This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa
File:                     cf57e6de-89da-30d1-aea8-b79080996615.roa (raw, json)
Hash identifier:          ztAeeWpGuABvgZSyRElhK0K1AjiwqoX9INonYznoDh4=
Subject key identifier:   8C:E8:82:F2:4A:A9:4C:A1:D3:6B:C5:04:FF:63:0F:69:E8:66:0E:ED
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584C22C0EC4BFB18F358AE16CA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa
Signing time:             Wed 10 Dec 2025 02:00:31 +0000
ROA not before:           Wed 10 Dec 2025 02:00:31 +0000
ROA not after:            Tue 10 Mar 2026 01:00:31 +0000
asID:                     396610
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:22:c0:ec:4b:fb:18:f3:58:ae:16:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 10 02:00:31 2025 GMT
            Not After : Mar 10 01:00:31 2026 GMT
        Subject: CN=7d274b45-b94b-4441-99bb-4db583c36e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:7c:53:86:2e:a9:fc:4a:a2:84:07:be:c6:
                    e4:b1:51:33:c0:c4:d6:13:50:b7:67:98:05:32:d0:
                    17:fb:c2:ef:79:11:75:ad:18:06:42:4c:3f:3b:fc:
                    04:bb:d6:da:13:74:05:d9:34:68:54:41:39:03:6a:
                    62:0d:ea:a6:88:b6:ac:fd:30:27:02:05:30:6c:c0:
                    d8:8d:4d:23:3c:ef:74:ce:06:d3:4a:47:2d:43:9a:
                    7e:a3:46:87:83:c0:47:81:a0:05:26:c4:34:b3:ee:
                    5b:a0:d3:b7:78:d0:03:20:72:cb:bb:3a:0d:53:e6:
                    46:b1:11:d8:9a:00:c0:eb:d9:7c:39:02:af:db:27:
                    5f:86:f0:a4:a4:b5:fe:62:6f:c8:01:e2:36:4a:7f:
                    ff:58:18:71:dd:7b:cd:96:ba:ca:54:60:a8:c0:f9:
                    53:bd:48:fe:53:6a:05:9f:c5:14:bc:85:ac:43:02:
                    62:56:82:b8:99:15:69:9c:c7:51:4a:b0:90:c5:16:
                    79:74:93:47:13:75:7e:b4:fa:ad:96:09:6c:5f:0d:
                    f6:bb:25:5f:a4:75:a6:16:45:52:08:f7:26:2e:35:
                    bf:75:d7:f2:da:b3:71:91:86:18:68:a8:bd:d1:9e:
                    5e:60:bd:18:c7:19:36:f5:7f:a7:d4:91:5e:be:93:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:82:F2:4A:A9:4C:A1:D3:6B:C5:04:FF:63:0F:69:E8:66:0E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:b4:ec:60:be:25:36:c3:bd:ed:34:8c:3d:d7:10:d1:5c:
         0d:99:52:c2:83:c2:f7:6e:a0:64:a6:19:0d:9e:d5:1b:1b:43:
         5f:c9:02:93:c5:02:d6:b5:a8:b1:d6:35:ac:61:86:76:76:99:
         0c:51:1b:7b:e4:4f:7d:7d:30:9e:3a:43:d8:94:fb:7b:85:d2:
         ca:16:9e:61:eb:71:b4:40:0d:14:d1:d6:07:e8:f8:8f:79:3e:
         cd:33:c4:fa:5a:c9:b1:f6:44:83:e5:2b:7d:4e:6f:08:ae:9e:
         ec:3f:cf:09:e2:0d:b7:8d:5d:8d:ef:17:34:8b:f4:77:b5:f2:
         8e:ae:71:6d:fd:05:32:ad:c0:36:b1:6a:88:ba:af:f0:be:3e:
         ac:53:35:01:1e:32:4c:ae:a1:e8:b1:c5:c0:5b:59:25:6d:6a:
         c9:c0:b7:89:e7:53:a8:b7:59:5a:50:b1:e1:1a:c8:5b:85:a3:
         a9:bf:78:3e:f1:66:d3:54:fc:0f:eb:f2:af:65:2b:fd:02:ad:
         d1:51:67:c0:80:60:0c:13:d8:82:89:80:2d:de:14:46:a9:54:
         f8:bc:cb:6d:86:ad:6f:3f:c4:33:a4:49:2a:42:b0:2a:97:97:
         3d:c7:42:da:1f:fe:f0:be:39:36:b9:1a:d5:da:87:e5:1f:0f:
         5f:94:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:47:37 2025 by rpki-client