This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa
File:                     ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa (raw, json)
Hash identifier:          JhaVE021IYBPdCqG7S2tAzBSsvdzZwGmCr0YI2UtlqQ=
Subject key identifier:   D3:C0:EA:44:E6:98:7B:06:C6:7A:C6:0E:8D:9E:1C:57:1C:08:EA:5C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C470BC175CF8AD9219B625D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa
Signing time:             Tue 23 Dec 2025 02:00:31 +0000
ROA not before:           Tue 23 Dec 2025 02:00:31 +0000
ROA not after:            Mon 23 Mar 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        173.16.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:0b:c1:75:cf:8a:d9:21:9b:62:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec 23 02:00:31 2025 GMT
            Not After : Mar 23 01:00:31 2026 GMT
        Subject: CN=dd4b69c3-f016-4ce9-a3f9-fa4c4c312b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:f8:97:e7:ee:6c:26:5a:a9:6f:7e:ec:be:
                    27:a6:20:88:62:59:05:89:a1:71:26:91:e9:03:46:
                    62:97:3d:ed:1b:26:31:8a:7d:d2:6e:10:33:a0:0d:
                    42:f1:9b:16:c0:5d:36:be:83:a6:32:4b:e6:cc:43:
                    18:07:d2:57:ea:e0:12:68:38:0e:1b:79:17:22:18:
                    14:08:72:fb:9f:9e:c7:7f:f8:49:cc:a8:64:96:40:
                    4a:e4:f1:36:ad:e7:f1:7e:aa:43:ab:46:b1:36:54:
                    c4:2f:c6:87:9f:8f:da:a5:c9:74:87:88:e8:f4:9a:
                    d0:75:34:70:e4:97:f6:8d:f0:cc:7a:73:88:63:8d:
                    6a:d0:83:a4:7d:47:f8:39:57:9c:83:ff:f8:34:07:
                    3f:3f:45:04:04:fa:84:de:06:00:5d:35:5d:34:7f:
                    1f:25:09:2d:75:b8:51:84:9a:af:11:51:ce:b3:36:
                    92:a3:95:22:2c:c5:5f:dd:52:2e:4c:f0:30:40:0d:
                    41:59:b7:3a:4f:7c:83:b8:3b:37:ae:ab:6f:65:f6:
                    11:52:53:ee:81:dd:bc:5f:1f:df:10:39:ad:e3:05:
                    dc:9a:9d:be:9c:f3:4a:72:29:d6:fe:a4:05:9c:42:
                    af:a5:61:4c:73:f7:c2:9b:e2:d0:48:4c:2c:22:51:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C0:EA:44:E6:98:7B:06:C6:7A:C6:0E:8D:9E:1C:57:1C:08:EA:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:27:c4:a0:f3:27:0c:ba:1a:ed:be:36:4d:19:59:76:c3:
         d2:4d:e6:49:a1:61:c6:90:f2:e7:00:cd:e1:36:22:80:ce:d4:
         50:dc:34:73:74:d6:f9:13:0f:ba:0e:81:37:eb:74:c9:60:57:
         4c:0e:36:3c:1e:b9:5f:70:11:6b:80:66:3b:d7:d6:43:2d:25:
         7d:f5:c6:ca:b6:b4:10:b4:12:ee:e7:e5:94:83:35:72:66:05:
         5f:cf:e3:04:0b:31:01:0e:f2:c7:5b:6e:11:1b:f4:d5:6a:62:
         84:bc:a0:ce:7b:bf:1b:93:f1:d2:fb:55:8d:76:14:32:38:e5:
         23:b9:fa:66:c8:10:6e:85:6d:64:29:d1:de:bb:14:1d:e6:ed:
         1d:5d:f9:1b:de:39:15:ee:bd:b5:22:5a:eb:62:1a:e5:20:4d:
         af:bd:61:58:b7:fd:95:48:fd:08:b8:e8:cb:13:04:45:13:25:
         5b:43:9f:7c:9c:52:17:57:7d:72:0f:51:d5:e3:71:28:42:58:
         48:3a:1b:b9:43:10:b0:d3:fc:f3:c6:12:3e:c2:de:3a:b7:7e:
         33:46:41:09:02:82:bd:6b:d4:ea:4c:68:61:24:5e:25:d3:74:
         09:0d:55:9e:d3:e7:77:ae:c8:1a:5a:20:33:2b:03:6d:c7:c0:
         63:a1:69:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:45:27 2026 by rpki-client