This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
File:                     a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa (raw, json)
Hash identifier:          fd81QQvBCvHg6m2Kh3NB7/UVZRlMSrJHi3OqywYd2h0=
Subject key identifier:   38:49:5A:68:A4:C8:8C:C8:46:DE:A4:FD:B1:13:02:05:09:81:B3:D9
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584C29BB9A8E567DA05F03813300
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
Signing time:             Fri 12 Dec 2025 14:00:38 +0000
ROA not before:           Fri 12 Dec 2025 14:00:38 +0000
ROA not after:            Thu 12 Mar 2026 13:00:38 +0000
asID:                     36850
IP address blocks:        152.19.0.0/16 maxlen: 16
                          152.23.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:29:bb:9a:8e:56:7d:a0:5f:03:81:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Dec 12 14:00:38 2025 GMT
            Not After : Mar 12 13:00:38 2026 GMT
        Subject: CN=8319e80b-ced4-463e-bca5-a5d94f06e0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:9a:39:72:7d:08:e5:36:c2:38:60:46:8e:
                    d1:d7:aa:f5:a7:7a:36:ed:ee:e7:bf:ac:f4:a7:0f:
                    32:32:ea:e6:67:4c:96:93:5f:d7:68:1e:5a:c7:5e:
                    e6:a7:60:8e:aa:24:e4:06:1f:7b:63:c6:de:f5:ec:
                    c1:75:37:7e:5f:dc:3c:27:de:a7:3d:8e:df:f9:27:
                    d2:e2:79:0b:9f:22:d5:62:2a:16:2b:0a:1a:0b:19:
                    db:aa:66:b6:37:b7:75:1d:e7:cf:7a:76:19:e3:25:
                    f3:d6:c7:9e:86:53:5b:52:e7:ba:24:e3:5d:6f:f4:
                    13:2b:2d:3c:3b:08:b4:b3:5b:a2:e6:1a:8e:70:06:
                    36:4a:53:48:50:be:e1:37:5e:18:13:4d:09:30:06:
                    cc:29:d0:ad:99:ab:3b:19:4f:5c:e2:54:ed:9c:8c:
                    aa:d8:7b:38:26:41:e9:af:53:51:2e:39:87:b3:2f:
                    5a:ec:f3:32:cd:3f:05:32:d6:40:11:dd:ef:67:29:
                    0f:75:cb:1d:88:29:2f:ed:a4:6c:06:12:83:53:86:
                    0d:f9:7b:93:cc:96:75:2d:fc:fc:82:a4:75:a9:00:
                    ee:b4:79:23:86:89:32:e3:3b:fa:5d:4d:85:0e:93:
                    49:ed:1b:ce:e6:02:18:2b:76:2c:5a:a0:81:61:16:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:49:5A:68:A4:C8:8C:C8:46:DE:A4:FD:B1:13:02:05:09:81:B3:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.19.0.0/16
                  152.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:91:05:ef:a6:56:4f:71:6f:60:88:00:18:de:1a:95:a9:ae:
         c8:2c:eb:7a:8d:5d:7f:e6:79:47:e1:0f:ab:2c:ad:4f:60:4e:
         10:01:a3:f6:ee:30:f7:23:b4:20:fc:cb:ed:e0:73:b5:4f:8f:
         a5:fe:af:7d:6a:19:ff:80:cb:17:b3:44:01:8a:99:0c:5b:5f:
         70:6b:e8:77:26:78:ba:1e:52:f8:22:35:64:8c:00:b7:36:f8:
         3d:1d:33:73:1f:fa:d8:f8:2f:6a:b8:a9:d4:32:f5:59:62:45:
         dc:a9:60:d5:16:53:9c:fd:9a:46:25:f7:00:bb:8f:44:b3:40:
         3d:c8:e7:9c:20:8c:fa:58:b2:44:a3:67:19:4a:03:46:e4:a9:
         3c:29:c8:ee:79:ac:d1:9e:95:76:5e:06:56:21:e9:9c:99:11:
         2a:6c:8e:0b:8f:a9:ed:ee:28:23:23:e2:93:27:2c:ba:ef:1f:
         6d:ca:99:f8:e5:36:d4:41:18:2a:50:a0:1d:55:b5:07:91:01:
         1f:b1:80:80:08:dc:21:be:0c:55:df:55:87:2a:82:1d:39:0c:
         22:10:25:51:ea:a2:a4:b3:27:99:7a:3e:c9:ef:47:db:9b:7b:
         a0:b7:8f:d2:8c:c0:e1:c4:12:66:97:a3:f6:3b:da:f9:e1:d4:
         63:62:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 04:58:51 2025 by rpki-client