This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa
File:                     af85614e-7c92-3643-b55c-470e5ec31d97.roa (raw, json)
Hash identifier:          dw0iy4lBqmFDcxG9XLiJfHWVPhbeQa32Zyda+dVzo4o=
Subject key identifier:   40:C0:F4:B0:DD:75:AB:E6:AC:DB:1B:00:C9:45:DE:3C:9E:EA:66:DD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584C22C0CD859ED39AE7D804DF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa
Signing time:             Wed 10 Dec 2025 02:00:31 +0000
ROA not before:           Wed 10 Dec 2025 02:00:31 +0000
ROA not after:            Tue 10 Mar 2026 01:00:31 +0000
asID:                     36630
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:22:c0:cd:85:9e:d3:9a:e7:d8:04:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 10 02:00:31 2025 GMT
            Not After : Mar 10 01:00:31 2026 GMT
        Subject: CN=1ef27caf-380b-4bae-bb5c-e19e2683a807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:fb:cb:30:83:3c:b6:a0:ef:8b:45:20:3b:
                    83:24:b6:00:ad:1d:04:40:c6:01:2a:0d:92:2d:a0:
                    5d:17:a4:47:f3:ce:6e:fa:c1:48:7d:64:f5:3d:a3:
                    89:53:df:7c:7e:ea:83:22:64:26:fe:78:f9:59:ac:
                    79:d0:5c:32:83:fb:28:88:51:84:81:93:84:2d:3a:
                    31:3e:16:ec:1a:49:66:c1:cd:54:61:f7:1e:98:f9:
                    e1:97:24:a3:54:be:01:d4:ef:20:65:16:d5:56:8d:
                    68:2e:fd:d5:c9:a8:d9:14:b7:5e:75:27:e1:25:fc:
                    d7:a2:55:1a:63:d9:7e:33:8d:99:0e:ab:77:72:99:
                    2d:75:30:c7:34:23:4c:8c:b1:ab:6a:6a:f9:fb:8b:
                    77:2c:e6:31:0b:ff:93:44:63:9f:5c:6b:39:ad:e1:
                    24:33:6c:2c:8d:80:b5:75:0d:85:06:e0:f3:b0:bf:
                    5d:c4:33:1c:ed:34:74:57:4d:d2:9e:2b:f8:05:29:
                    1f:ee:e0:0a:12:3f:27:04:a7:da:52:49:28:ee:6e:
                    86:16:b1:79:8c:91:16:95:87:ff:d2:59:65:05:ec:
                    a3:76:29:c9:e5:d8:45:12:e9:b0:f4:0f:25:e0:cd:
                    7b:67:75:9f:81:11:9e:5f:61:e1:c6:6c:df:8e:fc:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C0:F4:B0:DD:75:AB:E6:AC:DB:1B:00:C9:45:DE:3C:9E:EA:66:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:79:96:31:13:50:22:5b:56:49:4d:27:f3:ca:41:0f:41:
         8c:34:e7:87:56:e3:1c:4f:18:6b:08:ca:ec:66:b2:6f:98:82:
         1a:04:88:f5:44:ca:46:dd:54:d5:08:0e:79:ab:88:c8:97:d5:
         11:ce:00:8b:da:66:6e:81:ca:21:2a:ce:d7:8b:a5:99:e3:5f:
         1d:56:26:6a:ce:41:75:c3:b6:14:3c:52:9c:f2:a7:47:51:76:
         16:e3:de:e6:10:f1:86:59:a3:91:e9:b3:05:ba:2a:60:bf:d3:
         32:37:2d:d6:e0:fb:a4:29:21:80:24:40:7b:2c:d4:fb:a5:e0:
         b7:26:e6:e1:cf:22:9d:bd:4a:c6:1b:57:22:83:45:d0:0d:87:
         9a:26:7f:95:e4:b4:4f:95:95:2d:a8:de:e2:fc:2c:b0:66:41:
         ed:c8:49:a7:42:b4:ef:c2:8c:a5:62:72:e2:d1:c7:28:19:de:
         e7:37:a9:a5:e0:33:d5:95:0a:07:c8:b7:af:be:16:c1:09:17:
         b4:55:89:6f:7f:0e:c6:08:86:31:0a:bd:d4:2b:cb:67:a5:6c:
         9c:46:b5:ba:cf:bc:cf:6c:be:2d:5d:44:91:c8:d8:69:b5:24:
         be:d4:d0:6b:27:2b:da:fb:f7:5a:01:61:a1:dd:ad:34:7a:ca:
         94:64:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:48:41 2025 by rpki-client