This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa
File:                     34bcf9a3-a232-3124-a010-fbd2231925d1.roa (raw, json)
Hash identifier:          87g7PPd1WioG/WEODhtepZi73JURKXFiEMDUCT8em7Y=
Subject key identifier:   62:38:A3:90:E8:A4:D1:C9:EF:86:00:8D:12:B4:7D:83:DB:A7:73:84
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584C487194C153871483CEC54D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa
Signing time:             Tue 23 Dec 2025 14:00:39 +0000
ROA not before:           Tue 23 Dec 2025 14:00:39 +0000
ROA not after:            Mon 23 Mar 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        70.32.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:48:71:94:c1:53:87:14:83:ce:c5:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Dec 23 14:00:39 2025 GMT
            Not After : Mar 23 13:00:39 2026 GMT
        Subject: CN=00b9340c-d4ea-4911-88de-3a6b4bd2ae03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:1d:ad:d1:bb:da:fd:42:08:50:8e:60:16:
                    6a:be:d4:52:87:97:66:de:d4:9b:be:c1:c7:10:2c:
                    4c:16:86:9a:bd:c9:9f:31:92:d1:75:3b:e3:50:e1:
                    ee:30:1e:29:10:53:66:da:fd:09:f1:90:48:a4:a5:
                    46:bc:50:ba:21:09:38:6e:3a:b6:61:9c:f3:87:48:
                    9c:ea:1d:57:d5:77:6e:60:99:14:09:56:39:e7:d7:
                    e3:d6:52:e5:78:4f:ee:fb:f9:d7:14:c1:ab:f0:76:
                    c6:ad:b8:29:df:ab:a5:93:a7:c1:f4:28:06:fd:e1:
                    3c:47:44:e5:26:4d:39:ed:8e:25:97:5e:82:9f:eb:
                    ef:b0:cc:a8:71:0c:e7:ae:6f:be:d9:4f:57:3a:9e:
                    f7:13:03:88:7b:41:32:54:bc:f0:5a:27:e1:9e:88:
                    aa:38:4b:ab:28:11:96:68:98:a6:c2:a2:bf:53:b0:
                    1a:c8:e0:1c:ba:0c:ca:5c:aa:ae:2c:d9:0b:e6:0d:
                    ac:8c:a1:42:bd:a3:c5:3e:69:b7:08:6a:54:6d:ac:
                    77:3d:63:ff:84:b7:45:dd:3d:4f:77:3d:c8:52:bb:
                    f5:e6:2e:88:67:37:33:74:51:d6:b4:fa:ed:81:03:
                    d3:e1:9c:15:35:35:75:81:bf:0b:c7:37:07:95:a7:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:38:A3:90:E8:A4:D1:C9:EF:86:00:8D:12:B4:7D:83:DB:A7:73:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:64:1b:3e:e5:88:95:49:95:ad:15:30:a8:e7:c9:dc:89:ac:
         eb:33:35:36:4f:c9:cc:f0:9a:b1:59:c6:2f:5b:90:c0:32:ed:
         5e:70:4d:03:c0:50:97:a0:cb:98:f7:80:d1:73:a5:e4:02:9b:
         5e:cd:ce:a2:3b:99:e1:fb:9f:ea:b8:65:19:ca:ad:ee:1e:e1:
         2d:fc:9d:42:35:ae:a3:cb:a7:07:bb:ed:3c:36:bf:c9:2c:52:
         17:11:76:e9:7e:31:86:38:bc:12:3e:26:e5:bf:01:43:c7:e3:
         8c:f3:d3:a7:b7:dd:6f:e5:ab:7c:f1:c0:43:85:da:d9:99:72:
         e8:9b:51:0a:3c:bb:13:18:14:95:c3:49:15:01:89:be:b3:54:
         8a:a3:96:d3:85:62:fa:6b:66:20:71:0f:0f:43:7b:50:77:e1:
         16:ed:a4:cd:36:a7:ed:5e:9d:ff:64:58:a2:8f:cc:d7:ff:2d:
         e7:33:c2:af:09:19:4f:74:8f:d9:5f:13:58:46:7c:f2:31:ca:
         65:0b:dc:17:13:3a:4a:45:29:da:12:34:cb:dc:2d:02:73:90:
         db:0b:64:c7:e1:82:dc:57:e1:78:bd:89:0c:61:8a:13:72:53:
         9f:d1:2a:43:9f:fd:d8:39:94:04:eb:8c:c1:be:90:74:25:84:
         38:b8:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:53:15 2026 by rpki-client