:8b:76:1d:da:7f:fc:
                    2b:1d:90:0b:9f:b5:3b:cc:4b:8c:0d:69:e3:b8:9b:
                    6e:42:b4:1b:b9:83:d8:ff:88:9f:f5:4a:fd:b4:c0:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:18:DD:5E:2B:C9:0C:04:54:D9:6A:D4:6A:AF:72:83:26:BF:9F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl

            X509v3 Authority Key Identifier:
                keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.0.0/24
                  172.82.8.0/22
                IPv6:
                  2602:ff2a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:7a:d9:59:e0:7f:07:25:e2:d4:9a:f8:c0:b2:8e:c7:cc:
         4c:d9:29:56:e8:57:23:49:ef:68:6d:4e:71:9a:14:3a:b6:b6:
         90:f0:bf:33:5b:64:cc:28:8e:b1:20:6b:87:04:96:9b:92:11:
         8b:a1:8c:c9:c3:9d:a9:1b:93:b0:0b:62:10:9c:07:e3:71:84:
         17:7b:30:56:7c:a4:97:35:bf:47:89:a0:bd:41:df:01:a5:62:
         cd:96:77:1c:ce:76:aa:a7:fa:53:b0:95:07:1f:3f:d1:98:12:
         93:28:78:1f:6e:13:17:38:6b:96:88:56:10:ce:5a:4a:d8:b7:
         1d:e5:81:85:b0:51:33:92:af:2d:51:e4:a7:b9:e3:73:b8:2b:
         eb:01:22:09:e5:21:df:7b:2e:cc:03:7f:bb:43:51:7b:60:eb:
         89:dc:f8:10:ef:75:b8:65:ca:86:73:11:59:42:86:20:8e:a4:
         bb:74:3d:40:8e:eb:0d:ed:33:b0:58:2e:a5:69:4d:32:0d:5e:
         b5:6b:2f:0f:9d:55:ed:7b:4e:e6:7d:d8:02:13:09:04:3a:cd:
         8e:71:db:93:1c:47:fb:24:e3:6f:7d:9c:a4:7e:07:f1:59:68:
         26:03:92:85:2a:29:d9:53:5b:16:ed:5d:ab:81:92:be:c0:60:
         b9:67:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:37:16 2026 by rpki-client