This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa
File:                     a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (raw, json)
Hash identifier:          10vMPLVDvmxSRDBA5vYVm9cDHkmNv8Gm5JBdZVt5irk=
Subject key identifier:   28:18:01:1B:07:26:A7:3E:BE:20:31:AC:CC:6D:01:9F:2A:1C:C2:A0
Certificate issuer:       /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial:       010D0C9F4328584BC96AEF9FDB52530E9EECE380
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa
Signing time:             Sat 08 Nov 2025 02:00:30 +0000
ROA not before:           Sat 08 Nov 2025 02:00:30 +0000
ROA not after:            Fri 06 Feb 2026 02:00:30 +0000
asID:                     18587
IP address blocks:        204.209.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c9:6a:ef:9f:db:52:53:0e:9e:ec:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
        Validity
            Not Before: Nov  8 02:00:30 2025 GMT
            Not After : Feb  6 02:00:30 2026 GMT
        Subject: CN=5629437e-5b55-4c6d-b599-1a1d25826a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:74:07:30:8e:c1:4b:d9:bd:f0:b1:b7:c8:
                    07:d9:52:a8:61:a1:99:a8:22:56:27:9a:a8:b7:b6:
                    fe:ca:15:38:bb:9c:2f:ff:be:88:55:63:40:0e:52:
                    e0:a5:eb:23:01:96:c6:4e:d2:56:1a:bf:23:6f:25:
                    93:63:96:03:ba:69:fa:9a:96:3c:7f:79:f0:25:92:
                    be:67:43:ec:fe:56:12:1a:23:ac:4a:f5:a2:12:a9:
                    4f:b4:2f:13:56:a2:ad:21:62:38:ed:de:c0:ae:5b:
                    a1:76:c1:56:94:bb:5e:fb:43:05:0d:08:74:70:47:
                    e0:8e:f0:9e:b6:df:87:6d:52:19:b6:52:15:94:51:
                    f7:c7:67:5b:0c:d5:05:1b:4c:96:a6:6a:08:9f:bf:
                    e2:fc:46:b7:26:1a:96:fa:3c:0f:e1:09:d1:6b:47:
                    60:56:d1:32:90:58:a6:ff:a8:a3:d9:fe:ad:1c:e8:
                    d2:1f:09:32:9b:e1:1d:45:d2:58:52:a9:75:95:ae:
                    da:16:76:31:ee:14:27:a0:10:8e:61:24:d5:2c:af:
                    80:f0:9f:aa:4a:ba:06:c9:7d:a4:40:28:3e:51:e1:
                    54:fc:42:f4:9b:80:16:2f:c8:ce:2c:ce:81:47:ef:
                    85:d4:76:aa:59:a2:d9:82:e8:5a:fb:c3:9a:e6:f0:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:18:01:1B:07:26:A7:3E:BE:20:31:AC:CC:6D:01:9F:2A:1C:C2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl

            X509v3 Authority Key Identifier:
                keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:5c:83:54:f2:48:15:39:57:28:85:e1:86:02:d9:de:48:
         4e:71:1e:f8:14:4d:b0:1e:48:b0:6e:3d:e1:bb:d1:ea:3f:ad:
         0e:08:50:7c:5a:8c:2b:4a:87:c1:ae:66:c9:75:94:90:da:b7:
         53:38:65:23:d8:d1:f0:f5:9f:99:10:8d:9a:4d:3c:cd:9c:99:
         e1:8d:c4:c6:41:46:5d:b9:52:a4:b5:be:45:02:b2:57:b1:99:
         71:56:6b:5f:51:9f:0c:a0:9d:63:c1:bf:65:33:da:de:45:db:
         19:e0:eb:6e:35:ee:5e:ec:86:86:ef:8e:b1:03:03:50:b1:ba:
         e0:bb:e9:83:6d:25:84:c6:b5:9b:26:1e:ee:a1:b6:3a:f1:38:
         f8:76:83:b1:c3:a8:e5:5a:b8:57:a4:bc:1b:2b:5e:c5:7a:95:
         27:a6:6f:21:ad:02:73:b7:00:97:96:96:78:3c:c1:10:f4:65:
         be:eb:90:84:9e:f8:8d:1b:b8:86:35:b7:07:5a:5e:05:2f:9f:
         c0:15:d1:8c:7b:10:74:dd:bd:02:88:09:13:c2:27:ea:46:52:
         85:14:c3:3f:56:7b:96:40:20:6c:e9:ee:5e:1f:e0:a1:a1:cf:
         3c:0f:2a:99:1d:53:11:41:dd:c1:06:ea:3d:10:f5:35:ab:71:
         0a:51:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:20:56 2025 by rpki-client