This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/c9d102d8-0e75-3195-888a-eed61ed93779.roa
File:                     c9d102d8-0e75-3195-888a-eed61ed93779.roa (raw, json)
Hash identifier:          6UqJNnCMGBNq8raMPG5pkQkNIei3YWc+wgBHsMrAlMQ=
Subject key identifier:   D9:99:69:A0:72:2D:6D:A1:73:73:D4:D9:89:B6:B2:65:C5:A3:B1:06
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F4328584C0DD0F65E62F63E27ADE9B180
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/c9d102d8-0e75-3195-888a-eed61ed93779.roa
Signing time:             Tue 02 Dec 2025 14:00:39 +0000
ROA not before:           Tue 02 Dec 2025 14:00:39 +0000
ROA not after:            Mon 02 Mar 2026 14:00:39 +0000
asID:                     197537
IP address blocks:        216.40.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0d:d0:f6:5e:62:f6:3e:27:ad:e9:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: Dec  2 14:00:39 2025 GMT
            Not After : Mar  2 14:00:39 2026 GMT
        Subject: CN=3c3d2e56-764e-443c-899a-b36b1bdb55b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:88:4e:5b:e1:c1:1f:7a:68:66:55:37:2b:
                    a6:5c:28:6d:4c:a8:a4:15:ce:04:a8:e0:4c:b5:38:
                    91:b9:2d:ec:1e:a5:c5:ba:7a:5c:41:94:fd:6d:21:
                    eb:35:68:61:35:67:61:ec:7b:79:d8:8b:65:44:20:
                    b9:7c:d8:dc:fb:b6:f9:e4:5f:78:70:c4:a5:e8:1e:
                    a4:89:cc:11:c6:79:08:f8:03:21:f3:06:e9:98:d7:
                    b0:52:c2:73:5c:33:a7:73:f8:43:5b:7d:29:06:d1:
                    0e:8c:78:95:3e:c6:1a:3b:58:be:e4:ad:1c:0f:5b:
                    f4:c4:85:ef:d2:df:c6:7f:6f:55:6f:90:3a:c1:e6:
                    25:7e:46:96:02:1f:58:d3:09:75:29:b7:85:fc:c4:
                    59:f7:f9:42:e1:17:d7:5c:e1:6f:bf:b4:30:b0:8c:
                    44:e3:ea:cb:3c:ff:00:68:5e:c7:03:d2:50:a4:e2:
                    a3:19:90:ad:27:46:2a:55:ab:a5:46:2d:32:00:12:
                    5e:33:56:db:2b:07:d9:22:22:4d:dc:bc:41:ed:2a:
                    05:f7:fd:f4:8c:be:5b:31:34:08:ae:f6:81:25:8f:
                    c0:33:62:8c:a1:b9:66:16:16:08:f3:2e:1d:f3:43:
                    89:f4:7d:fa:bd:ac:ea:13:39:55:f9:1a:9d:e7:54:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:99:69:A0:72:2D:6D:A1:73:73:D4:D9:89:B6:B2:65:C5:A3:B1:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/c9d102d8-0e75-3195-888a-eed61ed93779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:c0:71:f0:9e:9e:4d:a4:58:c3:ea:43:04:f8:42:a3:b1:
         b4:89:00:51:8f:1e:9e:3f:1d:40:3a:47:b9:f2:eb:fc:a1:c3:
         87:11:b3:d5:1a:a7:a6:c6:6b:82:36:6d:7f:b2:34:31:22:1c:
         b7:55:84:20:24:2a:a6:e0:c9:8f:c4:c7:2b:38:f5:9d:b3:f2:
         b1:2a:16:5f:8f:29:59:cf:cb:32:f5:bb:0a:78:33:c3:57:de:
         a2:4a:f1:59:07:de:da:a8:9d:02:72:1b:05:9d:0e:d2:00:4f:
         31:f5:a6:d6:9e:37:e5:68:63:91:96:03:56:3f:5a:e4:8b:b4:
         b2:3d:8f:66:26:2c:d2:e1:30:02:84:44:5f:4c:ef:04:37:4b:
         55:2e:7d:3a:a0:fc:38:8d:88:a5:0b:82:83:1d:04:f4:ef:bd:
         f9:dd:70:28:aa:68:ac:cc:de:81:61:01:92:59:d2:ee:08:e7:
         46:3f:e7:0b:71:90:bd:27:b4:8f:61:de:e5:f8:5e:34:f2:05:
         e5:5b:6a:db:2a:7f:4b:32:02:57:7e:d1:c9:eb:17:a7:e7:78:
         88:ea:35:71:8e:39:b0:4e:38:28:f3:65:b6:09:de:17:16:68:
         28:5c:af:b2:da:a9:59:5a:5f:fc:90:a2:ff:9c:a6:a0:ce:67:
         2d:c6:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 06:55:22 2025 by rpki-client