This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa
File:                     3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa (raw, json)
Hash identifier:          YrnhQFuNRycYytePBHnhplLHaFEjiijA2fFp25wfYv8=
Subject key identifier:   A4:7F:0E:5C:E7:72:FD:98:CC:0A:1F:AA:64:C2:15:F4:DF:56:2E:67
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584C2DEB8A181F85E1BB477E4F80
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa
Signing time:             Sun 14 Dec 2025 02:00:31 +0000
ROA not before:           Sun 14 Dec 2025 02:00:31 +0000
ROA not after:            Sat 14 Mar 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        209.169.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2d:eb:8a:18:1f:85:e1:bb:47:7e:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Dec 14 02:00:31 2025 GMT
            Not After : Mar 14 01:00:31 2026 GMT
        Subject: CN=67bf6be4-3957-4135-ac16-914e50a1a76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:b4:10:47:12:9d:c5:8e:c2:71:ff:6d:1e:
                    b4:25:ce:d0:0d:8a:eb:15:6a:d1:74:ce:ed:4b:6c:
                    a3:31:9d:ef:85:fd:ca:d0:45:74:64:df:47:f5:c0:
                    a6:23:2d:63:56:9d:14:74:26:0c:7d:a7:09:02:ec:
                    33:59:85:4e:98:a3:95:eb:45:3e:16:ec:63:96:34:
                    fb:50:5c:69:cd:40:f8:ca:25:b3:b0:34:67:00:2f:
                    94:db:52:95:d2:03:52:7a:24:fd:06:f9:92:3e:dd:
                    a8:79:03:8e:3a:63:10:ff:c1:4b:9a:cd:52:64:db:
                    73:14:f1:83:c7:d6:9a:6a:db:0c:bd:53:41:0f:46:
                    55:80:21:97:32:27:78:4a:62:96:39:eb:6f:75:73:
                    77:16:83:2e:35:41:eb:d3:79:63:09:05:ae:63:ef:
                    e5:c8:55:f0:1a:de:52:72:9c:0c:c9:72:df:b4:31:
                    a6:c5:c0:98:b4:71:04:07:cb:8e:03:a5:7c:8a:af:
                    e1:54:35:f5:33:85:f8:a8:26:df:2b:4c:04:d3:b4:
                    b9:bd:91:03:23:9c:02:7e:4f:3b:5a:a4:a2:dd:7c:
                    7e:85:05:d9:b4:d9:bd:bb:58:a4:16:f3:41:d4:56:
                    10:4a:6f:d9:1c:1b:8a:41:49:e9:5f:42:dd:d7:ae:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:0E:5C:E7:72:FD:98:CC:0A:1F:AA:64:C2:15:F4:DF:56:2E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:ab:99:dc:7d:0e:35:a0:2b:e7:6d:96:fa:c1:8a:53:15:
         3b:1c:9b:f7:85:90:eb:91:bd:38:da:e7:83:85:72:ff:10:43:
         f5:0f:79:47:bf:ed:ed:3d:fd:c0:e1:75:a3:a3:67:39:06:34:
         90:cc:98:83:61:20:8b:2a:0f:d9:bb:d6:83:2c:ef:93:5d:77:
         0f:ed:9f:28:f4:68:b4:79:79:d2:94:9b:cd:28:32:a1:cb:c6:
         2c:9b:d9:5e:7f:ca:7c:32:2c:47:2f:0e:b5:b8:b6:42:2a:7e:
         4c:b2:68:67:30:e9:99:02:ff:52:a7:32:9e:c4:10:e5:d1:8e:
         e6:46:dc:8c:f6:4a:55:86:fc:a3:09:3d:8d:63:77:bb:ec:9d:
         b3:06:fb:d6:2b:ff:ce:eb:14:1a:8f:0b:d2:c1:45:a4:ed:ae:
         8a:d2:50:2c:e2:3a:48:bf:f3:7d:8a:c5:9b:5c:1d:5e:9a:a3:
         b7:52:53:9e:54:5e:7c:91:fb:45:d2:f5:24:b7:6b:a2:c6:67:
         7e:47:50:74:a2:25:0b:51:98:44:6b:fe:ea:f5:c3:d0:3b:74:
         45:46:95:54:f8:0c:eb:45:26:5f:e5:fa:3f:ac:14:e1:14:ea:
         26:a3:01:9c:93:93:4c:b4:53:71:7e:70:20:d1:bf:dc:84:14:
         14:6b:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:56:51 2025 by rpki-client