This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa
File:                     b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa (raw, json)
Hash identifier:          rtJ+bfhPz6rbUIph6Wls+PxEIzc2+XaVtBTjxOagR+M=
Subject key identifier:   7A:7A:8C:C7:10:25:6A:03:8F:A0:F2:CB:B7:5F:CA:9C:42:2E:16:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C45A826B18FB0EED5B46D92E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        173.20.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:26:b1:8f:b0:ee:d5:b4:6d:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=c13b3942-d214-47de-9cce-ed9a23f3d028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:a1:43:7f:0a:17:97:fc:8b:cd:34:09:e0:
                    a4:47:35:c2:70:a0:46:b8:9c:8e:2a:83:44:f6:c5:
                    4e:7b:7d:da:69:7b:f9:22:fa:23:10:97:63:cb:6c:
                    7d:a9:00:86:fb:53:d3:7b:f9:ae:08:3d:22:e7:7c:
                    1c:d9:4e:62:6d:6b:41:15:74:a3:02:34:1b:cd:a5:
                    9c:33:61:4b:72:b8:2b:6f:8d:a2:8c:90:f9:1e:f7:
                    91:ec:2d:e0:cb:39:b5:b3:1b:2c:f0:ea:75:76:0a:
                    83:14:02:29:4b:5d:d0:3a:fb:f4:c7:8f:45:32:68:
                    fb:ec:6d:13:11:68:20:42:00:76:f5:94:78:b7:95:
                    e0:17:e8:a9:8a:6f:3c:cd:6b:fe:7f:49:27:86:80:
                    d2:81:62:72:27:37:ca:bc:64:df:3c:da:48:42:59:
                    cf:b8:e8:3d:c0:3d:8c:13:b1:80:7a:6b:eb:c7:5e:
                    ac:ef:03:84:b4:7d:9a:d0:aa:d8:7a:e7:39:29:2c:
                    bb:49:d7:fe:f2:3a:af:8a:bb:b2:25:85:58:24:2a:
                    64:d5:7a:be:ca:b6:1f:52:b1:d8:29:b9:c4:c5:02:
                    05:5c:1b:cc:f7:b1:6a:9e:e3:2e:02:e7:98:18:6c:
                    cc:a5:31:25:bb:c1:6a:f1:8e:68:1e:34:f2:d1:45:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7A:8C:C7:10:25:6A:03:8F:A0:F2:CB:B7:5F:CA:9C:42:2E:16:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:23:8c:14:cb:13:d3:94:76:35:91:25:f8:04:43:54:ee:
         88:29:68:2a:76:68:55:1f:59:42:6a:07:b5:b7:99:34:a1:8b:
         65:4e:55:9e:90:7a:77:54:23:28:59:f7:ba:5a:12:59:61:36:
         da:4b:bd:40:7e:93:3e:38:83:50:95:3a:97:23:86:77:3b:71:
         db:27:54:a3:2b:d2:c7:80:6c:c3:b4:5d:d6:fe:23:98:bd:80:
         f7:c1:96:38:07:7d:be:2b:4f:58:2c:a1:d0:77:64:c3:3d:1d:
         76:b1:28:04:f0:25:1d:d3:09:9f:0e:aa:ee:36:7d:f0:80:ee:
         af:e1:72:ae:65:8c:fd:4f:85:17:a8:b7:d8:21:39:e3:90:b0:
         4f:aa:92:08:95:cb:23:47:f3:88:e9:32:9a:de:91:9f:09:25:
         c8:61:04:f8:60:17:82:72:df:4a:d2:05:08:57:e6:d3:e8:2f:
         4b:85:42:25:d7:4f:3e:b0:86:0c:1c:7e:cf:bf:01:7e:e4:c5:
         ad:d0:5c:24:d1:c3:99:45:10:f1:9c:2a:da:8d:5d:23:1c:1b:
         a2:9c:5c:11:ef:da:fc:09:20:a6:4a:f7:c5:50:d3:1b:24:b0:
         73:18:32:7b:17:5d:81:e4:a6:78:34:43:a9:be:85:cd:03:fb:
         cd:75:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 16:59:01 2026 by rpki-client