This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa
File:                     ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa (raw, json)
Hash identifier:          xYfhGg7sF2Y9rUn3iEDv5Qe1dup3ZQlqo5LCv/Objxw=
Subject key identifier:   02:7E:A7:2D:BE:D6:89:EE:E7:45:08:43:72:B9:4E:D9:97:7A:0D:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584C8B719B22C9367BBC3CEF9400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa
Signing time:             Fri 16 Jan 2026 14:00:40 +0000
ROA not before:           Fri 16 Jan 2026 14:00:40 +0000
ROA not after:            Thu 16 Apr 2026 13:00:40 +0000
asID:                     701
IP address blocks:        72.70.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8b:71:9b:22:c9:36:7b:bc:3c:ef:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 16 14:00:40 2026 GMT
            Not After : Apr 16 13:00:40 2026 GMT
        Subject: CN=92389650-30b8-41a1-b4fb-4605287c84fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:b8:68:ec:9b:e6:7c:d7:47:aa:30:b3:34:
                    fe:0e:11:a1:a1:ba:2b:81:9a:3f:ff:21:14:2a:8d:
                    d5:fd:eb:43:51:81:07:74:a3:bd:48:af:f1:b5:8c:
                    29:f5:ee:bd:2e:bd:d5:39:17:c0:ba:ab:19:4b:f9:
                    e7:4a:65:b8:de:9b:ff:51:cb:fd:98:3c:08:62:1f:
                    c7:21:9b:18:6e:1e:43:bb:b8:93:92:b7:f6:ad:c6:
                    dc:0b:64:be:dc:0c:75:d4:93:ae:b2:e0:ba:a8:50:
                    47:4b:84:51:47:fd:64:37:74:5e:3a:7f:d4:b9:ae:
                    46:7a:7b:9f:a4:ee:93:9d:64:3f:de:53:96:1b:8e:
                    41:7d:ad:c9:f3:24:4f:89:9b:5d:6f:1d:56:9c:9b:
                    b5:8a:07:d6:27:e1:08:a4:b5:72:aa:dc:1f:bf:2b:
                    15:64:83:e2:33:06:aa:d9:94:c4:40:07:5c:35:89:
                    32:b4:c5:b0:78:a9:77:8f:9a:30:60:b5:77:f0:e0:
                    27:f0:0b:a3:51:17:91:94:25:1d:45:5c:3b:a5:7d:
                    4e:cf:0f:a1:e0:30:bb:05:7b:8b:a0:87:05:19:cc:
                    70:32:13:ae:5b:36:d9:be:9a:68:e4:f1:b4:77:8c:
                    26:12:9b:c8:68:ce:57:8d:d5:88:6d:c2:36:c4:c4:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7E:A7:2D:BE:D6:89:EE:E7:45:08:43:72:B9:4E:D9:97:7A:0D:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.70.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:1f:56:48:72:35:42:16:bc:46:f5:39:57:9d:ea:bc:d6:
         cd:25:5d:96:97:2d:56:40:f3:94:aa:5c:0b:e3:9e:fd:e9:47:
         ec:90:59:f3:ee:38:4f:16:3c:c7:ed:86:39:16:98:f5:eb:23:
         63:cf:cb:4d:6d:5e:78:e3:fa:8b:6f:38:95:cf:63:9d:2c:c8:
         cf:0b:a8:81:40:06:82:30:f6:60:45:c0:a2:87:d1:9b:6c:59:
         a4:0b:5e:0c:04:01:f8:45:45:3e:12:2b:2d:73:ca:f1:84:37:
         ab:22:d8:ae:23:37:6c:01:3e:aa:a2:85:1b:40:b0:7e:81:27:
         2b:8d:da:27:32:5f:19:dc:49:e0:4b:d6:76:c4:8e:4a:10:80:
         95:53:81:ae:85:15:19:8b:c6:bf:a0:75:ff:8c:ce:56:13:71:
         67:49:9e:bd:09:93:29:c5:7e:26:61:b3:d1:5f:83:1f:9a:a7:
         c6:84:66:30:b8:75:c5:c8:64:4d:d9:1b:12:9e:b6:6c:7c:41:
         b1:50:30:fb:71:46:1b:7d:4d:d2:35:31:db:fe:77:65:aa:4d:
         e9:b1:59:e2:a8:d0:bb:8e:e5:43:8c:5a:5e:4a:36:18:28:c0:
         2b:fb:07:47:1e:02:6f:84:14:a4:e7:7d:be:c0:cd:67:dc:d0:
         36:89:7e:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcZsiyTZ7vDzvlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk
OTIzODk2NTAtMzBiOC00MWExLWI0ZmItNDYwNTI4N2M4NGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoe4aOyb5nzXR6owszT+DhGhoborgZo//yEU
Ko3V/etDUYEHdKO9SK/xtYwp9e69Lr3VORfAuqsZS/nnSmW43pv/Ucv9mDwIYh/H
IZsYbh5Du7iTkrf2rcbcC2S+3Ax11JOusuC6qFBHS4RRR/1kN3ReOn/Uua5Genuf
pO6TnWQ/3lOWG45Bfa3J8yRPiZtdbx1WnJu1igfWJ+EIpLVyqtwfvysVZIPiMwaq
2ZTEQAdcNYkytMWweKl3j5owYLV38OAn8AujUReRlCUdRVw7pX1Ozw+h4DC7BXuL
oIcFGcxwMhOuWzbZvppo5PG0d4wmEpvIaM5XjdWIbcI2xMSZEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJ+py2+1onu50UIQ3K5TtmXeg2yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2EyYWU5NWMtYTc3ZC0z
Mjk0LTk1MmEtMGEzYTEwMjNkMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH31H1ZIcjVCFrxG9TlXneq81s0lXZaXLVZA85SqXAvjnv3pR+yQWfPu
OE8WPMfthjkWmPXrI2PPy01tXnjj+otvOJXPY50syM8LqIFABoIw9mBFwKKH0Zts
WaQLXgwEAfhFRT4SKy1zyvGEN6si2K4jN2wBPqqihRtAsH6BJyuN2icyXxncSeBL
1nbEjkoQgJVTga6FFRmLxr+gdf+MzlYTcWdJnr0JkynFfiZhs9Ffgx+ap8aEZjC4
dcXIZE3ZGxKetmx8QbFQMPtxRht9TdI1Mdv+d2WqTemxWeKo0LuO5UOMWl5KNhgo
wCv7B0ceAm+EFKTnfb7AzWfc0DaJfk4=
-----END CERTIFICATE-----
Generated at Thu Jan 22 13:47:47 2026 by rpki-client