This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa
File:                     843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json)
Hash identifier:          M3Z0h5DKPM7rGFpvA7B7yR2rEk1YyRRMSFdByDVRk+c=
Subject key identifier:   B4:45:B2:A4:0F:62:09:03:A1:96:88:00:52:E1:75:16:86:BA:B0:CD
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584BC53B0630F46F7241F7243F80
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     2572
IP address blocks:        198.209.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3b:06:30:f4:6f:72:41:f7:24:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=002a476c-2538-4ca7-9d0a-438e09d0bdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:87:4c:57:b7:ac:5c:7c:45:db:24:ba:23:
                    2a:e7:50:43:6e:e1:b6:d5:3c:a7:fe:6a:33:98:3b:
                    02:f3:ef:13:6b:5b:e9:58:fb:f9:21:c8:89:67:50:
                    53:ac:14:e0:ff:25:27:96:cc:34:ad:d4:87:59:f7:
                    13:63:0d:79:c4:5f:49:18:80:a4:35:80:7f:47:7b:
                    eb:0d:00:d4:01:fd:35:55:4a:69:5b:4b:1e:01:98:
                    ec:5f:42:d1:db:d8:8e:3c:88:32:86:07:78:f4:c2:
                    ad:69:43:62:f9:c3:ea:a6:1a:fa:88:76:ef:fa:0a:
                    08:01:8d:63:04:d0:92:26:0b:c7:24:c7:df:48:af:
                    fd:4d:7c:40:0e:2b:87:0c:06:1c:30:bd:aa:25:a7:
                    d4:5d:7f:53:8c:3e:72:9a:10:56:f4:bc:28:d0:3d:
                    57:39:11:55:6e:2d:f6:3b:d9:73:76:df:c8:07:b3:
                    eb:50:9d:86:a3:c3:2e:b5:f0:a4:d1:5a:5a:68:8b:
                    09:9c:f3:e2:2a:47:c0:9c:cd:66:cd:24:64:10:d3:
                    91:fe:20:09:5c:3f:50:b0:e2:03:cf:0c:d4:44:be:
                    f2:f5:c4:47:0f:a3:a9:e4:f1:de:94:d0:d4:22:18:
                    d4:8a:b1:2e:97:4d:cc:34:c3:78:85:d9:15:28:36:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:B2:A4:0F:62:09:03:A1:96:88:00:52:E1:75:16:86:BA:B0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:3d:26:3e:ed:a7:2f:11:c3:2f:78:c6:8c:e3:fd:9c:28:
         b5:3c:c8:41:8e:7b:ee:1a:0c:50:80:31:0f:ed:0f:04:99:d7:
         bd:fb:97:03:fd:72:73:71:ad:50:48:81:25:ca:8e:08:01:4b:
         7d:8b:68:ef:ea:f7:50:3b:3d:90:df:07:d6:d7:36:55:e6:b2:
         85:92:70:98:46:fb:6a:34:be:67:33:a4:c8:cb:4f:39:3a:bf:
         b1:a1:32:45:b6:f4:36:a9:df:c2:48:e8:d1:a1:a6:d4:46:75:
         2f:a8:b6:7f:d8:e6:e7:88:b8:d9:c8:62:7c:75:ad:84:cb:b3:
         b1:1b:a8:53:81:3f:ee:e0:b3:55:e1:b8:54:b9:4e:77:9b:e3:
         58:52:78:2a:eb:d9:34:cb:7a:da:a0:f9:56:fc:31:25:51:e9:
         bd:83:be:07:9d:c7:ab:86:44:65:8a:07:53:3f:57:da:00:c3:
         b6:f4:ec:25:e4:57:9d:e2:d1:11:2b:f7:14:c0:9a:bc:b9:08:
         ba:f9:0e:3f:69:a6:4d:b7:d0:0f:ac:fb:e9:6e:5a:3b:0a:41:
         76:40:74:27:75:cc:0a:94:78:54:0e:64:80:6d:0b:e7:4a:eb:
         87:aa:10:27:de:3b:6d:46:40:a5:be:ec:55:df:b4:72:02:96:
         e8:40:c9:93
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvFOwYw9G9yQfckP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3
YTlmMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MDAyYTQ3NmMtMjUzOC00Y2E3LTlkMGEtNDM4ZTA5ZDBiZGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0aHTFe3rFx8RdskuiMq51BDbuG21Tyn/moz
mDsC8+8Ta1vpWPv5IciJZ1BTrBTg/yUnlsw0rdSHWfcTYw15xF9JGICkNYB/R3vr
DQDUAf01VUppW0seAZjsX0LR29iOPIgyhgd49MKtaUNi+cPqphr6iHbv+goIAY1j
BNCSJgvHJMffSK/9TXxADiuHDAYcML2qJafUXX9TjD5ymhBW9Lwo0D1XORFVbi32
O9lzdt/IB7PrUJ2Go8MutfCk0VpaaIsJnPPiKkfAnM1mzSRkENOR/iAJXD9QsOID
zwzURL7y9cRHD6Op5PHelNDUIhjUirEul03MNMN4hdkVKDZrrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLRFsqQPYgkDoZaIAFLhdRaGurDNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw
NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvODQzYjZhMWMtOWYwOS0z
MmU2LWFhMDMtZDVkZDA1ODNkNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm
M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5
N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx
NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxtEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATWI9Jj7tpy8Rwy94xozj/ZwotTzIQY577hoMUIAxD+0PBJnXvfuXA/1y
c3GtUEiBJcqOCAFLfYto7+r3UDs9kN8H1tc2VeayhZJwmEb7ajS+ZzOkyMtPOTq/
saEyRbb0Nqnfwkjo0aGm1EZ1L6i2f9jm54i42chifHWthMuzsRuoU4E/7uCzVeG4
VLlOd5vjWFJ4KuvZNMt62qD5VvwxJVHpvYO+B53Hq4ZEZYoHUz9X2gDDtvTsJeRX
neLRESv3FMCavLkIuvkOP2mmTbfQD6z76W5aOwpBdkB0J3XMCpR4VA5kgG0L50rr
h6oQJ947bUZApb7sVd+0cgKW6EDJkw==
-----END CERTIFICATE-----
Generated at Tue Nov 25 12:57:04 2025 by rpki-client