This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa
File:                     f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa (raw, json)
Hash identifier:          4rlYUzjI+6sqm8OjuV8bxMvC4Ke9TTNq0AgtuUaxvzs=
Subject key identifier:   E9:3D:41:CE:33:3A:A9:79:AC:EA:B3:D7:39:82:2B:68:B1:66:5D:03
Certificate issuer:       /CN=10a08293-f811-4992-99bc-b944a4121d2e
Certificate serial:       010D0C9F4328584C4441088A8A259398D44E16E0
Authority key identifier: EB:15:01:BB:8E:FC:CA:05:D8:EF:94:7F:43:6B:29:6D:10:D7:0D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa
Signing time:             Mon 22 Dec 2025 02:00:32 +0000
ROA not before:           Mon 22 Dec 2025 02:00:32 +0000
ROA not after:            Sun 22 Mar 2026 01:00:32 +0000
asID:                     398015
IP address blocks:        172.86.239.0/24 maxlen: 24
                          209.87.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:44:41:08:8a:8a:25:93:98:d4:4e:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a08293-f811-4992-99bc-b944a4121d2e
        Validity
            Not Before: Dec 22 02:00:32 2025 GMT
            Not After : Mar 22 01:00:32 2026 GMT
        Subject: CN=8ca0aae6-0154-4711-a184-4af176bfa397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:e0:40:e4:c6:11:3e:19:3e:d7:c6:52:4a:
                    3d:c8:5d:a8:e8:30:0b:9d:9e:40:f8:6a:a5:ca:f4:
                    e7:e8:70:e6:8b:1e:87:ce:a4:ab:7f:40:93:fa:4f:
                    5c:8b:bd:91:83:ae:6e:ef:a9:d1:be:44:d3:08:be:
                    03:35:e3:39:97:86:63:c6:bd:13:4d:d5:29:f1:d0:
                    0b:50:ec:a7:a5:c2:d3:3d:6b:21:cf:3e:a8:d5:24:
                    18:3f:c4:8c:d6:e1:4e:f8:c3:e3:53:c2:13:7c:5f:
                    d5:83:4c:83:1b:95:4b:67:54:56:d4:76:df:f0:f9:
                    94:46:da:49:e9:08:b7:d4:3b:f4:09:99:3d:72:1f:
                    97:55:3c:3c:22:bc:bb:b8:02:52:5f:10:65:4a:b0:
                    c0:d6:59:04:5e:bd:55:11:47:bb:ed:20:a6:d5:33:
                    86:de:9c:d6:20:a9:ab:d8:f4:28:5b:ef:c5:d6:12:
                    06:01:3e:b3:34:d0:01:ec:79:2b:d7:e9:8e:a9:16:
                    53:fd:b1:43:5c:63:b6:b2:0d:b6:b1:ec:b3:22:e4:
                    cf:a7:84:78:34:79:21:70:77:e6:96:b3:31:7b:58:
                    59:7c:fb:95:2c:f2:f7:cb:fb:0c:bd:83:9a:f9:11:
                    70:f1:4f:bf:28:fb:3b:16:38:eb:b3:97:be:0b:3c:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3D:41:CE:33:3A:A9:79:AC:EA:B3:D7:39:82:2B:68:B1:66:5D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.crl

            X509v3 Authority Key Identifier:
                keyid:EB:15:01:BB:8E:FC:CA:05:D8:EF:94:7F:43:6B:29:6D:10:D7:0D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.239.0/24
                  209.87.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:66:86:10:0e:a8:cd:65:08:05:bc:ab:32:f0:6a:2f:91:cb:
         c2:4c:73:a3:77:2d:e3:db:de:20:c3:a9:3f:e4:c5:38:b5:de:
         74:dc:e5:6d:6b:be:1e:b8:dc:6f:0d:f5:e1:0b:e9:17:ac:87:
         4a:64:be:a7:52:a5:3b:5e:60:c4:62:39:89:3b:e4:3d:ec:15:
         b6:0b:7a:b2:44:59:b3:85:45:0e:e2:f1:ec:18:f5:30:0c:d9:
         dd:85:10:50:85:d6:61:b2:29:bd:9e:1f:03:88:17:63:cd:27:
         6e:cd:4e:78:ee:a1:ac:64:3e:bf:8e:f9:15:91:5d:b8:2a:73:
         60:ee:61:73:ca:0f:b8:f7:fc:90:a0:b4:5a:80:84:ee:5c:e5:
         9d:17:cc:fe:90:1f:aa:b8:61:73:0d:a2:00:d7:16:25:00:50:
         57:45:d8:f3:66:93:d0:6e:6c:a4:42:cd:28:48:20:d9:23:69:
         40:96:c6:26:46:fa:c2:2b:57:d8:07:40:34:e9:4c:f0:3f:9a:
         0e:93:df:20:71:2e:6b:86:9e:a5:fa:1d:43:0f:e7:0a:73:f9:
         fa:34:ba:43:6a:3a:9b:ec:ba:03:26:42:c5:25:10:0a:f3:03:
         e1:49:fd:a9:a7:84:6d:33:bc:07:79:31:4b:6b:b7:f2:24:00:
         07:59:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 01:28:52 2025 by rpki-client