This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa
File:                     2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json)
Hash identifier:          EOdjX0hyGZqpFsw63zfJ45zWTK4TYcy5W/5QE1ttPyY=
Subject key identifier:   1D:7E:80:5D:8C:3B:D9:F8:73:0E:82:4A:8D:E6:D9:CA:FC:C5:96:63
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584C242632724555551A2AC110C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     16591
IP address blocks:        136.57.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:32:72:45:55:55:1a:2a:c1:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=e05d9a09-1063-4ec7-9020-905c12fd13e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:2e:31:d1:cb:a6:5c:4a:5b:b5:6e:e5:1c:
                    12:01:ce:e8:4e:2c:72:a4:50:ce:de:e1:9e:cb:20:
                    30:31:48:05:9f:d3:06:f2:9a:4c:6c:f2:4a:9a:45:
                    65:ea:9d:12:a5:9d:9c:c0:6a:60:1c:48:ea:fe:3a:
                    a3:51:95:66:01:58:e7:6b:12:ff:46:24:59:77:f5:
                    91:e9:bf:ab:08:64:85:8e:2a:66:40:1c:15:bf:5b:
                    07:b8:32:d7:e6:dc:e8:30:93:33:be:ce:ed:9c:4e:
                    c1:dd:3d:9b:6e:bf:61:c3:00:04:d1:fd:69:c7:b5:
                    40:e4:38:e0:09:96:19:5d:d3:52:ac:2d:30:0e:d1:
                    15:19:39:42:87:b4:04:29:d9:90:04:dd:e5:d8:07:
                    c3:19:14:69:70:09:db:e6:f7:f1:de:b1:90:08:09:
                    54:b8:a9:85:26:d2:0d:09:7d:fb:57:22:e7:a7:f2:
                    c2:b3:86:9b:5f:e5:a8:e2:72:14:0d:3c:d9:84:f3:
                    3f:fc:27:e6:3b:6e:03:11:21:e8:a5:a4:fb:7e:ae:
                    ba:7c:d0:54:2f:e7:a6:93:3c:75:e0:d1:b0:38:3d:
                    99:89:e6:0b:03:ac:f3:a2:86:d5:27:e0:3b:e9:9f:
                    86:fc:29:38:6d:a8:84:43:d9:17:67:3f:93:f7:15:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7E:80:5D:8C:3B:D9:F8:73:0E:82:4A:8D:E6:D9:CA:FC:C5:96:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:c1:ea:5b:aa:31:02:ff:77:e4:7a:e5:2c:a4:d6:ce:e8:
         de:7d:42:91:44:ee:9b:ce:ea:67:24:e9:9f:af:73:eb:3e:bc:
         2b:8b:27:a2:a3:48:28:db:74:76:40:13:06:0a:85:cf:29:2b:
         f6:02:1d:71:4b:39:15:fd:61:f4:ab:9f:7e:42:ef:10:00:c9:
         2c:6d:be:01:55:c2:90:d9:0c:4a:6a:3f:b2:5d:4c:33:5c:c4:
         36:b4:c0:75:d6:d3:0d:06:52:d0:42:a6:15:a4:93:0d:80:73:
         ac:49:b8:32:e7:c1:a6:fe:0b:de:60:5b:94:0f:1f:c0:db:9e:
         c8:9d:b6:33:1c:61:b9:11:2a:d9:61:f9:a7:f1:d4:72:73:b3:
         0b:8b:dc:aa:9c:20:71:7b:1f:75:f9:34:8c:27:88:90:02:bd:
         b9:62:31:7d:af:06:b1:20:6e:84:0c:09:ae:bb:c3:08:06:28:
         11:32:92:a4:88:3c:14:4e:f8:7e:6f:6a:2d:ba:39:4d:ee:aa:
         bb:45:ff:45:29:89:b9:17:ae:6b:f2:c1:d4:7c:0a:5f:ae:5a:
         a4:70:c5:d3:66:f6:dc:e8:96:a2:bf:71:a6:b2:56:33:c9:5b:
         19:05:33:7f:e5:94:1d:a0:dc:1e:e8:7e:13:e7:65:1f:40:9c:
         fc:d4:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:31:44 2025 by rpki-client