This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/1bf3fe6b-9121-3156-894a-69747707ba38.roa
File:                     1bf3fe6b-9121-3156-894a-69747707ba38.roa (raw, json)
Hash identifier:          JGlbCNWYOfoVtcItKn+/y9AzUSRnj0ne99LCTOpZmRo=
Subject key identifier:   4E:D0:D3:C9:D2:D2:57:D4:46:69:11:75:BA:44:5C:54:6E:11:F2:81
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F4328584BD5FB26154A595F7F9F7246C0
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/1bf3fe6b-9121-3156-894a-69747707ba38.roa
Signing time:             Wed 12 Nov 2025 14:00:37 +0000
ROA not before:           Wed 12 Nov 2025 14:00:37 +0000
ROA not after:            Tue 10 Feb 2026 14:00:37 +0000
asID:                     1706
IP address blocks:        198.60.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:fb:26:15:4a:59:5f:7f:9f:72:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Nov 12 14:00:37 2025 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=a3ba8a51-2359-4f1f-b859-fae69d991e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:75:b7:10:a9:45:56:31:3e:96:b2:f7:88:
                    45:db:d6:c6:02:83:2f:dc:c9:32:5c:4b:b1:d6:3d:
                    80:22:90:54:74:2e:7a:3e:ad:18:7c:5c:1d:ab:fc:
                    3a:3a:c5:4c:c2:ed:c1:64:e6:8c:a2:66:a9:06:45:
                    c3:59:92:b9:83:60:ca:44:46:22:cd:2d:bd:7c:0b:
                    25:49:be:bc:86:79:36:b5:d4:07:cd:5a:7d:84:d3:
                    ad:43:29:2f:fa:4b:c3:d9:b6:bf:5d:fc:68:2f:4d:
                    ac:7f:0c:1f:ee:8b:b4:5f:d1:47:28:00:a6:14:77:
                    f9:90:36:1f:6c:ed:90:d7:ca:78:fe:12:74:20:71:
                    d8:6d:4d:ed:f1:03:1e:8e:37:f0:80:52:59:40:2e:
                    92:d2:62:9e:09:6f:f3:bd:22:f4:61:a7:ec:89:b8:
                    83:f1:95:5d:62:09:43:a5:13:d2:b6:03:da:4b:8b:
                    9c:1b:39:0f:5c:5b:b9:9b:59:71:73:eb:55:28:ec:
                    b9:16:6d:68:34:13:37:cc:e5:3d:f0:8a:9f:77:ef:
                    d3:b7:f0:80:50:d8:25:ce:44:fd:5a:2e:42:84:bb:
                    89:3b:ab:f5:77:9b:54:38:11:b2:4a:b7:e2:2c:74:
                    35:02:ac:3d:d4:83:88:70:ee:33:a5:d6:a2:e7:52:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:D3:C9:D2:D2:57:D4:46:69:11:75:BA:44:5C:54:6E:11:F2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/1bf3fe6b-9121-3156-894a-69747707ba38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:f4:17:af:de:56:f7:1e:f5:87:3f:82:34:ed:ae:8d:4c:b6:
         a2:6c:52:e0:a8:f8:de:37:8f:aa:bf:2c:a1:0d:f5:94:a9:5c:
         e5:b7:60:10:14:c9:77:e3:52:95:52:4f:33:21:34:59:ac:ec:
         03:44:9d:16:35:28:5e:15:e2:a1:d8:f5:31:8e:f1:56:06:bc:
         13:c5:84:ac:a5:2e:e5:b0:25:f5:b7:31:3b:05:24:0a:52:a5:
         3f:47:18:7c:60:85:57:20:4a:e8:b5:e9:94:90:ed:fc:42:6d:
         e5:e3:94:ea:2b:b7:77:7b:43:6c:a0:01:ae:3d:cf:3f:75:98:
         7f:27:4d:c3:55:10:2d:19:7b:be:51:d3:b1:e5:7a:67:c5:c7:
         91:ff:1f:c9:80:1a:40:21:27:db:5e:6f:8a:34:ed:67:84:bb:
         ef:14:71:61:00:07:49:f6:a0:2c:3c:80:c2:29:80:a6:ee:1d:
         06:1d:17:da:46:e6:80:70:8e:51:22:63:47:2d:38:10:1c:35:
         4f:a8:aa:27:75:94:21:51:d3:6d:01:a2:2e:89:e4:79:66:47:
         67:3f:5e:9e:29:3b:49:f1:08:15:73:82:4e:85:0f:74:21:8d:
         ea:54:48:95:b9:96:94:ff:e3:a3:57:b8:d1:fd:bf:db:90:e6:
         2b:a6:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:35:36 2025 by rpki-client