This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa
File:                     bbf45412-6bbb-3bec-929d-bf255998ed53.roa (raw, json)
Hash identifier:          V0oTtvrnY4/iYEosJwsBSX3AE7NNxwOxcRskhd0qpfs=
Subject key identifier:   65:0E:DD:72:BB:1B:AC:3A:F9:E6:D4:96:89:66:8C:D9:05:8F:47:38
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584BB5C254A44388EC88119D0A80
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     54302
IP address blocks:        199.88.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:54:a4:43:88:ec:88:11:9d:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=96a3af86-3033-4c33-86fe-9cc27be63964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:0b:e0:56:ad:e1:f6:47:54:82:0c:eb:85:
                    62:e9:e7:a9:3b:32:5c:e1:0a:ee:74:48:14:74:86:
                    5f:06:35:c7:3f:13:3e:59:69:e5:37:40:83:1a:01:
                    5f:11:d8:a4:4f:c9:91:2b:0f:a5:e1:5e:9e:94:c8:
                    15:df:ea:44:f5:fa:8b:e2:43:3f:a8:87:8d:35:3a:
                    dd:a2:79:7a:5f:7d:51:d7:61:7e:1b:37:13:c2:3b:
                    f6:df:bd:0b:65:a0:74:fa:ee:f3:9b:8f:78:88:43:
                    2b:6c:bc:92:cd:7e:1b:e7:2b:60:62:65:1e:ae:16:
                    2c:b7:90:f5:41:d2:5c:08:33:f4:8a:f1:8a:13:a3:
                    1e:ce:70:db:cf:e3:3c:ee:a4:a9:48:53:6f:80:c8:
                    b7:2a:ef:97:7f:1c:c2:fd:34:5d:a8:af:34:98:aa:
                    60:0f:03:4a:8e:db:3e:9c:e2:64:93:07:ad:ed:d8:
                    d9:a8:53:8c:f6:3c:47:a3:4d:ab:19:35:d2:9b:4d:
                    30:c0:2c:51:78:37:1e:38:9a:cf:9f:a7:62:81:89:
                    37:78:3a:e9:a1:12:19:34:4b:83:bd:25:19:be:1e:
                    b7:03:9e:84:99:30:59:34:af:28:54:ea:69:f9:a7:
                    f3:1c:db:d3:ff:06:2c:0f:7f:4f:5c:be:24:46:5e:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0E:DD:72:BB:1B:AC:3A:F9:E6:D4:96:89:66:8C:D9:05:8F:47:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:b3:7b:40:0f:19:67:03:a2:be:39:f8:26:c3:01:fa:c5:
         e7:95:84:7c:6c:9b:bd:16:ae:1c:f3:34:f0:30:5e:f8:7a:a7:
         84:de:b8:3c:8d:ce:34:a3:f2:75:32:6a:d2:3a:d2:03:bc:ee:
         9a:e8:f8:3c:b7:25:2a:34:17:85:71:88:5e:30:de:2c:a9:f4:
         5c:95:31:b3:7e:a9:52:51:d3:69:26:04:6a:e9:86:79:28:89:
         cf:51:da:31:75:03:bf:ed:4e:01:c0:28:80:ed:85:da:3c:12:
         66:29:73:7f:09:03:75:26:95:27:f7:de:c5:b7:39:65:6e:fe:
         a6:10:30:3a:d6:37:ce:87:80:9f:b3:4a:a5:f1:93:e5:44:70:
         a2:1d:8a:33:60:bb:40:09:ec:6b:f0:27:b7:2a:93:11:bd:19:
         98:6c:74:80:c1:40:30:02:b8:49:99:32:fa:a6:88:7f:9b:4c:
         3c:47:79:d4:5e:ba:fb:30:fb:bc:f5:cf:a6:7b:72:ce:99:5f:
         4f:94:21:6e:58:05:9a:52:ea:e4:d1:c1:b7:24:da:ba:ed:5a:
         d4:e7:ba:9e:3d:c7:a9:d1:32:c9:d6:35:3f:fc:13:10:b8:2b:
         2e:ad:bb:e2:ce:89:4c:eb:ca:85:1e:3a:50:1e:0b:fa:c1:cc:
         06:8b:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:35:10 2025 by rpki-client