This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
File:                     40e0b31e-01f2-317f-a8d0-77ce927a2303.roa (raw, json)
Hash identifier:          ibP49m4aWBvHjNEPbax7ub/h+Jr7T76PmA258niwu1w=
Subject key identifier:   9D:0F:C2:B5:F2:5A:59:35:42:0E:A4:E3:72:F8:10:3F:D0:B6:45:9C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584BB02D085BF373007680542800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     7029
IP address blocks:        98.20.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:08:5b:f3:73:00:76:80:54:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=987ffa60-4203-4ee6-a3a9-fb9f778e1741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:1d:85:6d:c1:aa:81:7f:ff:1c:11:04:75:
                    11:dd:e4:bb:15:58:d0:e5:21:50:f8:34:e3:a7:9c:
                    84:b8:1b:01:cf:83:71:37:07:7d:1a:69:dc:68:d3:
                    1d:08:49:8f:81:5d:e2:9e:a2:14:ca:5f:2e:41:a0:
                    88:e9:99:91:0c:f9:65:0e:5d:37:a3:3b:7d:7c:14:
                    57:03:ab:c2:b9:3e:a0:31:cf:d5:ef:07:fc:fd:61:
                    72:7a:28:f0:22:10:31:f7:b1:49:bc:6d:41:7d:bf:
                    2e:03:88:ff:52:b9:ae:3d:2e:7e:8f:a7:0f:9f:2c:
                    32:82:57:43:6e:09:d3:ad:89:f1:2b:6c:5f:29:02:
                    94:4d:54:c1:c0:39:5f:2f:6d:04:cb:de:ce:7c:1e:
                    6b:0e:6f:b3:59:dc:38:32:7b:fe:65:a7:31:d3:01:
                    93:76:90:8d:cd:4b:a9:c2:88:ea:1c:28:a5:c7:2b:
                    ec:8c:e4:34:fe:7c:ae:92:2a:de:d1:6e:30:e9:92:
                    19:ee:1c:f3:fe:86:54:b4:c6:a7:91:c3:66:ea:88:
                    13:b7:82:30:68:96:a8:9c:33:e9:45:39:15:31:c7:
                    b0:1c:75:01:e5:fa:04:43:a3:72:d4:6b:1a:36:21:
                    01:a3:03:eb:88:e9:aa:41:ae:9e:a1:99:29:00:2c:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:C2:B5:F2:5A:59:35:42:0E:A4:E3:72:F8:10:3F:D0:B6:45:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b3:a6:7b:99:cc:66:fb:50:89:21:a8:4e:31:40:a0:78:6c:
         38:82:89:fd:78:06:a8:7c:23:e9:28:dd:7d:21:ec:0f:de:13:
         3d:35:3d:a0:91:f1:cf:4b:07:2a:f4:6a:e7:4b:f7:d9:ac:6d:
         4b:ff:e5:48:75:a9:ff:dd:cc:9f:7e:6f:7e:40:61:e4:ca:11:
         40:3e:f7:ad:4e:ac:b6:4d:a6:4a:30:80:d7:6d:55:99:38:3d:
         6c:dc:0c:92:39:92:93:41:bb:4f:61:6f:c7:32:cf:5d:4a:d5:
         5f:44:87:3d:1a:d1:80:fc:db:ce:4a:0d:bf:f6:72:94:6e:de:
         9b:f9:04:9b:71:45:e3:d0:66:ea:7c:b4:10:90:37:36:bb:16:
         5b:72:b7:a1:e3:8c:af:18:e5:e7:19:6d:ea:d2:c4:6d:d1:a9:
         b6:61:d9:94:d6:af:0d:3f:0c:ca:58:6a:56:9d:82:82:46:3f:
         3f:00:c3:fc:80:4f:c9:72:b7:0f:67:a9:58:83:c8:3f:e5:b3:
         1c:6a:c0:b2:9d:97:f7:b4:35:9e:31:8d:dc:37:06:7e:1e:6e:
         95:cc:38:25:c1:97:b1:6a:0a:17:ee:19:0d:f9:ec:83:ef:db:
         76:7e:91:3d:17:02:0c:7e:31:53:1f:9a:a0:11:76:3d:7e:fd:
         1b:d6:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:22:06 2025 by rpki-client