This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa
File:                     41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa (raw, json)
Hash identifier:          ZD/npBQI6kRqkzOOt7XIg/e7StbzL8DXpXUThyWxzoQ=
Subject key identifier:   45:2D:01:73:40:20:05:38:9B:07:0F:5C:4C:BA:06:73:A6:82:69:0E
Certificate issuer:       /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
Certificate serial:       010D0C9F4328584BC552C478E06458D028BC6800
Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa
Signing time:             Thu 06 Nov 2025 14:48:43 +0000
ROA not before:           Thu 06 Nov 2025 14:48:43 +0000
ROA not after:            Wed 04 Feb 2026 14:48:43 +0000
asID:                     393462
IP address blocks:        192.35.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:52:c4:78:e0:64:58:d0:28:bc:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
        Validity
            Not Before: Nov  6 14:48:43 2025 GMT
            Not After : Feb  4 14:48:43 2026 GMT
        Subject: CN=2a5de9a9-20fd-48bc-81a7-58eb236c3f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:9c:58:47:a1:55:31:f4:ef:97:fc:e4:68:
                    95:b2:64:39:aa:ba:61:83:da:19:c7:1a:32:1b:0b:
                    05:8f:13:11:4a:fc:53:1b:79:9d:b2:2a:4e:93:ce:
                    0d:dd:96:02:e4:bb:9d:be:7e:83:8f:34:87:3a:2d:
                    79:d3:8a:f7:fb:94:c9:b9:8f:98:6a:f7:3d:f9:5f:
                    df:c3:a5:66:a9:95:69:ac:62:1d:0d:2e:2e:18:64:
                    28:c7:82:62:d7:55:a1:3f:2c:01:7f:5a:b4:71:62:
                    94:d5:0e:0e:86:75:a3:f4:54:df:e7:31:c0:93:39:
                    28:8b:27:7d:9d:ee:d5:ea:e9:03:b7:7c:20:05:d5:
                    ff:50:03:20:22:c8:34:02:4d:de:7e:3c:32:d8:46:
                    3b:a5:be:79:62:b7:5b:2e:41:6e:2d:87:20:80:ec:
                    1f:42:55:8b:20:ba:fe:30:bb:c6:79:24:08:c5:af:
                    95:f1:e7:ef:e1:d5:b2:60:f8:ce:45:1f:44:d8:f1:
                    df:4c:07:d5:b0:7c:1f:ce:02:66:7b:39:b6:ad:89:
                    f4:93:3b:23:d7:15:68:ce:7e:74:c1:57:ed:60:e3:
                    33:72:34:90:6e:74:32:a7:6a:cf:59:4d:46:07:ad:
                    2a:9b:10:3a:d4:ab:4c:3d:b1:1b:8b:83:87:13:de:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2D:01:73:40:20:05:38:9B:07:0F:5C:4C:BA:06:73:A6:82:69:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl

            X509v3 Authority Key Identifier:
                keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:97:26:8d:37:7e:e7:26:fe:73:78:bc:af:c1:1d:d1:df:e5:
         59:95:d5:f6:d4:0d:de:fd:3f:7a:a2:b7:84:8d:bc:f2:1d:ca:
         31:d2:f1:ed:42:f3:f8:c0:d9:7d:52:58:7d:9e:f3:fa:a3:4d:
         6b:47:59:93:73:26:76:ee:26:0d:57:34:7b:0e:b1:a5:3c:ec:
         5a:14:e0:b0:d2:ca:71:8e:43:50:84:41:4b:22:7e:18:b0:67:
         22:a4:a4:1e:c3:86:31:5a:78:c7:12:70:f7:d9:c3:1c:8d:75:
         ef:4b:cd:80:55:e2:d2:c3:8e:99:91:c6:d4:c5:dc:1b:b1:05:
         52:a1:7b:80:d5:96:5c:ef:58:99:19:68:95:1e:3d:4d:f2:db:
         7f:c1:75:57:89:75:62:06:65:0c:12:05:10:94:e1:69:99:3f:
         21:ad:8a:0d:36:35:f1:7b:89:ea:2a:da:72:d3:a4:18:34:0f:
         e6:6f:3f:b6:2a:83:57:ae:94:47:2f:31:d8:16:15:56:68:18:
         8e:94:a9:35:d0:e8:8e:e4:25:d9:f0:6d:7c:35:c6:d9:0f:71:
         37:14:4c:0e:43:f8:5e:4d:67:03:57:ad:e5:ff:79:ba:be:17:
         89:5f:ee:37:e6:ed:df:b4:f3:40:d3:8b:7e:b9:84:d3:75:f6:
         86:d0:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 07:17:16 2025 by rpki-client