This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa
File:                     f23579f7-40df-33a8-a759-5728208dc52a.roa (raw, json)
Hash identifier:          OBHt4l0B2dwSiUeVTNObCC0yv8ZSKHleD5GUpn4UmiA=
Subject key identifier:   FE:27:54:85:0F:6B:BF:02:5C:86:1C:64:54:75:50:3B:A8:F5:4C:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C8B719E87C7DCCB28C5523300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa
Signing time:             Fri 16 Jan 2026 14:00:40 +0000
ROA not before:           Fri 16 Jan 2026 14:00:40 +0000
ROA not after:            Thu 16 Apr 2026 13:00:40 +0000
asID:                     35994
IP address blocks:        72.246.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8b:71:9e:87:c7:dc:cb:28:c5:52:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 16 14:00:40 2026 GMT
            Not After : Apr 16 13:00:40 2026 GMT
        Subject: CN=4222f6f9-e083-47af-8fb3-cd709ac3bfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:b9:9c:39:87:a8:73:3b:ac:39:28:87:24:
                    fa:42:61:79:e0:cc:89:e9:a9:87:f3:b9:7d:d7:e2:
                    df:1a:6c:db:e7:6a:45:13:a1:2d:88:4f:61:2e:87:
                    e1:a6:99:cf:54:ae:a6:28:6d:2a:43:96:44:b1:7e:
                    fc:00:47:d8:0d:82:ea:25:2b:4f:41:1d:59:f7:ed:
                    c5:4e:51:00:1c:7a:6d:3b:a1:30:a1:5e:65:8a:01:
                    de:a1:85:f3:8b:19:25:d1:1a:18:ec:57:07:ac:26:
                    28:78:62:b8:79:bc:91:0d:4f:93:1d:32:0a:e2:85:
                    a2:a0:a8:5b:e1:c6:9a:4e:71:f3:62:90:b6:4f:df:
                    2e:b9:bd:2c:d2:52:d8:17:ce:df:04:62:d1:21:e7:
                    46:0b:87:e8:d7:cb:40:c8:e5:f4:78:bc:b5:80:45:
                    0d:9f:df:bd:88:e0:e6:f2:d8:66:e2:c8:26:50:48:
                    17:6b:c5:87:2f:f2:d5:36:05:fb:5a:3a:2a:87:97:
                    b9:c6:6b:90:c8:18:e3:6f:3b:fe:86:bb:ce:d2:27:
                    8c:0c:6d:77:ea:4f:77:ee:ba:80:59:70:e8:62:80:
                    af:da:7e:ef:db:86:93:7d:85:8a:2c:d9:27:c7:60:
                    0a:41:09:57:c2:16:1c:32:6c:51:79:62:05:58:e9:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:27:54:85:0F:6B:BF:02:5C:86:1C:64:54:75:50:3B:A8:F5:4C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:33:d9:4f:32:b8:87:56:cf:77:84:21:97:39:2e:34:80:b3:
         38:cb:ed:12:3f:5d:67:17:a5:35:2d:fd:5c:e1:25:4a:5d:7e:
         d5:96:f5:44:37:05:44:b2:e6:dd:4e:75:f0:12:71:9a:ea:30:
         d8:c9:20:a7:6d:47:e0:21:06:9c:cb:40:f3:c2:a2:ef:41:34:
         17:44:1c:87:e2:46:8c:30:2d:f6:7b:ea:90:29:ce:2f:89:fb:
         ca:6e:22:f3:2e:53:7f:69:ef:0a:07:d2:95:38:a5:26:c9:ab:
         94:d9:b0:d8:fe:d1:28:5e:e4:c9:cf:39:11:43:bd:5d:86:07:
         91:36:f5:df:c7:bc:1b:85:81:d2:19:05:b9:8a:3f:50:a9:a9:
         eb:b0:8b:c0:11:fa:b8:a4:9c:f3:e3:b7:03:c9:ef:84:fe:71:
         eb:fc:2f:84:f6:e1:e9:8f:7a:c6:5f:8a:37:b2:1b:e2:72:85:
         32:d9:03:60:d0:b4:4b:71:72:41:1d:e0:89:b9:42:f4:73:9e:
         76:1f:2f:c9:fe:57:c1:e6:40:dd:36:31:3b:74:99:e8:fb:d4:
         fe:77:06:50:84:11:86:c0:3b:24:83:75:a8:73:14:a9:62:e5:
         b6:38:9d:d2:36:9c:1d:ce:04:31:d8:d7:33:5a:d0:cf:38:5f:
         2c:25:19:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcZ6Hx9zLKMVSMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk
NDIyMmY2ZjktZTA4My00N2FmLThmYjMtY2Q3MDlhYzNiZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog25nDmHqHM7rDkohyT6QmF54MyJ6amH87l9
1+LfGmzb52pFE6EtiE9hLofhppnPVK6mKG0qQ5ZEsX78AEfYDYLqJStPQR1Z9+3F
TlEAHHptO6EwoV5ligHeoYXzixkl0RoY7FcHrCYoeGK4ebyRDU+THTIK4oWioKhb
4caaTnHzYpC2T98uub0s0lLYF87fBGLRIedGC4fo18tAyOX0eLy1gEUNn9+9iODm
8thm4sgmUEgXa8WHL/LVNgX7Wjoqh5e5xmuQyBjjbzv+hrvO0ieMDG136k937rqA
WXDoYoCv2n7v24aTfYWKLNknx2AKQQlXwhYcMmxReWIFWOm+dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4nVIUPa78CXIYcZFR1UDuo9UwwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIzNTc5ZjctNDBkZi0z
M2E4LWE3NTktNTcyODIwOGRjNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPYRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYz2U8yuIdWz3eEIZc5LjSAszjL7RI/XWcXpTUt/VzhJUpdftWW9UQ3
BUSy5t1OdfAScZrqMNjJIKdtR+AhBpzLQPPCou9BNBdEHIfiRowwLfZ76pApzi+J
+8puIvMuU39p7woH0pU4pSbJq5TZsNj+0She5MnPORFDvV2GB5E29d/HvBuFgdIZ
BbmKP1Cpqeuwi8AR+riknPPjtwPJ74T+cev8L4T24emPesZfijeyG+JyhTLZA2DQ
tEtxckEd4Im5QvRznnYfL8n+V8HmQN02MTt0mej71P53BlCEEYbAOySDdahzFKli
5bY4ndI2nB3OBDHY1zNa0M84XywlGS4=
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:27:03 2026 by rpki-client