This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa
File:                     685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa (raw, json)
Hash identifier:          ts10qAp3YjO9QrxUevIQcIDHAcC9gT04IeJrLZva/2I=
Subject key identifier:   62:74:F3:8F:03:DA:E8:C7:F0:6A:71:92:09:2E:5A:C0:A8:CF:B3:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CB2874C782E850A4A62E2C940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     16625
IP address blocks:        104.77.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:4c:78:2e:85:0a:4a:62:e2:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=390db5e4-765c-4f15-a82d-daa07b8e3764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:7a:af:ef:c7:29:ed:f3:fc:18:73:83:8d:
                    2c:d4:10:ae:2c:93:d9:6e:e3:1c:12:18:42:85:f5:
                    20:5c:be:01:d1:b8:43:ae:2c:3a:8f:91:88:43:06:
                    56:11:c0:36:7f:41:af:73:a0:e8:59:52:27:e9:70:
                    68:45:51:c4:6e:df:80:46:ca:e0:19:3d:fd:65:3f:
                    f8:4a:11:03:62:24:7a:f0:a0:72:88:4f:90:07:30:
                    af:1a:a7:50:20:46:8c:13:07:3f:ec:20:38:ae:0d:
                    30:db:4b:24:76:65:36:85:cc:6a:19:cd:ad:f1:a0:
                    03:49:63:47:92:c8:fd:af:31:e3:ed:5f:c6:d7:5a:
                    23:cf:04:25:fc:81:d8:44:8f:e9:8c:95:22:fd:f4:
                    27:75:ae:c8:c1:7d:ce:4d:02:66:30:fa:36:37:32:
                    70:d2:14:88:67:fc:9a:f6:ee:eb:92:0b:1d:30:18:
                    b5:1a:ed:57:96:f2:61:71:b9:7c:e2:a5:80:a2:1c:
                    9e:28:ad:40:f7:60:fe:30:13:93:15:55:4d:50:f1:
                    40:39:89:95:79:d5:f3:bf:38:eb:30:83:17:e8:e2:
                    33:b4:16:d9:ea:12:e7:35:8a:8a:f8:35:85:a6:26:
                    29:b6:7c:e1:78:99:53:8c:31:d2:de:4f:6d:77:14:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:74:F3:8F:03:DA:E8:C7:F0:6A:71:92:09:2E:5A:C0:A8:CF:B3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:62:d1:45:60:b8:fe:5e:0a:87:cd:b8:b1:35:36:c2:de:
         b2:d5:bf:65:19:c1:2e:00:68:11:c0:9e:48:25:6a:6e:1e:10:
         4f:aa:bd:48:db:aa:3c:04:6d:85:76:8c:60:f5:b7:64:b4:c5:
         84:df:cf:cb:d4:12:ed:ee:ca:1d:71:48:66:a5:29:f6:7c:e3:
         8d:29:ff:37:d7:b0:8c:bf:76:4c:76:7d:ac:7b:18:94:6b:5b:
         fe:58:7a:e3:25:5f:09:da:50:1d:f0:8d:49:12:a9:6c:1b:4f:
         2b:7f:d2:98:d6:48:69:72:a5:a3:1b:56:a7:2b:f8:d2:53:16:
         ee:38:8a:b6:f6:23:d4:99:94:95:1f:1c:eb:4e:f4:7c:f3:e9:
         ba:b4:10:13:fe:a6:58:54:2f:3d:68:14:37:97:d6:19:20:04:
         ba:25:7b:3a:12:c6:18:2c:3f:8f:95:60:16:26:9f:e0:4c:74:
         c4:d5:83:96:fd:f6:4a:e0:c4:e0:4f:13:4b:c1:9b:87:59:7d:
         93:62:c7:cf:30:0a:7b:6b:93:e3:77:9c:dc:35:ab:28:55:de:
         af:d8:53:95:e9:f3:a5:f7:66:8d:cd:60:62:97:8d:ac:e2:80:
         a3:3b:cb:c8:be:c0:5f:d3:c8:25:66:52:89:45:97:cc:f4:5b:
         92:ba:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:14:27 2026 by rpki-client