This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa
File:                     a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa (raw, json)
Hash identifier:          eEvlxp1hLlp9N043BJ9WtSFaEybvpNOOkX112zj94Yw=
Subject key identifier:   AF:BD:8C:BE:F2:E6:9C:7F:AC:3E:B1:FE:2D:00:8C:8C:46:78:D9:4F
Certificate issuer:       /CN=9faf7a12-0176-44f9-9938-7bbccac3d238
Certificate serial:       010D0C9F4328584BEC50911F5D76A11D73B41E00
Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa
Signing time:             Thu 20 Nov 2025 14:00:39 +0000
ROA not before:           Thu 20 Nov 2025 14:00:39 +0000
ROA not after:            Wed 18 Feb 2026 14:00:39 +0000
asID:                     30399
IP address blocks:        149.112.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ec:50:91:1f:5d:76:a1:1d:73:b4:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238
        Validity
            Not Before: Nov 20 14:00:39 2025 GMT
            Not After : Feb 18 14:00:39 2026 GMT
        Subject: CN=0c71f1c3-0e20-4134-90a2-e821b634c16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:27:1f:ae:c3:3f:06:57:30:ac:4e:59:dd:
                    8d:66:f1:d2:14:90:ce:80:e7:e8:1a:c5:42:68:6a:
                    09:a6:60:0f:22:83:a7:f2:62:3a:3b:8c:1a:33:e5:
                    08:56:6e:a5:18:65:51:1a:31:9f:07:c7:69:3d:e7:
                    19:1c:57:b3:65:30:5d:42:9b:dd:c6:2f:10:16:b3:
                    1d:8b:fa:2c:69:42:1c:f3:bf:a5:af:89:d4:a3:3b:
                    04:f5:03:57:5f:6c:1c:4f:64:72:07:d2:72:a0:af:
                    3f:54:e8:bb:86:4b:dd:95:c8:a6:f6:d5:72:01:fa:
                    8f:b3:2c:d3:21:e7:a7:94:a2:6f:6c:be:c1:e4:9b:
                    ec:ad:9f:01:c2:1c:fd:f3:bd:b9:7d:a7:a4:ff:01:
                    a3:4d:cc:71:60:67:87:e0:63:64:2c:d5:49:67:99:
                    8e:39:db:a9:5b:f4:32:ec:e0:94:79:0a:11:58:9c:
                    82:c4:39:c7:98:ac:30:d2:a5:e4:df:ec:43:d0:3d:
                    48:a2:50:80:68:42:dc:be:8c:60:af:64:ac:64:45:
                    66:a6:34:1c:74:2a:b4:e1:a6:38:99:d5:f0:6a:f7:
                    39:1d:39:d2:5e:ad:7a:d2:e9:1d:fe:c1:07:9c:8a:
                    18:e5:ea:df:23:b1:dd:41:77:78:a4:67:6f:c4:c9:
                    de:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BD:8C:BE:F2:E6:9C:7F:AC:3E:B1:FE:2D:00:8C:8C:46:78:D9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl

            X509v3 Authority Key Identifier:
                keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:e2:ee:c4:aa:0b:77:de:7b:da:2c:f7:35:4d:f9:62:c3:
         70:7f:dd:11:01:78:7a:b8:9f:a2:ff:48:a1:1e:53:17:e7:2b:
         fd:33:3e:06:3c:e4:3c:2f:7a:4f:a5:81:05:15:bc:ef:44:16:
         fd:05:46:4c:f8:b0:a0:ad:34:7e:af:4e:13:00:59:04:93:58:
         37:dd:c5:37:03:4d:c7:ed:1b:af:c4:da:0e:80:d4:e0:95:69:
         6f:12:72:6b:04:80:73:0c:58:ac:ff:9b:2e:b3:ed:8c:02:0c:
         16:19:7d:87:16:04:9d:17:12:66:a1:be:b1:7f:a9:c5:53:0f:
         44:5b:47:56:46:13:30:fa:27:d3:4a:ab:8e:1f:23:7e:94:12:
         5f:c8:b9:bc:9a:8f:91:9d:8b:a2:05:12:b1:7e:d7:24:ef:a1:
         52:8e:50:c0:2f:dd:ba:f7:21:3a:40:06:8b:1a:76:cc:c1:81:
         95:9b:a0:57:eb:e8:92:f6:61:58:e9:ba:ce:5b:26:da:b8:7e:
         71:9d:ad:c3:92:e3:c1:5a:a3:75:c7:ef:fd:f8:71:e4:43:f3:
         bc:cd:d6:f1:b6:41:d1:d1:a4:d1:f0:f0:df:57:cd:65:13:84:
         74:4b:b5:e9:3c:8f:c5:df:f9:ae:80:e9:a6:9b:70:fc:fb:14:
         f8:75:f1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 12:02:17 2025 by rpki-client