This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa
File:                     4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa (raw, json)
Hash identifier:          BMh71dw7Vs5HTY0ihjX/7ftr79vif/Y9wGg9w6cxzB8=
Subject key identifier:   DC:54:90:73:2B:E0:9A:95:C9:F2:DB:87:DE:1E:5A:A8:5C:EC:71:70
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584C602BDAF0D00F013DAFB6FD00
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     7029
IP address blocks:        209.166.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:da:f0:d0:0f:01:3d:af:b6:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=fac5edbb-8673-42e1-b938-ff397c0501a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:71:90:fb:50:7c:2e:2f:1a:6d:9d:76:b0:
                    f4:3f:c0:ad:e3:1e:f7:1a:25:e8:22:13:ed:21:75:
                    2c:35:52:1b:ce:89:d1:5a:7f:70:b5:12:0b:63:99:
                    d4:30:d3:05:8b:f2:56:96:84:58:d4:82:c9:18:54:
                    31:01:00:9e:a7:79:ab:e1:b1:89:b6:ac:80:83:74:
                    ed:37:5f:e7:71:02:e6:1a:5e:91:bd:66:7c:f6:5b:
                    a4:c3:43:9b:73:d0:cc:50:e1:10:4c:cd:4d:73:94:
                    d1:f4:38:c5:d3:e0:9c:78:29:b1:31:77:b5:1c:64:
                    ee:ca:69:4b:44:eb:d6:fe:24:1c:30:6e:19:5f:83:
                    d6:1f:8f:09:ae:62:ca:b5:d7:3d:60:7f:2a:dd:8a:
                    89:87:82:57:2f:42:f9:b6:c4:95:c3:65:fe:87:b0:
                    e9:fb:41:d5:ca:6a:78:09:67:a9:a0:42:5e:15:d0:
                    c3:b2:68:f2:1d:38:34:6f:81:da:e0:56:a2:41:00:
                    2c:7f:c9:80:eb:13:84:53:47:df:1e:bb:17:3e:44:
                    8d:0a:cb:8e:d1:c1:48:43:f9:b4:e8:06:5c:67:fb:
                    bd:aa:24:bb:6a:87:48:fe:04:84:ec:54:22:11:1d:
                    b0:f4:57:dc:de:02:28:01:3f:85:cc:7b:5d:2a:00:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:90:73:2B:E0:9A:95:C9:F2:DB:87:DE:1E:5A:A8:5C:EC:71:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:c6:c7:44:57:d7:65:14:da:1b:a6:66:3d:55:55:2d:b1:
         ab:9a:48:e9:5b:28:78:af:16:4b:f7:ed:a6:27:d8:d0:a2:ca:
         d6:45:ac:75:2f:92:9a:eb:02:2f:85:b1:fe:94:70:81:e2:5e:
         e0:20:a9:fa:77:60:82:52:40:12:7a:75:98:1a:c3:b3:e1:54:
         90:48:a8:94:d0:fd:94:e6:84:e6:b4:1d:69:ad:6a:03:0f:29:
         58:26:e5:41:19:d7:76:0a:13:52:b8:69:93:0d:fc:a6:9b:4c:
         9d:0b:1a:9a:aa:8f:e8:0f:12:96:e3:f3:e3:ee:6f:ea:7b:19:
         51:3c:68:ac:54:14:3e:cf:01:f7:97:ef:ae:c8:de:b3:85:75:
         88:6f:0e:3d:8e:85:04:fc:fc:45:52:d9:29:98:8f:d4:e6:ea:
         57:4c:0f:26:f5:0f:f7:cf:5f:1b:9a:7c:c1:d2:2c:32:fc:14:
         26:96:09:1e:a7:e9:23:4c:2a:80:2d:7d:5a:03:8d:34:ce:1c:
         c9:b7:cd:de:4c:03:ff:8f:f6:46:e3:fa:f6:d9:51:5e:95:df:
         e7:0c:8d:ba:60:6a:e6:c8:e3:d2:9d:d1:ba:23:03:8e:e0:a0:
         8b:87:2f:e1:ff:f3:e7:d6:8d:00:2a:31:e6:a6:39:9c:65:7c:
         8e:cf:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:42:45 2026 by rpki-client