This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
File:                     2bceb09a-8c68-38f7-9325-555d892ae3b0.roa (raw, json)
Hash identifier:          PminDRldNkl9UsGFtR6BjeCPyGClYq8UkObk3j7f8mI=
Subject key identifier:   E9:77:19:E5:4D:0C:0E:8A:E9:1F:5C:19:A8:34:7B:D0:CE:9E:8F:27
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584C1FF6238238293F2667E3C440
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
Signing time:             Tue 09 Dec 2025 02:00:31 +0000
ROA not before:           Tue 09 Dec 2025 02:00:31 +0000
ROA not after:            Mon 09 Mar 2026 01:00:31 +0000
asID:                     394453
IP address blocks:        199.253.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1f:f6:23:82:38:29:3f:26:67:e3:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Dec  9 02:00:31 2025 GMT
            Not After : Mar  9 01:00:31 2026 GMT
        Subject: CN=10fe5157-be22-4835-8f46-4f6867330c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:1e:9a:e6:94:f8:5b:c7:6c:2e:08:4d:9b:
                    71:63:94:33:63:7e:77:a1:b9:be:d5:9a:39:44:61:
                    c3:0b:fc:51:ca:f7:14:40:38:84:2b:a5:dd:2c:d5:
                    a1:87:bc:a2:0c:3d:36:b2:ef:a1:10:59:1d:b7:e4:
                    09:d3:16:71:80:1f:52:63:71:b2:49:97:ab:d4:90:
                    76:87:6d:e3:31:11:6e:c5:ac:c3:a6:ef:8d:13:e1:
                    a0:1c:46:5c:3c:a6:35:56:8b:32:55:09:90:89:17:
                    57:29:4d:87:bd:2a:a0:73:96:f9:b1:0f:05:44:e6:
                    3d:36:40:f5:02:ee:15:03:9f:90:15:41:4d:15:48:
                    16:4f:48:d2:a7:d3:67:bd:6e:99:0b:f0:2a:f3:4b:
                    df:59:b5:7c:69:26:80:72:32:7e:a6:c1:d5:1c:8e:
                    de:bc:09:48:5b:82:1b:98:bb:15:c6:ab:ea:1a:6e:
                    89:c6:a9:4b:ed:d0:38:59:ae:3b:27:7b:db:e5:41:
                    e1:ec:af:59:d1:d7:52:50:26:8f:fd:75:00:b8:dd:
                    fa:f2:74:57:69:1d:ca:5c:c2:7b:89:79:de:26:f7:
                    7c:4a:7c:a6:2b:6d:f7:c7:ba:15:0c:8f:e1:f6:ee:
                    c9:a8:24:11:67:75:0c:f9:fa:2f:5b:ef:b7:a8:94:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:77:19:E5:4D:0C:0E:8A:E9:1F:5C:19:A8:34:7B:D0:CE:9E:8F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:07:b2:0b:c7:88:b2:6d:a9:2a:d3:6d:3d:44:45:15:77:
         b0:4c:3b:09:55:6a:0a:dd:4d:8a:3d:90:42:ad:28:04:43:60:
         85:63:f9:b6:37:ed:6b:db:b1:1a:90:2a:ee:47:21:dd:88:60:
         08:7a:50:a2:45:b3:f2:b8:71:a1:5f:15:c8:ba:77:a1:f4:1a:
         76:03:47:d7:af:50:23:a5:88:19:7d:c5:75:4e:c0:d6:07:e4:
         51:2f:f7:02:d4:82:85:8a:cd:f9:25:7d:49:e0:ea:cc:91:fc:
         d0:58:f0:b3:c1:93:54:b4:41:7f:a3:00:51:5b:04:7f:a8:1f:
         49:8a:77:cd:fa:09:23:20:4d:9a:5c:b8:a4:2d:cf:29:b8:99:
         5e:dc:cd:7b:db:37:f2:25:75:c2:13:e0:5f:66:62:22:56:42:
         16:60:1c:4e:df:74:06:aa:17:e6:53:5f:a6:7f:0f:f2:8c:89:
         94:13:39:d6:c1:ed:39:dc:ad:14:af:04:06:47:20:16:7b:c4:
         ac:02:cf:f9:05:c0:8f:9d:cc:ad:98:06:ed:57:af:a8:c6:62:
         9b:35:55:64:38:ed:61:ce:86:81:a9:f2:6e:22:5c:e4:5f:14:
         1a:95:03:22:76:c6:15:90:dc:a2:b3:66:c0:26:c9:39:5c:6b:
         9c:b2:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:27:18 2025 by rpki-client