This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa
File:                     e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa (raw, json)
Hash identifier:          NWrVAcZLd4w67eRLsh6eq70z18DOc5/ElTwHMAL/H6Q=
Subject key identifier:   1D:47:EB:91:85:57:CB:39:C7:8A:19:03:CC:48:3F:E0:8E:13:0B:69
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584C242683922B6BCCE652A81880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     16591
IP address blocks:        136.49.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:83:92:2b:6b:cc:e6:52:a8:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=aa4618f7-2de8-4d44-bd9d-7e995c0f78a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:54:28:04:6d:a0:7b:87:9f:7b:98:af:fb:
                    88:dd:7f:8a:b4:d1:de:f5:cc:6e:46:c6:a2:a5:76:
                    a1:cb:5a:48:df:67:0e:71:5c:5e:d0:62:7e:d6:0b:
                    28:f3:28:3a:a3:3f:dc:cd:0c:a5:15:18:50:ce:a5:
                    c7:ed:8b:1c:cf:c2:ea:20:42:ad:bb:48:22:04:d7:
                    ae:93:72:71:24:c1:1c:52:c2:36:41:c1:28:64:cf:
                    42:fe:4d:61:31:56:68:05:4d:23:28:96:97:2d:4c:
                    dc:2c:a5:1b:4e:1a:dd:ee:1e:be:23:b7:a1:45:cd:
                    0e:57:41:38:2c:69:ed:cb:85:bb:59:5d:18:45:a4:
                    2d:0c:e3:de:36:0d:81:14:2a:c4:3c:93:72:c8:a3:
                    cf:7c:9b:a1:cf:35:1b:fb:fd:78:0a:b0:f6:9c:4e:
                    ee:51:d9:37:52:00:cc:3c:b4:59:74:1e:57:16:93:
                    d1:43:f1:e3:9d:e5:a6:d4:79:e0:81:9a:7a:99:ed:
                    e5:8e:41:27:a9:58:b4:b8:b4:54:37:e6:2f:20:44:
                    ff:5a:d7:b7:3a:27:7d:01:6a:db:e3:5d:62:27:61:
                    98:9d:2d:cc:32:af:51:ce:38:06:92:e3:12:89:79:
                    59:d9:c2:95:a4:82:18:cf:bc:18:2c:15:5d:c5:43:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:47:EB:91:85:57:CB:39:C7:8A:19:03:CC:48:3F:E0:8E:13:0B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:d9:92:1a:df:61:e9:35:fe:1a:48:98:d6:44:b7:f5:3c:
         c8:39:a1:ee:4e:fd:a4:af:d3:57:7f:ed:7b:73:26:2f:11:a4:
         0e:e8:01:2a:26:94:cc:1d:64:94:b1:f0:c5:bf:0b:76:84:07:
         b1:18:38:d6:3e:f6:21:c4:ff:d5:7e:12:7c:d2:ff:48:3b:6a:
         f9:46:0d:5f:7c:f4:58:56:29:85:8a:9f:94:d4:db:b9:08:f5:
         76:00:8d:0f:43:fe:6d:6c:0c:f7:11:f9:e2:65:41:57:b3:2d:
         e5:f1:19:04:de:32:76:35:28:b6:a7:5d:30:18:b2:ef:fc:dc:
         27:ff:dd:73:80:cf:1a:28:c6:ae:c1:9b:84:9e:ee:9f:8f:88:
         a8:1f:c0:59:1e:b7:3e:42:72:da:57:d0:bc:97:cf:a3:a7:76:
         18:b8:e8:34:6e:37:72:a8:9d:74:72:34:ee:1a:4f:df:b8:79:
         e3:6f:d3:ac:b9:10:24:15:93:a0:49:02:ce:fc:a2:42:cc:93:
         85:6b:82:71:b2:4f:17:68:70:cb:20:7f:2b:42:9a:cc:d4:1f:
         85:df:2f:53:cf:60:0e:35:da:e6:1c:01:17:ff:6f:9b:21:2a:
         f8:84:47:88:7a:b4:67:88:dd:db:f6:b3:ec:5b:91:e0:57:17:
         9e:d3:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:31:43 2025 by rpki-client