This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa
File:                     5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa (raw, json)
Hash identifier:          NriATuzzJEG/EJKTLJYSM8F9aW/FYRhKIejc3AdOpmk=
Subject key identifier:   C9:E6:6D:32:8D:43:15:33:5F:68:BE:A8:1E:A7:E9:42:70:7D:E4:2A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584BFA98D3438DAEAB3334640D80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa
Signing time:             Tue 25 Nov 2025 16:47:43 +0000
ROA not before:           Tue 25 Nov 2025 16:47:43 +0000
ROA not after:            Mon 23 Feb 2026 16:47:43 +0000
asID:                     272058
IP address blocks:        38.252.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fa:98:d3:43:8d:ae:ab:33:34:64:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Nov 25 16:47:43 2025 GMT
            Not After : Feb 23 16:47:43 2026 GMT
        Subject: CN=bf4a13c5-6bd2-4ce8-847d-8a1672cb0566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:ad:d8:b8:80:d7:af:62:a2:42:32:69:de:
                    e5:3f:39:0b:09:7b:7b:1e:31:63:e0:f7:a5:2f:1a:
                    b9:6a:d3:f2:6f:57:79:55:18:23:7b:cd:1f:ee:0b:
                    90:59:8e:fd:6e:23:7e:9d:b9:c2:ec:04:79:b8:a5:
                    2b:b4:a8:34:e9:b2:d2:b1:0c:7d:27:e8:af:d3:04:
                    2d:3f:eb:7a:93:18:1e:8a:e7:cd:c2:7f:89:7c:f9:
                    79:9e:9f:e5:49:cc:0c:b0:2d:9b:bb:6a:db:d5:54:
                    86:ca:f0:af:9d:15:79:32:61:53:d2:97:82:af:3f:
                    89:d2:5e:4a:72:34:a1:ce:63:db:51:ae:f9:72:08:
                    9d:48:79:1f:f7:29:ba:7f:55:c3:fc:48:b8:8c:40:
                    09:d7:33:79:d7:70:26:65:13:47:cf:1f:87:5c:c7:
                    8f:a2:27:b9:0d:ba:c9:74:d6:c4:c4:da:b4:2d:27:
                    dd:68:52:8f:d9:79:32:c9:1d:b9:54:c8:43:80:ab:
                    5e:35:9c:c7:00:59:55:13:29:76:86:a2:69:f3:1a:
                    a2:d4:99:e6:d8:24:ca:be:49:07:d6:35:6e:e4:53:
                    ee:e4:4c:88:a1:ab:be:ed:ab:ab:eb:81:dd:88:fc:
                    f1:5b:28:e5:4a:e5:cb:0b:b2:4d:b5:08:55:9a:de:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:6D:32:8D:43:15:33:5F:68:BE:A8:1E:A7:E9:42:70:7D:E4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c45f9fe-1ee7-34a1-b22b-91dd1daa7392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.252.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:15:d6:25:da:2f:56:da:55:aa:69:14:fa:d9:50:d1:78:05:
         98:29:73:cf:c8:c4:00:99:59:6b:42:f0:de:56:e0:c2:86:6d:
         36:b0:fd:ce:ce:79:61:85:0f:9d:1a:cd:d5:90:82:32:be:73:
         1b:fe:4e:f0:d6:a2:46:ed:21:9e:b5:53:fe:88:9f:e6:68:b7:
         22:26:24:a9:9b:3e:85:1e:82:84:f0:1a:62:b1:9f:34:26:90:
         63:61:f3:d7:82:68:3d:a7:2a:74:7e:72:d7:46:22:da:25:2d:
         6b:b3:8c:fe:30:ee:3d:e2:66:98:43:f0:2c:e7:71:20:82:1b:
         f9:57:da:ee:06:fa:5a:d5:75:04:1e:0a:b5:9f:2c:80:e1:f2:
         6e:36:df:f7:54:d0:77:0f:88:f5:a6:f1:60:e3:3f:8c:bd:df:
         9a:0e:2d:a1:cb:12:c9:fa:13:91:4c:91:21:aa:a3:ae:b9:8b:
         91:2b:ed:a8:d5:8e:76:79:4f:00:86:3b:56:07:e5:8a:92:78:
         5f:4f:9f:63:8d:70:ce:d6:37:24:fa:a0:77:fa:c6:dd:a1:43:
         85:ba:b4:f1:d1:ca:d3:43:84:1d:da:4b:7c:7a:99:1e:bf:30:
         55:63:21:84:a3:89:ba:b7:62:e5:47:2f:bb:48:b0:5c:24:fe:
         4d:19:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:25:52 2025 by rpki-client