This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/33715435-9602-3907-ba1a-803692a6dd53.roa
File:                     33715435-9602-3907-ba1a-803692a6dd53.roa (raw, json)
Hash identifier:          pO2U2U5L6NxJ7zoYQq4kB9B6/jCuhx8+evPuaGHUGpc=
Subject key identifier:   11:D1:16:3F:48:53:74:A7:42:46:FD:DB:B7:BE:AC:23:E0:61:92:3C
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584BE76B0C5337B0DC3772AA1160
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/33715435-9602-3907-ba1a-803692a6dd53.roa
Signing time:             Wed 12 Nov 2025 21:34:49 +0000
ROA not before:           Wed 12 Nov 2025 21:34:49 +0000
ROA not after:            Tue 10 Feb 2026 21:34:49 +0000
asID:                     14618
IP address blocks:        159.172.54.0/24 maxlen: 24
                          159.172.55.0/24 maxlen: 24
                          159.172.56.0/24 maxlen: 24
                          159.172.57.0/24 maxlen: 24
                          159.172.58.0/24 maxlen: 24
                          159.172.59.0/24 maxlen: 24
                          159.172.61.0/24 maxlen: 24
                          159.172.62.0/24 maxlen: 24
                          159.172.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e7:6b:0c:53:37:b0:dc:37:72:aa:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Nov 12 21:34:49 2025 GMT
            Not After : Feb 10 21:34:49 2026 GMT
        Subject: CN=ae2157af-d202-4d7c-a639-926485f8e6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:0a:ab:5d:39:33:be:19:ac:11:7d:08:d3:
                    38:9e:bf:e4:46:bf:eb:6e:d1:85:bb:88:8a:07:6c:
                    01:e1:22:ff:c9:d8:29:f9:e3:c3:93:c0:a2:64:36:
                    ce:66:4e:6f:5f:12:ec:22:4e:cb:f1:61:35:25:1e:
                    de:f4:d5:ae:c8:10:d1:4a:65:3e:e2:0e:a9:18:2f:
                    ed:9b:66:8b:bd:e9:22:f1:80:0c:78:15:3d:a2:7f:
                    47:17:98:b1:41:3c:21:64:63:af:c3:9e:43:90:29:
                    57:48:05:b7:49:78:80:69:2d:d9:6b:25:46:37:b2:
                    7d:6a:2a:0a:e4:e5:fc:d3:be:34:ee:14:6a:9e:6e:
                    bc:cf:90:8e:72:ba:13:9c:0d:de:59:98:27:78:9c:
                    44:d7:57:dc:2e:7a:33:bc:34:d7:0b:c1:6c:82:83:
                    6f:a5:73:f1:c6:2d:f4:b4:6f:c2:f6:70:96:93:8e:
                    6f:87:5b:c0:93:e5:52:6e:b7:1a:f6:5d:9c:1c:f0:
                    5f:16:d1:53:94:e0:89:f5:99:70:df:d0:08:ac:d8:
                    b7:a8:3d:72:cd:ce:00:5f:05:3d:38:e5:28:3c:a3:
                    1e:be:5d:ab:b7:76:dd:1f:ff:43:57:65:9e:01:28:
                    6c:59:91:3e:b5:31:fa:12:ae:d3:ee:41:33:1b:9f:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D1:16:3F:48:53:74:A7:42:46:FD:DB:B7:BE:AC:23:E0:61:92:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/33715435-9602-3907-ba1a-803692a6dd53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.172.54.0-159.172.59.255
                  159.172.61.0-159.172.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:44:9f:75:6b:6d:7e:5d:df:fb:84:20:84:c9:fa:27:57:6f:
         0e:5d:ed:05:c5:7e:83:a6:16:31:20:ec:f3:7a:c9:07:67:58:
         ee:5f:8a:a6:1e:83:0f:a1:f3:c2:8f:79:92:81:82:c8:42:b3:
         c4:14:3e:01:1c:30:7f:92:49:d0:f6:67:8c:0d:1c:05:87:de:
         67:e3:d5:aa:d8:b8:35:55:ba:4e:54:e3:ad:8c:44:23:32:1c:
         1a:1a:62:5d:93:f5:15:51:53:da:84:96:0b:1e:11:23:f2:66:
         f6:37:c7:ae:7c:07:da:d4:0a:94:c5:c1:9b:4c:4d:04:ad:24:
         8e:2b:e6:c7:91:56:b7:7d:1c:01:1e:77:28:67:e7:55:19:7e:
         7c:6e:48:ae:7d:3c:60:ab:88:51:53:cc:c5:14:b1:7d:64:d2:
         e8:b0:b0:19:d5:49:64:a5:30:41:4a:00:42:eb:6e:df:be:0a:
         8b:fe:de:83:81:9b:7b:f0:7c:46:01:8b:19:8a:a8:b8:5c:f3:
         fb:12:52:ab:e5:04:20:9d:e2:8d:fa:1f:3b:57:50:bf:83:1a:
         86:91:a3:7d:9f:52:ac:79:53:12:fc:d2:3a:e8:28:89:18:ac:
         64:43:a8:a2:39:4d:60:f8:80:e1:b5:6d:a1:71:07:73:55:9c:
         27:ce:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:34:37 2025 by rpki-client