This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa
File:                     c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa (raw, json)
Hash identifier:          EYW7AWtinX+2/i7utlONUQtk5hbyGZMR0T0pc9ZXGJI=
Subject key identifier:   44:5F:9A:88:B3:9D:D1:BF:F8:29:14:FC:13:7B:9A:4C:0C:57:67:3E
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584BD7605E0590F06C26E30FFB00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa
Signing time:             Thu 13 Nov 2025 02:00:31 +0000
ROA not before:           Thu 13 Nov 2025 02:00:31 +0000
ROA not after:            Wed 11 Feb 2026 02:00:31 +0000
asID:                     8069
IP address blocks:        20.153.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d7:60:5e:05:90:f0:6c:26:e3:0f:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Nov 13 02:00:31 2025 GMT
            Not After : Feb 11 02:00:31 2026 GMT
        Subject: CN=fde32b45-85ba-4d77-9a83-d58c6dcb928a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:23:d2:cd:4d:96:38:41:01:31:54:8b:91:
                    b4:43:ca:15:a6:54:90:60:c4:49:c7:e8:08:5d:e0:
                    71:63:9c:bb:ea:be:69:5f:c9:4e:49:3b:85:d6:2f:
                    55:22:64:3c:aa:6c:fd:f2:8a:58:ff:ed:50:2a:6c:
                    17:38:13:ca:9d:82:ad:52:08:47:70:64:21:2a:3b:
                    b0:7c:34:8b:cd:f8:50:ba:36:34:a2:a3:49:6d:53:
                    ca:a6:a7:1b:b6:2b:ca:06:89:a0:53:ce:5c:da:96:
                    5e:13:af:7c:07:ad:6a:66:d1:16:66:d9:ae:6a:e2:
                    e1:ef:29:2d:91:ce:e8:0e:1a:7c:f2:eb:84:2e:43:
                    cd:8a:8a:6e:5b:af:d4:d3:93:77:5b:4b:dc:eb:bd:
                    10:b4:f2:60:aa:85:18:a1:61:63:eb:31:32:31:2a:
                    a9:6b:65:cb:5b:e4:db:05:d3:c3:d3:b0:e3:d0:a2:
                    f0:70:c9:5b:f0:6a:55:45:62:ea:e1:c2:69:b6:17:
                    de:bb:8f:d7:62:e3:42:9d:39:59:52:e1:9a:1a:fd:
                    c4:7e:94:c6:6e:1a:31:cc:ff:b9:12:53:84:da:68:
                    42:03:49:41:3f:de:38:88:ff:72:fa:18:81:6c:32:
                    21:ed:53:fb:6a:e8:c9:45:a9:58:a6:44:00:5b:71:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5F:9A:88:B3:9D:D1:BF:F8:29:14:FC:13:7B:9A:4C:0C:57:67:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:a5:a7:fe:f7:8a:b9:52:c3:c9:62:99:60:e4:e4:8e:55:
         9f:62:6a:97:ea:4e:c8:6a:aa:fb:45:ef:1c:db:84:d0:21:6e:
         65:b2:7c:70:a0:17:bb:a1:75:b8:a3:eb:98:5d:de:15:2d:30:
         64:12:e6:df:3d:1c:ce:10:21:fc:5b:2c:d5:79:ae:03:ed:f0:
         29:4f:0a:50:7d:a4:01:1a:08:b1:7b:d4:b1:ab:4f:a1:60:ef:
         dd:5d:ee:58:98:49:34:e2:64:fa:c9:fe:1a:36:a8:73:c5:ee:
         c0:69:1b:d2:4c:83:17:40:b0:5c:27:a0:71:8f:eb:55:f2:aa:
         bc:e0:6f:13:b3:cf:40:14:33:37:36:fd:1e:93:80:be:9d:ff:
         a2:ca:4a:ad:f9:bf:a2:c9:54:c2:1f:a6:9c:bd:4b:d7:43:b9:
         34:ff:2a:89:cc:65:69:3d:b1:4d:27:02:a1:f0:1f:7a:0d:5f:
         08:0e:15:7b:e4:70:89:7b:19:d6:4f:d9:13:5d:b4:3f:fe:25:
         17:8a:2f:6b:71:a3:4c:4a:40:21:08:a0:0d:16:c4:d2:4e:19:
         a5:ad:78:4c:f1:fc:e2:5d:e9:01:6f:21:8c:b8:12:81:0e:00:
         cf:9d:50:5c:6a:5b:25:ad:40:f9:ee:40:d0:10:2f:10:93:2c:
         61:a5:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:59:42 2025 by rpki-client