This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa
File:                     d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa (raw, json)
Hash identifier:          cy/Y2wr+7wMHagj++1XUMOV+hGB9hRwaM6VB80MTrxs=
Subject key identifier:   3B:B8:02:BC:D8:64:DF:B0:B6:80:CC:7E:DE:B0:BD:1D:40:1B:4A:CF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584BD6105D4BEF2FC4BC19426600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa
Signing time:             Wed 12 Nov 2025 14:43:40 +0000
ROA not before:           Wed 12 Nov 2025 14:43:40 +0000
ROA not after:            Tue 10 Feb 2026 14:43:40 +0000
asID:                     141672
IP address blocks:        38.94.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:10:5d:4b:ef:2f:c4:bc:19:42:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Nov 12 14:43:40 2025 GMT
            Not After : Feb 10 14:43:40 2026 GMT
        Subject: CN=639b336d-8b9e-467f-aed1-15161778bc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:41:dc:29:df:60:e6:ff:69:98:24:e7:0c:
                    13:20:76:44:7a:11:76:d4:f3:22:48:d1:bf:06:76:
                    39:57:88:84:ab:55:ce:0e:05:26:62:50:d3:4b:1f:
                    71:59:35:6b:14:29:0c:e7:e2:3d:4a:22:1d:bf:19:
                    43:18:62:69:bf:00:e2:4e:14:76:d5:76:dc:f0:0a:
                    e4:74:29:ba:ae:8f:95:ab:9e:79:f4:d7:f8:c8:22:
                    1d:dc:23:c4:53:07:49:ef:c3:18:f2:42:d7:8e:5c:
                    5d:c2:7e:eb:d6:a0:7c:15:c6:ad:b3:64:56:6d:e3:
                    34:4a:ed:00:02:04:29:c8:25:4a:41:75:2a:ea:f3:
                    f4:79:e1:ca:4a:01:6f:7a:10:c7:53:e8:b6:19:86:
                    90:9c:da:20:70:a9:28:41:f6:ca:b5:1b:90:f5:7a:
                    41:0d:9f:ba:d5:02:10:5b:a9:c5:ee:5a:4b:57:12:
                    8b:9f:82:1a:7d:ae:b0:43:bd:2c:bd:5d:fd:11:38:
                    98:41:0e:a4:95:d0:32:f4:f5:08:d2:3b:23:2e:f7:
                    d1:22:26:8e:a9:d8:7e:b0:2f:22:14:5d:ac:50:91:
                    7b:24:1d:ee:ff:1c:6c:9a:23:b2:b4:1e:86:82:d9:
                    8f:0b:3c:84:cf:b4:e4:ba:8b:6a:b4:dc:f0:7d:86:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B8:02:BC:D8:64:DF:B0:B6:80:CC:7E:DE:B0:BD:1D:40:1B:4A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1574be1-35c4-3999-afb6-ae3b9f2d2412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.94.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:bf:b0:3c:7d:ef:3c:e4:b5:9e:9a:18:0b:5c:1c:d8:f0:
         40:ec:0c:58:ff:5f:cc:af:65:8e:de:68:2e:27:e3:22:54:25:
         c3:b0:b3:d3:cb:81:df:15:6e:c0:29:19:07:41:99:14:89:bf:
         f6:27:e1:9b:85:4c:68:11:01:15:03:c3:b6:fa:90:8b:60:6b:
         2b:52:00:02:70:44:d6:5b:fc:59:3a:67:96:ac:3b:16:a5:9a:
         84:8f:78:f7:f8:7f:3c:3e:35:e4:89:b0:89:5e:4b:6e:a2:e4:
         6f:cb:a6:38:7e:b3:c5:9f:bd:12:e2:2f:ac:10:14:37:7e:21:
         42:e4:94:78:99:21:10:0f:64:56:ea:d9:4b:02:d8:86:b1:fb:
         82:45:ff:d9:81:69:25:78:db:38:7c:35:60:07:a0:b6:d5:8e:
         dd:a2:62:20:38:4d:6a:a2:cd:41:fd:60:21:a5:9b:43:e5:c0:
         6d:0e:50:8e:85:43:7b:b8:e5:b3:1a:56:29:fe:10:bf:a7:d6:
         b0:87:15:05:a8:0f:53:0d:7f:25:aa:a3:58:10:85:7f:eb:84:
         12:6d:11:57:12:20:0f:f3:25:d4:f0:b2:f9:cd:cd:ce:c7:05:
         4c:73:62:67:d4:9b:c2:cb:7c:7c:e5:ba:fd:d6:cb:bd:89:76:
         13:0a:91:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvWEF1L7y/EvBlCZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTExMjE0NDM0MFoXDTI2MDIxMDE0NDM0MFowLzEtMCsGA1UEAxMk
NjM5YjMzNmQtOGI5ZS00NjdmLWFlZDEtMTUxNjE3NzhiYzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIpB3CnfYOb/aZgk5wwTIHZEehF21PMiSNG/
BnY5V4iEq1XODgUmYlDTSx9xWTVrFCkM5+I9SiIdvxlDGGJpvwDiThR21Xbc8Ark
dCm6ro+Vq5559Nf4yCId3CPEUwdJ78MY8kLXjlxdwn7r1qB8Fcats2RWbeM0Su0A
AgQpyCVKQXUq6vP0eeHKSgFvehDHU+i2GYaQnNogcKkoQfbKtRuQ9XpBDZ+61QIQ
W6nF7lpLVxKLn4Iafa6wQ70svV39ETiYQQ6kldAy9PUI0jsjLvfRIiaOqdh+sC8i
FF2sUJF7JB3u/xxsmiOytB6GgtmPCzyEz7TkuotqtNzwfYYrRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDu4ArzYZN+wtoDMft6wvR1AG0rPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDE1NzRiZTEtMzVjNC0z
OTk5LWFmYjYtYWUzYjlmMmQyNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJl7kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4Pv7A8fe885LWemhgLXBzY8EDsDFj/X8yvZY7eaC4n4yJUJcOws9PL
gd8VbsApGQdBmRSJv/Yn4ZuFTGgRARUDw7b6kItgaytSAAJwRNZb/Fk6Z5asOxal
moSPePf4fzw+NeSJsIleS26i5G/Lpjh+s8WfvRLiL6wQFDd+IULklHiZIRAPZFbq
2UsC2Iax+4JF/9mBaSV42zh8NWAHoLbVjt2iYiA4TWqizUH9YCGlm0PlwG0OUI6F
Q3u45bMaVin+EL+n1rCHFQWoD1MNfyWqo1gQhX/rhBJtEVcSIA/zJdTwsvnNzc7H
BUxzYmfUm8LLfHzluv3Wy72JdhMKkas=
-----END CERTIFICATE-----
Generated at Tue Nov 25 15:45:23 2025 by rpki-client