This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa
File:                     ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa (raw, json)
Hash identifier:          oQ0fLlpMNOJ5POBQz5L1s62PWvRBtbOb7JtJ2MuWcj4=
Subject key identifier:   2E:E4:2C:8A:C2:45:F7:F9:5E:DB:88:FA:9C:37:1D:1E:3E:CB:6E:D8
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584C1E90D74E0D4A4EC08FD5EA80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa
Signing time:             Mon 08 Dec 2025 14:00:38 +0000
ROA not before:           Mon 08 Dec 2025 14:00:38 +0000
ROA not after:            Sun 08 Mar 2026 13:00:38 +0000
asID:                     13213
IP address blocks:        173.239.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1e:90:d7:4e:0d:4a:4e:c0:8f:d5:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Dec  8 14:00:38 2025 GMT
            Not After : Mar  8 13:00:38 2026 GMT
        Subject: CN=e84be034-31bb-498f-a686-7e2542328ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:a5:0e:8b:4a:50:7a:cd:46:69:db:97:e6:
                    c1:0d:d3:43:59:27:be:b3:03:57:e1:de:90:c0:2c:
                    d6:1d:7a:a5:4c:7a:07:67:8e:e3:c9:f3:9c:95:c7:
                    e6:8d:9e:c1:ea:d3:98:10:b8:12:d3:9e:bb:2b:d6:
                    07:07:c8:e8:eb:f2:db:93:59:d5:6a:c7:58:51:1f:
                    62:fc:56:ca:cd:59:ca:05:0e:88:2f:3c:51:82:36:
                    8c:e4:c3:1c:e2:72:97:7e:01:de:f2:b7:a3:79:b6:
                    7a:91:71:45:27:71:75:ab:89:7b:c5:e3:9d:17:44:
                    f2:39:34:0a:14:df:31:ac:25:1f:07:dd:dc:c1:c5:
                    6d:6b:d7:e2:33:88:91:c6:b1:06:a8:0b:f6:c0:f2:
                    93:21:ce:2c:0b:b6:aa:a6:6b:93:f8:c4:3a:e2:49:
                    bd:a9:5f:03:ba:44:41:5a:93:f7:ac:7b:73:e8:dc:
                    79:56:b0:60:c7:3d:60:b4:71:ac:dd:09:02:bf:34:
                    d7:9f:f0:d2:1f:9c:d6:53:2f:f1:bd:22:6d:0b:a6:
                    a0:1c:6e:27:4c:d8:4d:b9:50:2f:e6:09:31:8a:64:
                    92:d9:21:4a:f4:e8:9e:76:0e:17:47:aa:fa:3f:65:
                    a6:82:f0:28:7d:94:de:fb:fe:0c:b1:a3:27:98:ee:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E4:2C:8A:C2:45:F7:F9:5E:DB:88:FA:9C:37:1D:1E:3E:CB:6E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce4e3003-9ed0-305f-912e-2bd939a6a24a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:5d:ed:05:f3:eb:95:c9:3e:ba:7a:46:9c:79:e4:7a:a1:
         e0:ff:29:0b:15:a0:b1:3c:10:e9:0e:57:bd:e6:b3:99:15:60:
         5d:c9:00:cd:53:b9:eb:e5:67:21:59:08:08:cd:13:ff:70:fe:
         ba:80:bf:b2:39:4d:84:81:0d:e8:1f:60:0d:a7:17:67:fd:64:
         80:90:bf:ff:18:a3:1c:9a:d9:ab:f5:5b:fc:13:5c:b2:c8:77:
         08:be:29:a8:f3:e2:75:13:98:93:c7:ce:ba:aa:c5:5c:eb:ec:
         16:77:1f:7d:e0:0f:b6:06:f1:4c:b0:93:22:47:73:02:75:e3:
         00:23:a6:74:4d:75:ae:18:ee:fd:49:b8:12:4d:6e:42:07:43:
         7c:22:9d:f9:5c:8f:0e:0b:76:1a:f1:6c:0c:97:d9:8d:b9:8c:
         06:15:0a:08:3a:f6:b9:63:25:21:ae:36:8e:2b:0a:77:fe:0e:
         f8:ee:44:24:a3:a0:2e:7f:3f:91:97:f6:85:7d:cb:80:41:96:
         a3:ae:1d:ef:ca:7e:d4:36:ac:f4:ce:27:3d:b5:a2:75:bc:5b:
         28:0d:9a:49:75:52:9c:7e:69:f1:df:bd:b7:ae:5c:d2:7f:b7:
         9d:a1:56:ba:cc:5d:6a:5a:a8:c1:b7:6c:05:9b:76:46:c7:4b:
         ab:fa:71:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:05:41 2026 by rpki-client