This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa
File:                     f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa (raw, json)
Hash identifier:          BbDCexvGJcvMWXGCwtw93a0YadzVIYGffK1eLB6OegY=
Subject key identifier:   7A:62:3B:0E:BC:9F:CB:8D:D7:8D:3D:C0:B5:A5:50:77:84:D0:70:BE
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584C6E2166428A40B7D21466E100
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     7782
IP address blocks:        107.152.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:66:42:8a:40:b7:d2:14:66:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=b2ca0acb-a321-435b-9fa3-484b2fa54f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:5d:fa:06:61:53:da:50:f3:2b:d1:3b:12:
                    58:ed:cf:1d:f3:a3:6d:73:be:37:9a:c4:d2:1c:80:
                    00:58:9f:4f:5d:71:7b:fa:c4:88:8f:73:4f:8b:0d:
                    a1:ec:d7:8e:11:f7:3c:2a:41:04:3c:fc:51:42:71:
                    13:13:bb:aa:04:26:c3:bc:5e:c6:48:b2:64:39:a3:
                    9c:0b:05:6a:bf:df:34:2b:8f:78:65:96:45:a2:b5:
                    5a:79:6f:5f:66:0c:c6:e4:53:3e:17:9b:ea:0e:c3:
                    d5:d4:a7:05:31:56:2e:70:97:27:be:8c:94:a5:72:
                    f3:69:e2:58:e1:62:0b:d9:85:7e:f5:19:2a:62:aa:
                    33:b2:e8:04:41:da:27:95:f9:71:e3:bb:51:eb:cb:
                    04:1c:8b:f7:7c:4f:6f:18:d8:38:ae:e2:48:36:ff:
                    f4:e6:89:b9:08:72:aa:55:2a:a4:63:29:54:b0:6d:
                    a3:d8:6e:e0:0c:20:f3:76:c3:4e:0b:56:68:18:04:
                    04:a9:40:0c:56:8d:c5:2b:3f:7e:8d:85:85:ed:b7:
                    09:4d:87:0b:77:b7:33:80:08:0b:9c:2d:98:40:ec:
                    47:93:72:7f:cb:54:e9:ab:41:29:ca:75:6a:38:a4:
                    74:29:c6:bc:95:67:08:4c:d4:13:be:9f:c6:da:ed:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:3B:0E:BC:9F:CB:8D:D7:8D:3D:C0:B5:A5:50:77:84:D0:70:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.152.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:50:43:d1:34:18:d2:61:65:13:e7:56:e4:b9:f9:0c:62:
         f8:43:d3:91:f5:74:0c:22:dd:84:53:6c:c2:97:8d:3f:3c:d0:
         4e:9d:7d:ca:c7:ad:7e:96:fb:5b:7b:e1:c4:4d:a3:3d:e8:e2:
         f5:95:01:07:08:d5:e3:af:3e:c4:64:87:96:e9:94:df:0e:47:
         ab:39:7f:87:d3:1e:b3:f7:54:a0:e1:e5:03:63:f3:41:be:6f:
         9d:82:32:d9:f6:8c:ac:7d:87:78:06:5d:32:26:bf:89:4f:7b:
         ba:d7:b7:20:d1:6d:93:42:70:c1:39:01:4d:e1:ae:eb:69:3b:
         e2:bb:64:1a:85:69:9b:61:61:8f:9b:75:5c:0b:aa:94:82:4b:
         1b:9f:94:d5:40:9c:d3:f5:5f:8f:4f:0e:8f:93:e2:94:db:1c:
         cb:95:65:7e:90:81:8b:24:d6:2a:28:8a:4c:45:55:17:42:a4:
         60:e2:59:c5:57:a8:46:e9:c5:df:1d:80:62:fe:8e:8a:a0:a6:
         e2:05:77:39:f8:4d:c9:7f:8b:9a:42:85:78:1a:5f:a6:51:9b:
         a5:e5:91:1d:23:a8:a1:12:7c:cc:2f:11:de:d3:a6:b7:33:a3:
         17:b2:94:04:25:c3:18:01:74:d9:e0:8a:d2:ca:28:49:68:8f:
         78:b4:b7:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIWZCikC30hRm4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj
ZGY3MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk
YjJjYTBhY2ItYTMyMS00MzViLTlmYTMtNDg0YjJmYTU0Zjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5xd+gZhU9pQ8yvROxJY7c8d86Ntc743msTS
HIAAWJ9PXXF7+sSIj3NPiw2h7NeOEfc8KkEEPPxRQnETE7uqBCbDvF7GSLJkOaOc
CwVqv980K494ZZZForVaeW9fZgzG5FM+F5vqDsPV1KcFMVYucJcnvoyUpXLzaeJY
4WIL2YV+9RkqYqozsugEQdonlflx47tR68sEHIv3fE9vGNg4ruJINv/05om5CHKq
VSqkYylUsG2j2G7gDCDzdsNOC1ZoGAQEqUAMVo3FKz9+jYWF7bcJTYcLd7czgAgL
nC2YQOxHk3J/y1Tpq0EpynVqOKR0Kca8lWcITNQTvp/G2u0+nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpiOw68n8uN1409wLWlUHeE0HC+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm
MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZjgyMGU3NWYtNGU3Zi0z
NTJhLWE2N2EtYTcxZmY4YmE1NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw
NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh
Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy
MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5hwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbvUEPRNBjSYWUT51bkufkMYvhD05H1dAwi3YRTbMKXjT880E6dfcrH
rX6W+1t74cRNoz3o4vWVAQcI1eOvPsRkh5bplN8OR6s5f4fTHrP3VKDh5QNj80G+
b52CMtn2jKx9h3gGXTImv4lPe7rXtyDRbZNCcME5AU3hrutpO+K7ZBqFaZthYY+b
dVwLqpSCSxuflNVAnNP1X49PDo+T4pTbHMuVZX6QgYsk1iooikxFVRdCpGDiWcVX
qEbpxd8dgGL+joqgpuIFdzn4Tcl/i5pChXgaX6ZRm6XlkR0jqKESfMwvEd7Tprcz
oxeylAQlwxgBdNngitLKKEloj3i0t6M=
-----END CERTIFICATE-----
Generated at Sat Jan 17 20:47:53 2026 by rpki-client