This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa
File:                     d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa (raw, json)
Hash identifier:          IbDk7cjWaKWNhPL/qerynimklP29NYWEo1Gl9+VIbLE=
Subject key identifier:   F9:33:0C:DA:7F:EE:9D:7C:A8:EC:2A:39:89:78:01:C4:AE:40:9B:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584C93D1C347821A30E8B663E110
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     701
IP address blocks:        173.67.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:c3:47:82:1a:30:e8:b6:63:e1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=897be2a1-3b24-4b9f-b22c-58f99816d0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:10:10:cf:e4:ce:a7:e4:78:57:bc:6d:33:
                    6b:e7:a6:a8:72:2d:3d:35:fc:6d:78:8c:3d:67:4d:
                    3a:a6:4e:36:6f:e1:dc:4c:d2:5e:0f:85:ea:55:c9:
                    2b:cc:19:40:6c:0b:f1:63:d4:42:38:34:58:4a:9f:
                    9b:4f:56:c4:bc:a4:8a:d1:6d:8d:3c:2f:3b:bf:86:
                    35:56:1f:fa:0e:0a:e1:28:82:8a:59:0d:80:0a:4d:
                    74:92:38:85:bd:77:ed:10:67:3c:4e:4f:d8:1d:42:
                    ed:37:f0:0f:24:29:5f:bb:d7:e0:c3:64:dc:f4:23:
                    45:9f:a3:4c:5d:05:d3:8d:7f:82:0b:6b:8e:a7:1b:
                    bb:05:86:30:be:71:f2:ef:d5:99:a6:95:12:2f:43:
                    a1:ec:d9:5f:ab:db:92:5f:ba:a2:e7:c8:ed:dc:4b:
                    16:2e:32:30:ca:6a:1e:47:0b:30:82:3c:31:47:d4:
                    ae:15:53:b9:4b:2a:5c:fd:40:ad:5d:0a:0d:cc:24:
                    af:a9:c3:40:91:ad:62:fd:52:3b:c0:e9:49:4d:92:
                    8e:a2:fc:56:c3:52:fe:e2:7f:98:fd:7f:9c:61:60:
                    1a:bd:06:89:8c:62:c8:d0:65:c4:e7:58:8c:3c:f8:
                    6e:94:b6:19:6a:e2:ee:e6:30:8b:b5:54:0a:8e:66:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:33:0C:DA:7F:EE:9D:7C:A8:EC:2A:39:89:78:01:C4:AE:40:9B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.67.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:46:36:68:ea:d2:1f:18:23:3e:ed:8c:aa:06:10:b3:28:1f:
         df:a8:bb:cd:30:60:d4:5f:bb:cc:5d:69:1b:45:28:ca:e9:52:
         38:38:8a:9b:61:f4:c4:fd:3c:6a:70:b7:51:e0:36:7d:92:57:
         2d:af:69:2d:52:fc:5d:be:e2:59:01:a7:de:12:a3:e8:de:1d:
         73:b1:82:5e:0e:6f:10:da:3e:55:4e:99:fe:51:ea:af:d2:52:
         7c:36:29:8d:63:8c:94:cc:95:6a:1a:17:9a:c4:d2:a9:c8:4e:
         93:76:1d:81:a1:ba:29:eb:b1:92:84:ae:85:67:08:f8:90:cd:
         db:b3:63:5d:8d:25:2c:57:39:1e:1b:d7:65:58:8c:35:8b:c2:
         e6:7d:97:48:68:08:ef:43:a2:3e:c9:53:6d:3c:88:e7:e2:ae:
         73:98:f5:eb:a3:b3:40:5f:91:91:40:ac:3b:e3:af:6d:5f:d0:
         6c:82:65:d4:11:93:d5:36:1f:d4:0e:8e:a7:3b:7c:e3:de:3c:
         d7:d2:99:3b:42:14:75:57:85:e4:1b:d2:1f:b0:53:2a:8c:11:
         23:5f:3b:44:7e:cc:a2:e5:da:9d:e6:75:b6:a7:1d:15:ea:da:
         60:c3:42:a6:b0:e7:0c:36:6d:a8:41:5f:f6:09:f9:d1:42:f5:
         53:29:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 13:46:12 2026 by rpki-client