This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee0e209d-c482-3a41-abdf-a77c4bacbf75.roa
File:                     ee0e209d-c482-3a41-abdf-a77c4bacbf75.roa (raw, json)
Hash identifier:          aVppI6d3VpJpsFOBg1t3qxcbc4HHve6jESP6VNV30QA=
Subject key identifier:   83:E4:F1:BA:CB:F1:58:BE:C4:10:17:7A:07:7A:FE:46:52:FD:CB:2D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584C4F6BCF53100E83D06082C1E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee0e209d-c482-3a41-abdf-a77c4bacbf75.roa
Signing time:             Fri 26 Dec 2025 02:00:32 +0000
ROA not before:           Fri 26 Dec 2025 02:00:32 +0000
ROA not after:            Thu 26 Mar 2026 01:00:32 +0000
asID:                     215728
IP address blocks:        198.20.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4f:6b:cf:53:10:0e:83:d0:60:82:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 26 02:00:32 2025 GMT
            Not After : Mar 26 01:00:32 2026 GMT
        Subject: CN=aeda5c4c-b2ee-4b6d-9b4f-f4819525ed97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:b5:a6:6d:40:00:a7:69:94:b5:40:3b:6e:
                    e5:fa:39:5b:70:94:67:9f:3d:cc:e2:88:c4:3f:99:
                    36:93:fd:f5:29:0c:01:17:89:48:2a:1d:0f:67:4c:
                    fd:55:80:d3:23:0f:de:66:d1:20:07:6f:a3:be:ab:
                    77:74:ff:12:40:1a:70:18:c6:a0:5d:ea:fa:61:d4:
                    fa:46:83:f3:75:07:a7:53:3c:5b:2f:2f:80:0f:cd:
                    e7:0b:78:a3:15:d6:23:84:53:89:07:16:a7:b2:19:
                    af:cf:42:0e:f9:ac:02:16:49:b5:09:e3:2c:8f:6c:
                    e0:5b:70:e1:74:41:12:e5:8a:96:3e:f9:18:b0:ba:
                    f7:77:fd:0b:85:23:1e:9a:b0:25:4c:76:8a:b7:03:
                    17:f1:43:89:cb:ec:e6:f5:62:ed:de:89:76:95:24:
                    a2:6c:9e:f8:7e:d4:6c:7c:36:3f:b1:e9:4f:00:a5:
                    d0:fb:e3:eb:5d:11:86:75:ce:40:fb:b2:f8:98:e8:
                    a9:c8:3a:d7:a7:64:4b:ae:d9:f4:6b:ec:f5:32:6a:
                    a7:db:5b:8e:4b:a4:1c:92:ad:00:23:dd:b5:00:46:
                    d4:c9:bf:e4:17:db:b0:b4:85:f9:d5:a3:68:9a:0f:
                    43:0e:a3:92:98:74:23:01:d6:3c:2a:87:15:ba:7c:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:F1:BA:CB:F1:58:BE:C4:10:17:7A:07:7A:FE:46:52:FD:CB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee0e209d-c482-3a41-abdf-a77c4bacbf75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:cb:15:3c:e9:4e:bd:11:ed:e0:22:48:df:b2:ea:85:63:
         71:60:d9:70:6a:84:ee:26:02:f6:5f:19:f2:d2:21:da:15:12:
         25:2b:51:01:c5:f9:33:19:48:89:5a:69:4d:4d:7d:bc:4f:58:
         fb:26:0b:da:2d:b7:f5:da:dd:18:0a:78:5c:d2:80:0d:1b:4c:
         93:88:8e:78:a7:b5:28:21:63:d9:70:3b:e9:37:ab:aa:f3:52:
         8d:bd:63:47:d7:79:58:44:38:65:f2:49:fb:9d:1e:a6:d6:07:
         56:72:90:dc:59:30:85:15:7a:75:90:a7:86:72:6b:63:1c:2a:
         5a:ea:b6:b1:d7:de:81:88:9d:72:30:c7:25:8b:53:cf:3d:8b:
         2f:58:05:ad:3e:0a:00:c6:61:dc:fb:44:04:ba:3f:d7:85:81:
         02:6a:0b:e9:e9:db:bc:3e:e0:d9:28:e3:78:6f:66:f0:16:96:
         fc:b9:1d:fb:52:4c:7d:55:ef:e0:39:1d:37:c2:05:c5:9b:d6:
         e9:6d:30:16:a3:3e:84:64:a7:d0:bd:6a:7a:18:82:6c:ef:61:
         b2:47:bd:82:ba:22:d6:58:0f:eb:49:e3:18:88:0e:eb:3d:27:
         7c:0e:f6:5d:82:a5:01:a3:0f:d9:fe:e1:9c:64:7b:4a:20:fc:
         bb:6e:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:16:21 2026 by rpki-client