This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29a305d-619a-3dc6-a9bb-08480a5840ba.roa
File:                     e29a305d-619a-3dc6-a9bb-08480a5840ba.roa (raw, json)
Hash identifier:          H84FLXQEHnZ/fLVbw8zeH2v4KtUjBMDsQHl3uj5BXlU=
Subject key identifier:   5B:15:8C:F7:C6:20:CA:2B:17:DA:F3:76:F2:11:5E:74:21:A7:23:B2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584C6191D38F69563E4FDBEBC300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29a305d-619a-3dc6-a9bb-08480a5840ba.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     20115
IP address blocks:        68.187.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:d3:8f:69:56:3e:4f:db:eb:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=d852ef04-fb67-4fdc-8b85-9d02de50d964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:21:60:31:7f:e1:83:d9:5a:14:92:44:4e:
                    57:ff:68:4c:9b:47:51:5c:f2:40:65:b5:9a:5e:fb:
                    4a:cb:7a:7d:f9:7d:6d:60:5d:c7:f1:4b:20:62:55:
                    eb:30:c3:08:94:c0:2c:a9:58:3c:65:a9:b2:01:b9:
                    15:21:fe:f8:52:dd:70:3a:48:46:58:ef:8d:78:9d:
                    70:b1:f7:9d:b9:a6:25:66:98:da:b2:91:0b:e3:26:
                    8c:4a:e9:18:60:2e:6d:34:6c:62:7d:b6:34:f7:81:
                    f2:4e:80:7a:42:df:de:38:74:0c:39:82:35:37:3d:
                    43:de:9c:97:ab:67:f2:63:0c:01:e1:c4:65:98:53:
                    44:80:01:9c:1d:93:2f:1c:9e:88:37:5b:0c:50:4b:
                    01:00:d4:32:ba:3c:c0:e7:b4:f2:d7:fa:5e:9e:8d:
                    e4:b2:b1:cd:8d:aa:44:3b:2a:47:4b:f8:97:c4:e7:
                    95:95:2b:04:19:7d:6d:82:fe:73:8c:6b:93:c5:be:
                    6c:6f:6d:07:cb:28:75:3c:1d:69:62:74:01:76:99:
                    86:32:c7:4e:f1:bd:92:cf:4a:24:d3:51:9d:b0:3c:
                    7d:ce:61:c8:54:e9:74:2c:b9:14:32:1d:62:e9:9b:
                    a9:54:6f:97:c8:86:4c:76:cd:bb:1d:3e:fb:1a:8c:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:8C:F7:C6:20:CA:2B:17:DA:F3:76:F2:11:5E:74:21:A7:23:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29a305d-619a-3dc6-a9bb-08480a5840ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:fb:35:b9:bc:da:df:3d:6c:5e:c1:2e:59:f9:91:8c:16:
         8f:1d:bc:0a:18:eb:18:6b:a8:38:ab:a3:74:fa:52:c3:8e:f8:
         35:c3:65:62:11:fe:0d:bd:bd:ee:39:fa:85:22:3a:ef:2c:f2:
         ed:eb:65:72:61:5d:b0:19:e2:b8:70:81:10:b0:90:9f:27:a1:
         be:5b:a0:28:18:36:94:07:77:cf:ed:a2:94:f0:7c:d3:3b:0f:
         c5:a6:36:e2:96:76:17:64:64:75:44:47:38:bd:88:08:d3:42:
         a6:df:cd:7a:31:bb:b7:01:88:92:61:fe:0d:88:df:aa:7d:b3:
         50:2b:09:a4:30:19:91:13:ac:92:96:10:f7:df:2e:17:b8:d7:
         87:26:04:d7:74:0d:06:04:22:1b:5b:a6:e6:87:b6:9e:70:a0:
         6e:8c:b9:f3:50:5f:89:f4:0c:92:e6:41:5e:cf:c3:fd:c3:57:
         78:b1:22:9c:f7:22:24:1b:ba:e7:9c:cf:94:d9:fa:0c:3d:94:
         3c:3c:08:b6:87:01:a6:1c:7d:76:10:eb:87:74:eb:40:b2:3c:
         de:0c:89:27:70:6f:9c:17:f7:28:0e:5e:df:50:c5:c5:89:67:
         e9:ff:19:fb:4e:76:0f:1d:21:9b:9f:85:d1:5d:0c:36:92:1d:
         db:bc:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:31:09 2026 by rpki-client