This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa
File:                     856820c0-94f0-388f-8125-843a0216e0bc.roa (raw, json)
Hash identifier:          +As20dfm6HFXl12YKXKenAVvcRdiN+IIkhJysCJ6JBE=
Subject key identifier:   F3:7E:1C:36:96:6E:76:DE:E0:BB:48:32:47:8F:2D:ED:27:4D:17:F6
Certificate issuer:       /CN=ebf567a0-4cf8-429d-82b3-3d284a246421
Certificate serial:       010D0C9F4328584C76814FB324F5DA7F1F855980
Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     1421
IP address blocks:        199.47.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:4f:b3:24:f5:da:7f:1f:85:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=746e8023-db8b-4a55-8da7-37fd8a375a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:c3:1a:ee:f2:bf:e8:05:08:9f:5d:4e:3c:
                    32:26:b3:1a:85:49:3c:3a:e2:67:17:37:d8:b9:b1:
                    b5:f0:28:88:1b:a5:dc:c5:07:29:1a:7e:ac:0d:bd:
                    49:12:16:be:90:7a:35:7c:f6:da:91:4c:85:5f:c8:
                    a8:3d:d8:10:9d:9c:aa:d1:ed:04:40:37:33:49:ba:
                    dd:38:ff:0f:53:ad:e6:c6:4e:c0:5f:97:cc:68:43:
                    41:48:11:49:0a:2d:62:ca:ea:50:ac:62:94:41:68:
                    46:21:7d:18:52:f2:8c:4c:a5:c5:6c:e8:fb:70:6e:
                    f6:df:73:50:c9:96:78:6e:c9:e7:c8:50:d7:6d:b1:
                    c4:7a:08:c5:28:61:1e:d8:fe:0e:e9:fe:59:08:49:
                    55:66:78:97:17:29:25:45:f4:70:a8:e6:9b:07:e5:
                    bd:05:37:b7:a3:27:4d:d5:44:46:f3:bc:f5:aa:3b:
                    a2:dd:df:16:cc:a1:c1:28:aa:5a:7d:b7:d3:01:35:
                    d3:5f:a6:dc:c7:ac:de:df:66:60:eb:7e:3f:29:c9:
                    cd:4a:91:63:5d:80:02:ca:f8:bb:74:b3:ec:74:0a:
                    52:54:ee:7c:f4:12:b3:d9:35:5b:c6:ce:45:ea:8e:
                    df:8e:91:72:aa:ad:05:f4:0d:80:26:75:0b:2f:41:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:1C:36:96:6E:76:DE:E0:BB:48:32:47:8F:2D:ED:27:4D:17:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl

            X509v3 Authority Key Identifier:
                keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d8:4b:4e:31:90:c1:83:4f:f8:d9:8a:4e:e5:97:38:24:c6:
         64:98:73:cb:3f:6a:0f:42:26:c8:1b:04:34:6a:e1:50:3a:c7:
         4c:c1:cf:3f:cb:d4:99:2c:aa:7d:e1:ec:4b:d1:88:cf:26:e9:
         d9:0f:02:01:34:be:b7:9b:37:ee:6a:2d:ed:09:4e:e8:88:f5:
         ab:4f:ff:8f:fc:31:01:cd:54:b7:2e:63:15:a6:7e:da:82:a3:
         a6:cd:14:d2:83:db:d9:05:63:c6:3a:b4:bd:f8:d6:a3:c9:49:
         b9:36:4b:dd:f1:55:24:90:73:28:f5:2c:27:1d:e3:d9:fe:0e:
         f6:1f:c6:c1:df:39:be:0d:d7:c1:5e:f7:8e:fb:6b:18:e9:f4:
         9c:5b:70:e0:1b:ec:69:8c:e1:4d:77:de:08:df:d9:80:a5:c3:
         aa:b0:02:aa:90:0c:3d:c5:aa:1d:82:64:fe:22:ff:2f:b5:65:
         f4:b9:0a:b8:8c:4c:92:b8:c7:91:fa:a0:6a:2c:22:01:a9:89:
         31:0d:9d:2c:4e:73:4c:c2:3a:99:62:4c:e4:b6:c2:3d:95:23:
         1d:82:97:4f:40:ae:d4:13:e8:05:91:55:b3:bd:a9:79:3e:93:
         f0:38:14:3c:72:60:56:31:85:c5:e9:25:57:9e:95:4b:4c:0a:
         2d:1e:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 03:02:15 2026 by rpki-client