This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa
File:                     aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa (raw, json)
Hash identifier:          XDls5GvpSgx7/ZJTq5inq5NvDM4hJhktjD9hqrxxHkQ=
Subject key identifier:   7A:94:30:18:D6:DE:22:2B:4D:C3:00:A0:37:EE:43:E7:45:3D:3A:DA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BC96AE0F76D457A84EB005780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa
Signing time:             Sat 08 Nov 2025 02:00:30 +0000
ROA not before:           Sat 08 Nov 2025 02:00:30 +0000
ROA not after:            Fri 06 Feb 2026 02:00:30 +0000
asID:                     30036
IP address blocks:        173.16.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c9:6a:e0:f7:6d:45:7a:84:eb:00:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Nov  8 02:00:30 2025 GMT
            Not After : Feb  6 02:00:30 2026 GMT
        Subject: CN=455cb098-7fb5-4948-be9a-4e5d82b0b78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:0d:8f:3d:bc:7a:7f:56:37:61:13:49:71:
                    05:a6:67:38:be:da:d1:83:bd:66:8b:49:2f:9d:3a:
                    88:77:b9:6c:54:7f:24:c2:a7:86:81:c6:a8:e9:b6:
                    f0:bc:8f:86:5b:84:e1:96:f8:3a:81:e3:7d:6e:e8:
                    e9:f1:5e:66:f8:92:ca:69:ad:fb:9e:2d:0d:6f:b7:
                    8c:d0:24:eb:e9:d5:d9:bd:01:ce:4e:65:4e:fb:e5:
                    77:cf:df:b7:3b:5b:52:8c:0d:15:d6:ad:c9:55:7e:
                    22:7d:f1:69:15:b4:2d:3c:db:ed:84:9d:97:76:56:
                    22:8c:f7:b1:d8:c3:38:c7:29:ed:ad:15:2e:ba:9d:
                    11:c7:fe:3c:d8:22:a2:83:36:20:47:d1:c1:9a:14:
                    67:9d:0b:71:b5:fb:93:14:9e:89:b3:f5:18:22:7b:
                    50:76:3d:aa:93:e0:53:17:df:d3:80:51:fb:f1:21:
                    14:3f:40:98:54:36:25:39:6d:49:6a:02:1f:f3:7a:
                    9b:bd:38:70:88:38:f7:f9:47:af:05:e1:a0:c8:6d:
                    2a:09:41:e3:7e:d2:ad:83:55:0f:ef:19:63:07:02:
                    02:ff:81:fa:dd:44:7e:1b:71:d4:ee:d3:c3:d8:4a:
                    aa:bf:84:ea:e9:38:27:4c:d9:80:6d:d9:62:98:65:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:94:30:18:D6:DE:22:2B:4D:C3:00:A0:37:EE:43:E7:45:3D:3A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:42:32:22:09:a4:85:64:c9:dd:bf:ef:36:d5:f1:a6:12:4e:
         8a:e6:2d:fa:9b:8c:b2:29:f4:f6:d3:2a:17:4e:f8:a6:d2:4e:
         58:d8:a6:23:50:95:97:af:ed:ff:e8:ff:6b:65:df:65:53:61:
         26:57:03:2f:1c:5f:cc:35:75:53:1a:87:2b:e8:0e:f4:27:e9:
         d2:62:ac:80:17:7b:82:b5:76:f6:9c:02:0e:5e:20:35:07:7e:
         86:06:44:7b:d1:c4:07:d6:c2:6c:05:a7:54:b9:0f:13:ef:02:
         18:a8:45:7a:1d:a0:b0:50:f5:b4:61:30:e6:2e:9c:28:49:6e:
         42:4a:dd:eb:1f:3d:8b:9b:b6:ab:26:50:0d:64:14:e7:26:a6:
         ac:01:0e:3c:5c:09:3e:b2:a9:8f:35:e2:bd:8c:d1:4a:59:52:
         d2:e3:3a:50:5b:ae:64:a1:71:e0:3c:d7:f6:ea:18:d3:7e:8c:
         a9:c3:bf:a4:aa:67:e2:12:c1:41:63:c4:eb:dd:db:87:2c:7e:
         d6:62:d7:c0:e1:20:43:a9:55:e6:18:c4:e3:2c:44:e2:35:65:
         81:a6:fc:f2:0a:2f:19:3f:76:73:c5:ac:7a:ee:97:a8:82:d0:
         f5:6b:d4:55:20:ca:19:10:3d:29:04:6b:2e:85:9f:72:50:93:
         2a:c5:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:30:49 2025 by rpki-client