This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa
File:                     858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa (raw, json)
Hash identifier:          rQzH3Dsl446JFfaDNPpS9h2dbq8tfWVKnZN2489BAQY=
Subject key identifier:   82:CA:50:0E:4E:67:89:23:1D:21:48:64:1E:40:84:C6:3C:89:D2:03
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584BD8C5B85D5E226015CDA7D680
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa
Signing time:             Thu 13 Nov 2025 14:00:38 +0000
ROA not before:           Thu 13 Nov 2025 14:00:38 +0000
ROA not after:            Wed 11 Feb 2026 14:00:38 +0000
asID:                     13576
IP address blocks:        216.249.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d8:c5:b8:5d:5e:22:60:15:cd:a7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Nov 13 14:00:38 2025 GMT
            Not After : Feb 11 14:00:38 2026 GMT
        Subject: CN=93b78713-de54-40b4-ab40-c7a415190a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:d6:c4:aa:ee:f8:66:c7:a1:38:eb:69:5a:
                    3f:e7:09:24:b5:93:66:5a:20:79:47:7c:3f:ac:68:
                    ba:fb:53:86:72:f8:67:0c:a4:e2:97:ab:d2:8b:f5:
                    d2:60:5a:47:e3:7d:92:af:5e:9c:d6:08:43:7c:3c:
                    b0:00:71:58:a8:97:1f:7e:6f:3b:b6:5d:04:ae:b7:
                    08:e1:88:0e:7f:b2:9d:b6:67:71:df:d8:cb:ce:5c:
                    07:55:da:e1:b0:3b:0d:03:71:e4:5e:48:09:d3:ef:
                    aa:8f:98:42:33:a6:b5:c4:69:2a:7d:48:bf:aa:1a:
                    cc:00:a1:45:d4:1e:19:56:5b:b3:96:89:80:95:ff:
                    54:65:e5:72:d7:63:7f:3f:c9:98:91:11:fa:ad:ba:
                    d3:1b:8d:d0:f0:f9:92:49:d7:8a:38:d5:6d:1d:52:
                    06:e4:9a:03:74:b7:d8:9a:c5:d6:ef:98:8b:12:af:
                    fe:71:a2:ba:08:9e:e2:14:11:9f:f1:9a:e1:84:ec:
                    44:27:8c:ec:38:63:96:96:b1:16:ea:95:18:e9:6b:
                    c0:dd:5b:00:0b:26:98:91:c7:8b:32:a4:48:19:fb:
                    fb:36:1a:0d:60:97:c6:5f:da:ec:c7:cc:3e:23:a3:
                    60:e3:c9:8b:03:d2:6c:2c:2a:43:ff:49:16:2a:ed:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CA:50:0E:4E:67:89:23:1D:21:48:64:1E:40:84:C6:3C:89:D2:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9e:57:c9:e4:2f:8d:a7:eb:60:90:80:13:7a:45:91:0f:9c:
         fb:43:40:28:6f:27:5c:8f:95:44:cf:eb:2b:bd:d6:14:02:69:
         41:5a:4a:93:5e:d9:9f:2f:1d:25:aa:db:43:60:0d:53:b4:38:
         e8:85:be:b3:7f:96:aa:7b:0e:40:6a:d7:e5:da:b4:cd:72:89:
         97:9a:6f:55:78:11:30:e6:b8:fa:d2:ef:da:34:7c:11:6d:12:
         41:91:cb:44:b0:72:9f:3c:c0:41:a0:51:ee:48:d8:bd:a7:2f:
         0d:c1:05:0c:dc:86:e5:9d:38:ce:38:5b:f9:0a:bc:00:3c:67:
         03:c0:88:92:16:c1:8c:a0:42:13:d1:1f:69:4c:dd:9d:65:2c:
         7a:54:a0:23:e6:42:9e:d1:29:cf:91:fd:0f:08:70:d3:64:15:
         dd:bd:8c:d7:fc:cb:b3:3b:6f:a5:4d:88:80:8c:b8:84:54:12:
         cc:38:0f:a4:2d:87:ac:89:d8:38:46:18:e1:1d:79:aa:b8:9f:
         4d:d0:bc:22:ad:87:84:48:56:ad:5d:e0:c7:c1:e7:f8:1e:61:
         ba:b6:98:bf:d0:14:d4:ca:01:51:c6:90:96:e1:12:93:6f:a5:
         4d:92:ba:a3:e0:cb:da:32:05:73:ae:8b:bb:04:cb:bc:98:2b:
         96:5f:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 14:27:34 2025 by rpki-client