This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
File:                     0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa (raw, json)
Hash identifier:          T8P0BlanxlOMeptUb4BogoCCzKpPDvrA9PGFFrSHjWs=
Subject key identifier:   69:31:E4:84:A3:22:3D:69:B3:BA:E3:CD:C0:A8:78:59:61:CC:5E:A2
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584C29BBA60548D49DC173679800
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
Signing time:             Fri 12 Dec 2025 14:00:38 +0000
ROA not before:           Fri 12 Dec 2025 14:00:38 +0000
ROA not after:            Thu 12 Mar 2026 13:00:38 +0000
asID:                     26356
IP address blocks:        91.106.220.0/22 maxlen: 24
                          204.52.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:29:bb:a6:05:48:d4:9d:c1:73:67:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Dec 12 14:00:38 2025 GMT
            Not After : Mar 12 13:00:38 2026 GMT
        Subject: CN=fd4380c8-160d-4932-9109-dde0cc9dd567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4a:e5:e3:43:ca:4f:c3:60:52:d2:14:d3:1d:
                    38:ec:43:b5:1b:45:c3:0f:d3:48:0b:11:a3:4f:a1:
                    b8:a2:32:32:c6:cd:4a:42:2f:4f:cb:7f:13:84:35:
                    57:1a:eb:bf:3e:a1:e9:9d:f0:4d:68:6b:2d:89:0f:
                    05:0f:c0:85:85:de:1d:87:79:28:1a:f1:af:08:58:
                    cf:81:e8:15:a2:68:45:fa:fb:69:40:16:ff:c9:51:
                    c1:fd:62:35:2a:ea:3a:cc:5d:1c:ee:d5:bf:07:9f:
                    68:e3:6c:4a:87:0f:6f:01:fd:0c:e6:e6:ac:c9:c1:
                    e3:2c:df:5a:11:a2:23:1f:28:7b:68:d6:e8:8f:14:
                    e3:3c:9f:1c:7b:1d:00:44:ba:c8:8f:90:34:6d:79:
                    1c:0d:2a:e8:5e:3a:50:62:28:6b:9d:eb:61:72:bc:
                    0c:7b:98:74:cf:70:b1:43:a2:2a:64:27:9b:3c:f6:
                    16:e2:10:49:6f:0e:c1:93:42:23:42:b0:eb:47:d4:
                    d2:fe:37:d5:52:66:35:3f:85:67:3b:bb:a4:75:49:
                    8f:0f:86:61:0b:a9:a5:ac:89:2d:7a:77:7f:09:1a:
                    06:dc:75:64:1d:77:81:3c:3b:17:20:9a:55:fe:04:
                    33:1b:55:7e:32:fa:be:a8:13:b5:e2:d7:48:05:a6:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:31:E4:84:A3:22:3D:69:B3:BA:E3:CD:C0:A8:78:59:61:CC:5E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.106.220.0/22
                  204.52.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:3a:9d:db:67:31:32:3c:df:7c:ec:3c:82:12:12:a8:67:
         b7:10:d1:ca:3b:af:7e:59:67:fa:03:9c:d0:29:1d:01:20:69:
         33:52:31:29:d3:13:b2:a1:cf:cc:6b:bf:7d:55:ca:7d:d5:2d:
         a0:1e:88:bc:02:d0:87:04:31:61:7b:56:4d:6a:07:bd:e4:a6:
         54:38:49:ac:74:0d:34:16:0a:5a:67:17:6a:a2:1c:d2:40:d0:
         72:d1:fd:69:d2:0d:29:d9:76:03:dd:44:17:3e:74:88:f8:90:
         73:66:5e:33:0c:cd:11:f8:51:09:7f:70:98:8a:3d:6b:8c:43:
         bb:56:36:f8:30:8f:ac:41:ad:16:38:8d:25:b6:0c:b9:8b:91:
         0b:3a:55:0c:a1:19:1f:eb:0c:3e:45:0e:8b:8c:f2:f1:44:3d:
         49:3a:cf:3a:71:74:76:72:a8:83:c0:91:4a:34:0b:13:c2:36:
         3a:b4:49:0d:ed:35:ba:00:8c:57:b4:c5:db:a0:70:3d:db:3b:
         0b:e0:e0:17:b2:cc:0b:67:91:d1:02:bd:76:96:16:21:b7:25:
         ff:e1:d7:6d:a1:55:41:33:e9:9c:24:fe:80:7c:e5:e2:51:c7:
         f4:88:d4:89:d2:24:4d:1f:87:29:be:43:73:f2:1e:e2:da:c0:
         4f:38:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:27:59 2025 by rpki-client