This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa
File:                     dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa (raw, json)
Hash identifier:          rOKlgeSc4MDpvbvBGhYrFeXJD06tLLq/pSB17y2Gykw=
Subject key identifier:   D8:69:5D:45:50:C8:11:23:EA:0D:08:68:7C:1D:EA:A3:BA:E8:28:1B
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584BC2707284BE28A447AAD6D100
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     17055
IP address blocks:        204.99.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:72:84:be:28:a4:47:aa:d6:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=98e02173-0ca1-4a57-9e1a-8e30a6600eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:ba:cf:5a:83:3c:a1:c9:da:d6:56:e6:88:
                    8a:30:64:83:48:7c:9c:66:05:35:0d:d6:b9:e5:1a:
                    24:9b:ce:eb:4b:9d:4b:ca:ed:c6:1d:25:08:b3:3e:
                    8c:f6:15:d9:26:ce:25:94:df:df:0c:b3:b4:ca:63:
                    b3:a3:dc:97:32:f3:67:0c:16:ea:e8:3d:8c:10:e2:
                    22:ff:75:e6:06:e4:fa:2c:56:d9:99:ff:9e:5d:e8:
                    3b:c3:09:82:31:8b:07:c8:67:21:0c:8f:d7:02:64:
                    5a:56:ab:70:82:ed:e0:01:9c:99:b0:44:89:db:c7:
                    ef:8a:83:ab:57:cf:47:50:4b:c2:9e:fd:55:f6:11:
                    c2:55:8d:45:69:e9:0b:93:72:80:ce:d2:0c:af:bf:
                    14:cf:21:ad:b2:71:3f:13:30:d7:16:a4:e8:7a:54:
                    23:e9:8c:25:94:11:36:4c:b5:bc:bd:2b:60:f0:bd:
                    7b:0d:86:66:de:dd:d1:d3:71:6e:28:76:30:55:f4:
                    19:da:ab:47:a0:06:24:73:23:4f:e9:da:cb:46:45:
                    70:55:6c:ea:14:a6:b0:a8:1a:09:44:e8:ca:5b:50:
                    f0:dc:73:1b:61:3d:a1:21:c2:31:b9:09:a7:61:9f:
                    78:3e:1f:d9:6d:cf:f3:f3:bf:0a:48:a0:73:5a:f9:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:69:5D:45:50:C8:11:23:EA:0D:08:68:7C:1D:EA:A3:BA:E8:28:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.99.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:f1:0a:19:c7:19:4f:bd:42:6a:0b:92:02:bd:a1:bb:15:
         69:e4:6d:35:48:91:0a:44:c0:c0:c4:46:88:db:1f:0c:87:69:
         2f:14:c6:53:66:07:d3:60:bb:51:89:2d:f4:13:f2:b9:a1:91:
         79:86:b8:49:ca:3f:8d:c4:33:60:51:8f:41:f7:0e:e7:28:da:
         4a:3c:29:48:ad:9b:b5:76:21:31:dc:54:83:51:e2:66:f8:e2:
         9e:f9:18:0f:0f:3e:a1:cb:01:47:3e:6c:80:01:29:2a:e6:8a:
         92:ad:e4:6f:1b:39:f8:b0:a7:39:3a:1a:24:71:56:e6:4c:17:
         82:ce:6a:e1:9b:72:63:b2:7d:04:d8:ba:c2:38:08:17:90:bc:
         28:86:3e:c0:3c:c8:f1:d0:19:36:24:d4:e0:e5:e6:07:8d:9c:
         77:b4:26:3c:07:fc:c5:a2:86:7c:a9:df:ee:3f:67:28:0b:0a:
         6d:f5:93:7c:43:8f:f8:03:05:5a:c7:64:de:d9:3a:b9:3a:be:
         33:23:4d:2c:d2:81:51:51:ad:5c:b8:0d:c2:52:8a:6b:55:94:
         40:d5:f9:84:b4:ea:a9:3e:d0:53:b1:7f:72:1a:29:aa:91:aa:
         bb:04:61:39:39:d8:8e:a1:4c:8b:06:99:e1:35:e9:4f:ed:84:
         2c:91:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:18:15 2025 by rpki-client