This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa
File:                     4deca47a-06dc-30d8-843f-52136e603e18.roa (raw, json)
Hash identifier:          r51R2zw5+zkrxRbtNRw/Sk2rJnA+DHSNZBd+OEXZ+SE=
Subject key identifier:   67:12:36:DB:8D:A2:15:15:DB:7A:71:27:CA:02:2A:1E:94:79:DB:53
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584C22C0D6EF3F5D81B159A672C0
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa
Signing time:             Wed 10 Dec 2025 02:00:31 +0000
ROA not before:           Wed 10 Dec 2025 02:00:31 +0000
ROA not after:            Tue 10 Mar 2026 01:00:31 +0000
asID:                     36642
IP address blocks:        170.88.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:22:c0:d6:ef:3f:5d:81:b1:59:a6:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Dec 10 02:00:31 2025 GMT
            Not After : Mar 10 01:00:31 2026 GMT
        Subject: CN=48ca9335-e73b-4807-9259-d60216a63063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:7c:70:7e:97:e8:93:71:28:52:99:8a:ac:
                    e5:18:f3:82:dc:f3:20:9c:9f:5c:a7:d7:9a:da:90:
                    6c:ec:84:36:17:66:43:b4:76:4d:a2:a8:93:32:25:
                    63:db:9c:1e:26:cb:3e:89:52:06:b4:9e:74:7a:e5:
                    30:18:8b:03:de:a3:c5:89:84:3e:79:54:6e:12:98:
                    d4:d6:49:3f:36:31:8f:1b:29:ea:49:dd:11:c1:c0:
                    56:5e:f7:a1:9f:2f:40:6e:a5:af:ff:96:c0:16:18:
                    c4:7e:bd:f2:78:88:c7:c8:cb:d4:50:8d:f9:f6:08:
                    19:18:40:c0:bb:4f:34:65:65:c6:8a:25:b4:6f:99:
                    74:36:99:cb:bc:47:d1:16:b7:30:7f:42:db:8d:f9:
                    e2:96:3e:46:50:75:db:20:7d:1f:d7:41:1e:61:05:
                    04:9c:60:51:ea:cd:73:6b:7c:d7:08:bf:95:8a:f3:
                    78:35:22:04:f4:1c:56:ee:df:4b:c9:f4:2a:67:99:
                    91:3e:ba:fe:90:f8:01:97:c7:d3:e4:d4:63:9a:ec:
                    bd:7a:4b:1c:14:3d:69:25:93:c0:4a:c1:dd:1f:93:
                    6d:3d:31:2b:3f:4b:d5:79:88:52:bb:d5:f5:16:7d:
                    2e:22:3d:63:29:3d:45:55:b6:b4:bc:e7:b6:ec:68:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:36:DB:8D:A2:15:15:DB:7A:71:27:CA:02:2A:1E:94:79:DB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:0b:6e:ac:85:52:62:3d:d6:b7:50:74:97:ba:5c:45:61:
         d0:20:29:96:0d:aa:29:e4:c4:10:c6:0e:ae:05:a9:c7:43:d1:
         c0:fa:c2:65:99:41:92:98:e5:0e:de:5b:5a:fb:8e:32:e7:a7:
         ce:87:13:25:29:fa:2d:96:0d:c6:70:37:78:bc:64:f2:6b:d4:
         ec:2a:01:3d:d3:e8:9f:00:30:05:4b:92:22:1a:51:9f:ce:23:
         98:a9:6b:87:44:2e:88:ac:d7:d9:3e:5c:29:64:80:e1:11:3d:
         48:9c:9f:d9:88:2d:41:51:cb:bb:3d:0b:fa:ce:cb:5f:1b:26:
         ce:ee:33:0d:de:77:47:3f:8b:ef:00:bc:f3:fb:a8:53:ff:e1:
         e5:f6:c2:a3:62:f3:80:58:59:79:b1:e2:39:05:35:81:40:36:
         c5:c3:2f:6e:1f:47:17:8e:21:c5:64:f5:1e:90:f5:f9:9b:ad:
         b2:4f:a6:da:de:fa:3f:cd:54:2b:3b:db:fc:c1:88:20:02:d9:
         08:df:b2:71:30:d7:f4:e6:e5:ee:8b:f7:f9:64:60:69:2d:29:
         3e:29:a0:c4:29:27:45:aa:ab:20:34:ff:e0:b2:19:11:3c:5d:
         53:4c:27:17:bb:25:2c:75:80:76:23:91:7a:3e:eb:6c:d1:46:
         07:37:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 04:17:45 2025 by rpki-client