This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/412bea5c-bd35-32c0-89f2-12d964a74a4d.roa
File:                     412bea5c-bd35-32c0-89f2-12d964a74a4d.roa (raw, json)
Hash identifier:          JPaH/L/P9M1RGvyvF+5LRO6oEWvSRAnYdkQsSThylqs=
Subject key identifier:   6A:B4:FC:67:3C:84:68:68:CD:42:E4:74:E0:16:BF:1A:82:EB:9B:80
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584C242638181369DC6401E0E000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/412bea5c-bd35-32c0-89f2-12d964a74a4d.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     16591
IP address blocks:        136.36.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:38:18:13:69:dc:64:01:e0:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=73e3fa48-e2c1-490e-b2e9-2a850cc9a0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:13:4d:21:46:6b:15:b3:75:5d:9b:9b:51:
                    18:d9:87:63:ac:57:d7:ba:1d:df:da:71:1a:82:ec:
                    93:1a:1d:a4:f2:ff:0e:aa:fc:52:14:41:26:e9:01:
                    2e:b6:2b:41:62:bd:26:64:9b:52:46:64:74:d9:28:
                    96:80:60:59:26:8f:34:f9:24:09:2b:e5:31:3b:04:
                    d2:ca:8f:ca:5d:0b:a2:1d:61:3b:ed:57:e6:cb:7e:
                    1d:c7:03:35:b9:75:47:b3:2e:5c:46:17:de:c2:a2:
                    6e:25:4b:21:c7:31:21:bc:7f:1a:6f:7f:78:58:f7:
                    e6:47:ae:43:6e:f6:93:a0:f2:30:ce:13:37:67:a5:
                    fc:b2:be:47:82:dd:95:76:56:63:30:50:1b:85:cb:
                    e9:f9:c1:18:6f:a5:43:e5:86:77:f7:86:a6:c9:6e:
                    02:5f:cb:46:af:46:31:c6:df:60:d3:d6:8f:bd:98:
                    3e:d9:da:d9:e2:65:c5:36:94:dc:cc:fb:11:55:82:
                    af:a8:a4:40:75:be:9f:7b:f8:91:fa:46:ef:0a:2d:
                    d5:31:3c:d7:b8:44:92:e1:63:f5:b9:51:f0:bf:e2:
                    55:2d:b2:d8:24:4f:1b:3f:ab:37:08:33:76:aa:56:
                    21:81:45:10:59:62:da:1b:17:2d:0f:27:05:6e:c9:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:FC:67:3C:84:68:68:CD:42:E4:74:E0:16:BF:1A:82:EB:9B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/412bea5c-bd35-32c0-89f2-12d964a74a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:6f:b7:85:09:6d:e9:29:ac:8b:46:2a:2c:b0:d4:37:8c:
         5f:19:bb:1a:9c:64:d3:62:28:06:c7:f1:47:8f:f0:67:b0:98:
         b8:98:d9:bf:2f:58:b8:b4:59:bd:f9:9d:af:a7:18:37:3d:24:
         81:aa:5d:5f:4a:ad:92:37:d7:f8:90:21:36:e2:5c:7e:85:0f:
         47:5c:4e:75:87:6b:fc:2d:e1:22:33:73:26:10:21:3e:36:46:
         3f:a7:52:5b:28:06:ed:31:a4:e8:58:5f:c0:4d:ac:26:42:20:
         df:98:7f:b4:bd:60:68:e4:f7:dc:0e:bc:67:e6:ce:ac:f5:55:
         d1:e9:9b:b8:49:2c:94:27:e2:d8:11:24:44:6c:28:02:b5:7f:
         2b:b3:b6:18:63:f7:a6:d9:2c:ac:60:97:bd:af:06:26:71:83:
         e4:a4:bd:11:dd:dc:d6:b8:52:a1:cd:1d:1f:33:f6:3b:48:8f:
         6d:83:7b:f2:1e:c2:f4:aa:e2:d6:77:2d:de:57:a8:97:9a:d2:
         c6:9a:39:10:53:fe:80:66:31:f4:85:7e:b2:49:bc:79:79:68:
         1a:61:32:86:65:05:e0:72:9a:ef:a2:4e:6e:c9:f7:f7:c7:0c:
         eb:94:bc:20:c0:a7:8d:71:68:5c:52:cd:96:9f:b1:0e:04:54:
         9c:2e:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:32:26 2025 by rpki-client