This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
File:                     a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa (raw, json)
Hash identifier:          pxI6ukW7lz1jdu4rJokSQAU/aUZK1EkGM+XDPbpT4CQ=
Subject key identifier:   89:39:63:81:5D:C5:3F:7A:1E:C8:3E:D6:72:3E:3B:7C:FA:1B:83:9C
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584BDFC090653B2B6BEF8B0DD400
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
Signing time:             Sun 16 Nov 2025 02:00:31 +0000
ROA not before:           Sun 16 Nov 2025 02:00:31 +0000
ROA not after:            Sat 14 Feb 2026 02:00:31 +0000
asID:                     13445
IP address blocks:        144.196.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:df:c0:90:65:3b:2b:6b:ef:8b:0d:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Nov 16 02:00:31 2025 GMT
            Not After : Feb 14 02:00:31 2026 GMT
        Subject: CN=3dd98cb8-2f44-442e-9cd4-292d429d8be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:da:49:56:a8:58:ff:d5:3a:0d:cf:28:8a:
                    bd:a1:6f:9d:17:99:0e:9a:9d:47:bb:82:e9:50:af:
                    cd:6f:97:8e:cb:03:3e:cc:89:40:19:c7:6c:79:7c:
                    eb:6f:8a:7d:91:d5:62:4e:0b:f4:25:fc:bc:18:c3:
                    d2:33:7c:b8:c6:3b:d0:0d:49:58:c8:e5:97:1f:c2:
                    15:fc:9b:78:b2:56:85:c2:88:94:05:c6:c8:fe:46:
                    d4:2e:84:0c:c1:90:e6:77:68:c3:d2:28:0d:f3:f3:
                    7b:56:f5:c2:78:69:ce:9f:82:2e:23:c0:12:1a:02:
                    ef:67:2b:a6:ca:62:8a:d2:97:82:7b:3b:a3:69:60:
                    1d:40:b1:b8:9b:41:d7:fc:7f:de:20:38:c4:d2:e9:
                    9f:7a:54:e1:c3:96:a2:3a:69:65:6f:b7:85:83:f9:
                    33:13:b1:cc:28:48:db:bf:0a:99:3d:df:aa:5a:2b:
                    c3:54:a5:1c:03:14:b4:11:3e:60:fc:58:82:0d:c4:
                    df:1b:c1:77:15:ca:03:80:e6:b8:40:68:10:7d:88:
                    a5:68:f2:37:db:aa:68:63:c7:cf:59:56:04:60:f1:
                    42:b8:6d:dd:c6:a7:1d:d9:e0:e8:37:e7:37:a2:27:
                    5f:2d:48:83:8b:58:a9:90:8d:44:fb:1f:5f:73:af:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:63:81:5D:C5:3F:7A:1E:C8:3E:D6:72:3E:3B:7C:FA:1B:83:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:c2:de:fc:51:c2:34:4a:00:7d:55:60:c9:86:0f:7a:c1:c8:
         e1:c5:31:e7:81:ea:86:40:df:8a:6a:67:60:89:83:02:1f:92:
         39:9c:af:fa:59:33:35:7b:fb:ba:59:58:49:6e:2e:91:d9:09:
         5c:6b:78:8c:db:35:ed:a9:48:00:db:fc:60:ca:0d:44:6b:5b:
         b8:24:af:f4:a0:07:ae:a9:0e:76:76:86:1e:6c:83:e6:e0:62:
         63:33:c6:98:75:8d:45:32:49:f6:17:14:c7:cb:08:5a:0f:81:
         0e:4b:5f:89:6d:80:34:06:9c:1e:aa:55:6a:b6:fe:b1:8f:46:
         89:c7:ad:ed:70:d2:10:4f:63:f0:24:dc:5b:a2:e3:63:fa:09:
         0b:b8:61:94:e0:0b:d3:5b:4d:8c:78:ac:a8:67:a1:75:0d:48:
         80:80:30:ed:c8:b1:99:42:ce:34:36:bc:2a:4f:9f:0c:e6:9d:
         31:a3:40:ae:5a:87:5a:1b:bb:88:86:f6:ac:94:63:9b:3c:dc:
         ac:e2:0c:4c:71:01:6a:0d:69:20:db:a5:50:93:70:2b:d8:ac:
         8e:59:53:18:42:87:27:e8:a9:d7:41:80:c4:63:62:79:91:55:
         0a:97:c2:30:95:a8:a1:a3:5e:1d:13:63:e4:5c:49:81:12:88:
         f0:71:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 11:39:15 2025 by rpki-client