This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa
File:                     d87637ed-589b-3719-b2cf-7799ebf79109.roa (raw, json)
Hash identifier:          o7nvSb0F+p0+CMs+z2jNXfyHzWcAMRZqa13mtSd+sQA=
Subject key identifier:   09:A5:B6:96:4B:DE:AB:4B:15:BE:C9:AB:32:67:83:72:F3:61:16:89
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584C619152222F1AB65C8C7D4880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     8075
IP address blocks:        149.1.0.0/16 maxlen: 16
                          150.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:52:22:2f:1a:b6:5c:8c:7d:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=c9662f46-8fa5-4c2b-8fc9-e413e001fc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:86:52:89:fa:4b:cc:4c:d7:c5:08:30:eb:
                    15:fe:60:53:7a:72:99:7a:1d:65:45:f2:fc:5b:6b:
                    d0:f2:50:c5:c6:9a:7f:c5:70:ac:0a:ed:20:3d:97:
                    13:3a:69:93:f3:84:d9:dd:18:9d:f3:3c:f5:ab:27:
                    29:2b:e0:c2:41:a4:bf:68:b0:09:0b:31:a8:d4:16:
                    df:45:bb:f7:9a:0a:13:12:4a:97:a6:30:ff:1b:63:
                    5d:74:02:35:90:df:70:8c:27:8b:13:85:67:b2:89:
                    c4:bc:08:e7:c9:e3:11:09:5f:2d:95:bc:bd:9b:a9:
                    ef:b9:ea:75:8d:1b:fa:8e:27:c9:e5:1c:90:61:13:
                    90:df:5e:95:ce:88:ca:4e:5d:da:4d:0d:ee:11:bb:
                    48:73:05:24:f3:6a:ae:c2:5d:9b:cb:63:73:5e:12:
                    6d:78:5c:8d:d4:be:b3:42:9e:5c:27:42:97:1a:9c:
                    52:07:d4:b7:78:7d:a3:2f:6f:9b:2c:73:78:11:b7:
                    7f:3f:94:31:c9:26:dc:44:08:97:5c:16:82:3c:f8:
                    cf:96:4c:13:fd:29:72:b3:51:bf:68:95:f1:6b:ff:
                    1b:f7:8e:e4:41:1b:b2:b1:f8:73:d9:2f:04:16:6a:
                    58:36:32:0a:d2:8c:18:b9:cf:33:6f:7d:18:81:f5:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A5:B6:96:4B:DE:AB:4B:15:BE:C9:AB:32:67:83:72:F3:61:16:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.1.0.0/16
                  150.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:e1:1f:d5:27:99:76:e0:21:a8:4a:ca:9c:99:42:a6:a3:
         97:4f:c7:3f:f7:e2:8a:72:12:88:1d:d1:7d:38:a4:18:bc:5f:
         76:1b:49:04:86:de:78:a4:85:a0:70:4b:fb:93:a6:46:ec:82:
         0a:d0:6e:8b:76:48:63:b0:d6:b2:61:f6:fd:26:bc:71:43:c3:
         3f:b0:9c:28:20:3f:e5:ce:b5:14:4f:82:d0:26:82:df:8e:93:
         52:8f:6d:79:31:ad:cd:a9:b4:3c:fb:83:80:2a:ce:14:a3:db:
         68:26:75:3b:7b:aa:a5:d5:44:6b:09:7f:81:36:a3:be:bf:33:
         5f:2d:61:e5:0a:cd:54:5f:b2:8e:eb:d8:fb:75:ce:a8:78:f3:
         5f:23:ba:2a:59:ae:4b:e8:24:0c:a1:6b:dc:b4:9d:78:65:0b:
         a4:b7:00:11:55:5e:47:22:4b:f1:75:00:5c:9c:e3:61:75:f5:
         38:5b:42:13:25:fa:f6:ca:d3:b1:6a:6b:c6:06:bf:af:4d:a4:
         18:7c:b6:05:57:cf:40:64:4e:8d:24:1f:27:46:1c:df:60:01:
         7d:d5:77:3f:dd:ab:da:df:d5:05:52:62:25:4b:d6:71:9c:6a:
         c7:45:7b:74:6f:fa:3d:5a:f5:9e:39:ff:3a:a0:31:56:fc:5c:
         24:62:29:d9
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWExhkVIiLxq2XIx9SIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk
Yzk2NjJmNDYtOGZhNS00YzJiLThmYzktZTQxM2UwMDFmYzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0mGUon6S8xM18UIMOsV/mBTenKZeh1lRfL8
W2vQ8lDFxpp/xXCsCu0gPZcTOmmT84TZ3Rid8zz1qycpK+DCQaS/aLAJCzGo1Bbf
Rbv3mgoTEkqXpjD/G2NddAI1kN9wjCeLE4VnsonEvAjnyeMRCV8tlby9m6nvuep1
jRv6jifJ5RyQYROQ316VzojKTl3aTQ3uEbtIcwUk82quwl2by2NzXhJteFyN1L6z
Qp5cJ0KXGpxSB9S3eH2jL2+bLHN4Ebd/P5QxySbcRAiXXBaCPPjPlkwT/Slys1G/
aJXxa/8b947kQRuysfhz2S8EFmpYNjIK0owYuc8zb30YgfXvkQIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFAmltpZL3qtLFb7JqzJng3LzYRaJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg3NjM3ZWQtNTg5Yi0z
NzE5LWIyY2YtNzc5OWViZjc5MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAlQEDAwCW
1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQByj+Ef1SeZduAhqErKnJlCpqOXT8c/9+KKchKIHdF9OKQYvF92
G0kEht54pIWgcEv7k6ZG7IIK0G6LdkhjsNayYfb9JrxxQ8M/sJwoID/lzrUUT4LQ
JoLfjpNSj215Ma3NqbQ8+4OAKs4Uo9toJnU7e6ql1URrCX+BNqO+vzNfLWHlCs1U
X7KO69j7dc6oePNfI7oqWa5L6CQMoWvctJ14ZQuktwARVV5HIkvxdQBcnONhdfU4
W0ITJfr2ytOxamvGBr+vTaQYfLYFV89AZE6NJB8nRhzfYAF91Xc/3ava39UFUmIl
S9ZxnGrHRXt0b/o9WvWeOf86oDFW/FwkYinZ
-----END CERTIFICATE-----
Generated at Sun Jan 18 15:35:13 2026 by rpki-client