This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa
File:                     f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa (raw, json)
Hash identifier:          nzJ0NxgI+GfbnjVB4nYdVu31dilmCXD4oVI5tSIF018=
Subject key identifier:   3A:A2:67:F6:02:E5:1F:71:DD:09:5F:3A:14:52:5B:D2:FF:83:56:AB
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584C242644CF5BFB7F5E4B3F4FA0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     16591
IP address blocks:        136.35.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:44:cf:5b:fb:7f:5e:4b:3f:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=b5a9e633-94c0-46ac-8e0c-d733390310cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:a9:c8:1c:da:4d:97:52:96:05:6a:da:94:
                    86:7a:1f:4a:ca:44:0b:68:a0:b0:76:30:1a:e1:fc:
                    47:ac:fd:fa:17:fe:77:de:58:bd:a5:fc:df:ec:ca:
                    43:ab:5e:13:6f:40:dc:af:9f:02:24:c9:e6:c9:71:
                    d0:66:d5:12:72:fc:10:ee:d7:86:1d:13:9c:cc:de:
                    84:01:5b:fd:6a:f3:fd:a2:6f:7b:e1:03:39:3d:6b:
                    2f:42:2d:dd:eb:56:fa:bd:de:0a:b8:0b:d1:f5:e8:
                    0b:e1:fc:f9:b0:88:3b:b8:61:5e:98:60:44:02:84:
                    ec:bf:78:f5:51:4d:cb:4e:4c:59:d4:d4:1d:3b:13:
                    60:7d:02:f7:ae:dc:13:84:0d:70:b6:df:29:23:11:
                    48:a3:71:9e:36:60:c1:91:ae:55:94:a4:60:c6:86:
                    fb:06:38:8a:46:0e:1f:92:09:52:01:44:81:c3:32:
                    ba:0b:d3:9c:51:a6:42:92:ed:4b:c8:ec:26:4c:92:
                    8e:c2:81:4b:8d:8d:3a:46:61:6e:f6:71:7c:3f:d6:
                    ef:d1:25:6d:68:aa:d8:39:90:c0:dc:71:5c:69:89:
                    c9:df:27:bf:8b:2f:f6:0f:d8:d4:a1:4a:07:3a:51:
                    c3:34:f5:14:88:0b:77:4e:db:7d:cb:3b:c7:d8:0b:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:67:F6:02:E5:1F:71:DD:09:5F:3A:14:52:5B:D2:FF:83:56:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6b:47:87:bf:9e:93:ac:10:db:bf:01:b7:40:d8:c5:d4:6d:
         bd:d4:1a:d5:07:e1:2a:df:e4:94:96:34:1d:0d:85:9e:d4:c7:
         da:d3:5d:b3:3a:ca:c8:3f:dc:c8:5a:1e:0b:b6:b9:5b:8a:4a:
         61:2a:46:d7:a0:06:fb:90:c4:0d:58:3e:ec:bd:a5:c0:c4:84:
         a7:34:f5:b2:86:4c:7f:96:18:e7:a1:2a:5d:95:67:e9:64:ea:
         03:6c:dc:13:ea:ad:0f:5f:0f:7a:f4:15:b3:15:fd:53:31:0a:
         7d:27:45:85:a4:fd:66:a7:3a:bf:e8:b7:22:46:bb:7b:08:1b:
         a2:80:e4:59:78:ef:f7:fd:59:8f:a7:d3:83:da:75:56:23:a9:
         64:f8:a6:35:ed:8f:6a:95:5e:a8:17:59:b4:d5:63:6d:f5:12:
         1f:e4:63:ca:c8:d5:98:6a:8b:db:d3:f0:01:93:60:81:4f:95:
         ff:45:a8:02:b4:73:f9:10:e9:72:6d:25:06:4a:9c:b4:d0:90:
         b8:e7:87:21:bb:0c:9d:0c:f2:ee:4b:2b:81:18:3f:79:12:75:
         2c:43:a8:44:ca:5c:f4:c7:fd:c6:57:86:76:62:a1:2d:88:6d:
         e5:43:de:1d:1e:27:be:1d:bb:16:c6:2d:61:5e:fb:7c:45:30:
         42:4c:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:36:18 2025 by rpki-client