This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa
File:                     b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa (raw, json)
Hash identifier:          kvyHIigAUnoxNCFjxSl4g+zs/hynppqCNPdcDNkfp2c=
Subject key identifier:   3D:6C:1E:A9:E0:80:E3:81:E1:53:EB:37:43:F4:79:00:B8:7B:D8:77
Certificate issuer:       /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial:       010D0C9F4328584C69F14CC86ABF33C93130CC80
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa
Signing time:             Sun 04 Jan 2026 14:00:38 +0000
ROA not before:           Sun 04 Jan 2026 14:00:38 +0000
ROA not after:            Sat 04 Apr 2026 13:00:38 +0000
asID:                     11831
IP address blocks:        23.111.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:69:f1:4c:c8:6a:bf:33:c9:31:30:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
        Validity
            Not Before: Jan  4 14:00:38 2026 GMT
            Not After : Apr  4 13:00:38 2026 GMT
        Subject: CN=bab54a3f-ce92-4b67-8fe8-947f2fc8864f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:b5:a9:02:ee:73:fc:8b:d9:60:96:39:bf:
                    95:83:a1:ab:dc:c9:45:e2:32:29:be:27:4c:bd:fe:
                    ff:a3:d2:fc:5d:4d:28:56:e3:fd:c9:2e:38:9f:6a:
                    03:f4:34:b7:b2:4a:92:c0:1b:ab:ec:20:b9:1f:0a:
                    a0:c3:8a:d7:2e:e4:ea:9a:9f:13:25:95:18:cb:ee:
                    a6:96:2c:6b:c7:9e:b4:e9:21:0c:1d:09:dc:2a:47:
                    f9:4b:75:b3:1c:fc:50:d6:2b:7b:a5:d1:1f:31:cd:
                    b2:e5:b3:ff:40:ba:6b:b8:99:ab:e2:aa:d1:fe:9b:
                    ad:98:59:cb:6f:b7:f2:f3:ed:01:db:47:98:e3:ae:
                    b8:f4:6f:62:89:5b:6a:51:61:0f:f0:a5:ea:55:ca:
                    26:79:b5:08:1c:7e:32:12:45:83:38:6b:24:12:f4:
                    64:23:54:e2:63:91:e5:7c:b9:0a:ed:40:91:41:aa:
                    0a:02:f5:2b:e5:e8:af:7f:5a:10:d6:75:0d:5d:06:
                    cd:04:9f:30:08:1f:c1:6e:6b:dc:53:06:06:fc:b0:
                    32:a0:29:7a:dc:22:f2:8d:93:bd:1d:66:9a:42:ed:
                    84:c4:5b:2c:75:07:01:4b:bd:8b:a8:4d:3c:e1:8a:
                    2f:a4:07:10:cd:23:82:68:df:7f:e3:bf:af:0a:9b:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:1E:A9:E0:80:E3:81:E1:53:EB:37:43:F4:79:00:B8:7B:D8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl

            X509v3 Authority Key Identifier:
                keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.111.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:85:44:19:f5:e8:ed:b0:6c:7d:ff:19:7d:6d:14:e0:a1:
         10:90:86:48:97:bc:f2:72:17:78:16:c1:0b:97:de:cc:d0:31:
         4e:f0:04:6e:88:52:67:07:96:13:2b:4a:e0:00:34:0c:74:1a:
         01:2b:0f:f6:3d:34:0e:2b:98:fb:a9:f4:5b:75:e8:55:0c:85:
         c5:cc:16:e9:95:47:a1:34:a9:1e:32:2e:75:00:88:52:40:e0:
         d7:c8:3f:aa:1c:c1:e9:5d:0a:30:8f:b9:f4:ff:24:49:94:c3:
         5c:f7:c3:f6:3d:56:4d:4b:90:48:af:c3:79:16:6e:ed:56:0b:
         3b:87:29:73:ea:dd:dd:d8:80:ca:ef:d5:96:f3:06:ea:79:af:
         e5:10:db:06:f4:23:c9:14:4b:2b:c1:52:d9:6f:bb:2e:f0:da:
         db:a2:b8:b9:ed:0b:92:1e:af:d7:cd:5c:7b:0e:e3:f4:a7:f7:
         39:a1:82:59:3a:84:b7:2d:a8:a4:6a:38:c4:66:97:ff:81:74:
         6c:b4:22:04:a5:4d:a7:23:27:3a:b4:6d:d3:98:c7:59:35:cb:
         f0:17:59:93:7e:3f:2e:90:5f:ba:ac:32:40:da:2b:98:5f:6f:
         1a:d0:56:2f:45:7d:67:22:4a:58:3b:e3:27:99:28:34:fc:98:
         09:35:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:55:04 2026 by rpki-client