This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb20e7c3-ccda-361a-9233-ad406eb6dd7d.roa
File:                     bb20e7c3-ccda-361a-9233-ad406eb6dd7d.roa (raw, json)
Hash identifier:          gEErMl9pBJ5asHizbf7kdFJ4sZjsk3gvcSjx4/8Hefg=
Subject key identifier:   81:65:BB:D3:D0:84:78:08:5C:A9:16:DC:5E:98:9E:62:91:58:18:79
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CB129660021B5E5D63BDAF120
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb20e7c3-ccda-361a-9233-ad406eb6dd7d.roa
Signing time:             Fri 30 Jan 2026 02:16:08 +0000
ROA not before:           Fri 30 Jan 2026 02:16:08 +0000
ROA not after:            Thu 30 Apr 2026 01:16:08 +0000
asID:                     31898
IP address blocks:        149.118.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:29:66:00:21:b5:e5:d6:3b:da:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 30 02:16:08 2026 GMT
            Not After : Apr 30 01:16:08 2026 GMT
        Subject: CN=0e3e924d-4fcc-4356-9bcd-46af7b25adb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:31:c9:84:7d:25:52:1c:d0:3d:e6:79:34:
                    63:39:aa:09:b4:a1:5a:ba:91:d5:75:06:b6:5f:63:
                    c4:bd:ac:03:50:a4:18:d1:ed:f5:37:79:80:9b:53:
                    83:28:76:f6:44:5c:77:93:a6:ff:2c:8f:c8:e3:eb:
                    69:0d:89:a6:0d:d0:8c:fc:36:90:6b:92:f7:22:42:
                    80:b7:29:7d:de:48:a9:0c:ac:d7:b1:11:1b:d3:d2:
                    ba:24:bd:f0:78:30:4e:c4:a9:9e:ec:76:47:9b:e7:
                    f9:a3:da:28:57:b1:3c:d7:19:94:50:15:17:6b:2b:
                    51:d2:d4:ba:0e:38:a6:20:42:48:3e:0a:f3:63:cf:
                    96:53:e2:bc:03:9e:b6:be:8c:84:61:bc:06:58:91:
                    65:5d:ef:2c:74:61:36:51:f7:24:ea:37:1f:a8:33:
                    79:20:35:55:05:80:28:8e:18:63:85:57:dd:1d:cc:
                    25:f5:55:2c:03:75:1f:47:7d:88:2c:1c:c5:c8:21:
                    56:20:1a:81:de:81:6c:ac:dc:c3:6d:2f:27:f5:4c:
                    25:87:a9:85:74:8a:4e:12:a9:d7:a7:f7:4e:47:0d:
                    2f:db:53:84:f3:ce:6d:62:1d:c3:ba:61:8e:0e:1c:
                    cf:e2:e5:08:88:96:72:fd:58:80:3d:8b:62:c3:11:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:65:BB:D3:D0:84:78:08:5C:A9:16:DC:5E:98:9E:62:91:58:18:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb20e7c3-ccda-361a-9233-ad406eb6dd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.118.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:43:e9:28:bb:bc:2e:3c:8a:50:ba:fe:b4:62:ec:c9:ff:e9:
         1b:b3:1e:ba:48:ef:c1:cc:24:9f:21:72:0e:12:79:76:22:de:
         19:1e:c3:05:5c:bf:6c:bf:e1:be:03:5b:33:18:4a:5f:32:9f:
         45:62:d9:5a:4c:3c:84:06:e2:b3:14:ab:d6:01:ba:47:73:e8:
         5d:4f:42:76:e6:79:57:6b:f7:5a:2c:02:c0:63:04:ed:b1:6e:
         9c:2e:43:17:8a:a7:e8:b7:96:ce:f5:9f:51:16:b2:3c:34:ee:
         6b:b2:53:c6:66:72:f4:20:40:f1:a4:e6:d4:7d:18:f7:e5:c5:
         fc:f7:95:b7:fe:73:fe:38:6f:83:85:0e:cb:bf:7c:cc:e6:5e:
         cc:12:5e:81:01:2a:0b:a1:db:d6:70:7a:c0:8a:aa:d7:01:f2:
         6f:b9:8d:93:35:7c:ff:07:e6:fa:3f:35:30:79:78:a8:71:48:
         ae:42:7f:84:52:92:7a:02:1c:6e:f0:8b:78:b4:13:49:d7:43:
         37:79:95:7e:f9:c4:89:7d:f6:8e:31:c6:8d:37:c1:70:2d:00:
         e7:8e:42:c1:d6:58:d8:66:50:5d:c5:ac:f1:08:66:1d:1b:e6:
         63:35:8c:d8:d1:c3:43:31:f2:2d:28:74:78:43:c2:19:26:8d:
         42:58:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:08 2026 by rpki-client