This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/be04d40d-2f3d-3e09-8694-dd22a7f18446.roa
File:                     be04d40d-2f3d-3e09-8694-dd22a7f18446.roa (raw, json)
Hash identifier:          LrcXoNXLhKGB6jTV/eiBwMUilVjnAcLMrJ4MjBDeJNI=
Subject key identifier:   0B:A7:68:01:4A:96:C2:5C:8E:B1:5E:5D:84:0F:DA:99:35:76:C4:10
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584BE971E59608C07F6B7D4BC580
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/be04d40d-2f3d-3e09-8694-dd22a7f18446.roa
Signing time:             Wed 19 Nov 2025 13:20:32 +0000
ROA not before:           Wed 19 Nov 2025 13:20:32 +0000
ROA not after:            Tue 17 Feb 2026 13:20:32 +0000
asID:                     395383
IP address blocks:        192.157.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e9:71:e5:96:08:c0:7f:6b:7d:4b:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Nov 19 13:20:32 2025 GMT
            Not After : Feb 17 13:20:32 2026 GMT
        Subject: CN=caec3590-1371-4bbf-a70f-81146a965ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:dc:b7:bf:b5:f6:55:29:78:17:e5:29:01:
                    e1:fb:a1:c0:3a:fc:73:b9:7b:24:9a:1b:56:ec:ba:
                    3c:b3:6c:dd:b4:d8:f1:b4:e6:88:51:67:85:63:17:
                    9d:92:f0:65:f3:43:f9:31:aa:87:ce:94:c7:eb:9c:
                    f0:f0:da:db:92:e2:49:68:08:cf:66:88:02:31:60:
                    f5:71:95:86:54:3b:1e:ea:43:b4:a6:f2:86:d9:73:
                    91:74:f8:b8:47:ca:0c:02:e2:46:2a:76:c6:15:22:
                    ef:82:b1:77:69:df:63:c1:bb:a5:76:ac:df:e5:75:
                    a3:35:41:05:c2:10:8b:10:c7:75:5f:e8:30:da:4e:
                    61:f2:8a:42:8d:bd:d6:33:cf:a4:29:83:4f:96:29:
                    37:fa:91:71:c3:22:0c:02:82:b1:47:6c:cf:c5:11:
                    1a:a7:2d:24:03:f9:45:bf:de:28:e8:1b:0d:5d:1a:
                    ba:77:30:dc:dd:52:62:9c:3c:a6:ce:76:f3:35:81:
                    b3:12:64:e5:96:03:db:45:11:80:a3:38:ad:ab:f3:
                    a9:08:25:17:5d:e7:18:f0:ad:28:44:d7:d2:bc:55:
                    3d:f4:60:a8:f6:ec:b0:69:d4:8f:e8:2d:c1:bf:44:
                    c2:b1:31:e6:46:d1:88:de:40:28:8c:fe:f2:b7:4c:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A7:68:01:4A:96:C2:5C:8E:B1:5E:5D:84:0F:DA:99:35:76:C4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/be04d40d-2f3d-3e09-8694-dd22a7f18446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:ae:dc:b9:91:c8:47:36:57:b2:d5:f8:28:9d:a5:74:26:
         22:0a:89:2f:15:ab:88:d6:00:63:31:5c:f8:bb:39:05:64:db:
         cc:07:38:ec:5e:58:a2:e0:d0:3f:eb:77:df:6f:93:3d:9e:17:
         f9:60:60:7a:43:04:b4:02:86:97:9c:45:4b:8f:06:84:6f:79:
         ac:93:5c:8d:50:b8:ef:55:30:93:9a:be:42:91:d7:22:ee:21:
         89:7c:3f:b0:33:bb:10:1e:b7:d4:ec:55:71:e9:5a:7e:00:8a:
         3d:e3:34:33:6b:6a:df:9d:3d:d3:55:bf:1c:0d:44:3a:bc:e7:
         38:34:70:d1:5c:52:86:cd:bf:01:ca:4c:f4:36:aa:2c:2e:99:
         93:da:07:de:a3:ff:a4:94:e4:93:67:b2:42:f3:da:70:5a:af:
         1d:7d:c7:39:b1:78:84:ac:6c:fa:33:29:d2:9b:80:78:90:e0:
         b7:d3:f0:7a:db:b9:41:19:89:5c:e7:30:32:4b:d9:ad:e8:8d:
         e1:70:a4:e1:f1:c1:1a:91:5c:e2:b6:62:36:d8:a1:ce:39:3c:
         ba:43:d3:2e:15:b0:a5:94:02:62:78:a1:00:ea:01:8a:6a:1b:
         ce:e9:88:25:b2:2e:b8:ac:a8:67:a0:60:c3:26:1b:79:c1:bd:
         b0:a0:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 11:32:49 2025 by rpki-client