This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
File:                     bb18ad33-5add-3198-87f4-b7c59f066532.roa (raw, json)
Hash identifier:          RqqS7OYlnnVvBhScMW5zmyZdujr++xk7ayAyrk0c4vU=
Subject key identifier:   9B:24:DB:1D:EF:7A:6D:04:65:B5:CC:43:AA:2E:23:1F:72:74:D0:F6
Certificate issuer:       /CN=e7557763-e46b-4ec1-afa8-bcf257b54911
Certificate serial:       010D0C9F4328584BF8E0B25E94B504D023647DC0
Authority key identifier: 20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
Signing time:             Tue 25 Nov 2025 02:00:31 +0000
ROA not before:           Tue 25 Nov 2025 02:00:31 +0000
ROA not after:            Mon 23 Feb 2026 02:00:31 +0000
asID:                     29831
IP address blocks:        128.254.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:e0:b2:5e:94:b5:04:d0:23:64:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7557763-e46b-4ec1-afa8-bcf257b54911
        Validity
            Not Before: Nov 25 02:00:31 2025 GMT
            Not After : Feb 23 02:00:31 2026 GMT
        Subject: CN=9ff4414f-baf6-4b11-87b5-baad17e11a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:3f:81:dc:d0:53:cb:dc:3f:ff:de:fa:2a:
                    e0:f3:07:ea:78:c0:6b:11:53:f3:9d:2f:c1:4b:9a:
                    c0:03:0f:84:f1:d1:51:76:0c:80:30:4a:82:46:d8:
                    ed:55:ec:9d:6c:8f:d1:9c:36:15:ff:97:04:fc:a4:
                    5f:f6:c7:99:88:29:99:fc:27:f9:fa:a9:16:8f:8d:
                    b8:cd:0c:ce:f9:82:84:8d:e3:f9:17:2f:3c:8b:b4:
                    0b:dc:87:18:61:e5:b8:ce:f5:00:1b:46:9f:0a:8a:
                    90:e8:81:b6:9d:72:1a:77:59:5d:87:1f:f3:d1:74:
                    5f:8d:a4:4c:09:ee:f7:ca:d0:ab:b5:ea:90:90:11:
                    41:66:70:d0:33:cd:ce:e6:f1:f5:6a:80:dc:a9:26:
                    0c:ac:01:ed:76:b3:c8:dd:a2:9f:7f:2e:87:13:58:
                    a7:f8:e0:d6:62:44:84:20:c7:f5:13:e1:03:56:f4:
                    0f:3d:4c:13:1e:fd:6f:c0:bf:e6:7f:29:6c:5c:70:
                    97:54:7d:5f:fa:98:84:03:2c:3b:92:0e:9b:86:70:
                    ac:9f:6e:ad:3c:01:65:a6:a5:97:e3:a3:4d:b3:6b:
                    73:89:17:7c:6f:32:14:f8:a9:fb:c4:ec:10:f9:57:
                    1c:07:4f:68:fd:d8:07:d5:25:44:9f:15:d4:4a:9e:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:24:DB:1D:EF:7A:6D:04:65:B5:CC:43:AA:2E:23:1F:72:74:D0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl

            X509v3 Authority Key Identifier:
                keyid:20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:56:da:0c:54:65:ba:f9:d9:fb:9d:31:30:e0:d5:ac:3a:
         50:2e:88:1a:54:4e:f7:7c:a9:9e:68:e5:ae:3b:c7:ed:8b:32:
         8d:1d:4c:7f:6a:01:7f:fd:d8:a5:28:38:3c:44:cf:a6:c7:a4:
         ad:fc:05:fd:c5:8c:e6:7a:12:1d:69:2e:09:cb:2b:13:07:b9:
         e0:7b:64:a3:12:17:c0:0c:75:0b:fc:93:e0:1d:38:7a:02:92:
         a1:94:bf:99:93:d2:f0:1c:24:ec:a5:cd:75:c5:d5:cd:47:66:
         b3:5d:93:a2:94:f1:e5:74:81:40:e0:46:d7:29:01:c4:b1:1f:
         6f:32:d0:84:d9:fc:38:c3:ac:ca:a2:03:e0:69:ba:e2:fc:8c:
         4c:57:09:f8:78:ec:79:28:ef:78:91:da:06:d3:28:39:40:37:
         aa:87:a2:f1:54:3e:7e:e9:fc:67:7a:0b:7b:2a:32:75:04:2e:
         3f:24:d1:cc:c0:ed:16:8d:c8:c2:19:3f:52:eb:df:87:b4:61:
         5d:e4:81:4d:d4:a1:3b:35:f2:61:8c:f5:44:41:c3:b5:36:93:
         06:ed:c1:9e:2c:09:6f:a5:9d:bb:61:4d:cd:e2:c2:4e:08:38:
         32:81:b0:2d:8b:a8:59:24:ee:e4:6b:99:05:00:ec:61:85:bf:
         28:55:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:23:15 2025 by rpki-client