This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa
File:                     caa9c6f8-021f-3be2-bae4-31f4834a4921.roa (raw, json)
Hash identifier:          CFYiecuooUtucIOlXf4+NvxdK1zy2aTBFOn0XkNfoQk=
Subject key identifier:   BD:0C:67:3C:E8:2A:E1:63:1A:F5:52:F4:4D:72:AF:9D:3C:2B:77:C6
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584C2C86428F3F8972230DDE4C30
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa
Signing time:             Sat 13 Dec 2025 14:00:38 +0000
ROA not before:           Sat 13 Dec 2025 14:00:38 +0000
ROA not after:            Fri 13 Mar 2026 13:00:38 +0000
asID:                     1239
IP address blocks:        198.16.70.0/23 maxlen: 23
                          198.16.72.0/23 maxlen: 23
                          198.16.76.0/23 maxlen: 23
                          198.16.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2c:86:42:8f:3f:89:72:23:0d:de:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 13 14:00:38 2025 GMT
            Not After : Mar 13 13:00:38 2026 GMT
        Subject: CN=220ffa52-6dc7-4223-8618-ae3488aff647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:bd:75:d8:f9:78:94:84:9d:a2:e6:70:4e:
                    f6:91:a7:48:43:da:61:5a:4c:02:ca:e0:62:d4:6b:
                    be:24:20:d3:54:b9:39:5d:08:f1:29:d6:c1:67:1b:
                    5f:5f:6c:77:c9:5b:a7:38:2c:64:4c:9b:5d:22:a8:
                    0f:c9:6a:a8:40:f0:18:b1:90:22:90:18:2b:1f:a6:
                    c7:7e:a7:9b:28:5e:b9:03:03:a5:3c:d5:6b:a7:b6:
                    e0:09:ea:aa:eb:19:60:06:22:28:10:50:65:73:72:
                    ae:cd:18:91:9c:23:03:8c:be:bc:43:8f:f8:f6:14:
                    d9:e5:e4:a0:2b:b2:b7:c5:17:b9:8f:e8:a0:d5:72:
                    41:08:44:94:32:4a:a0:d8:f7:41:fa:2b:f0:83:3c:
                    54:89:9d:b8:17:c2:7d:46:ab:d6:63:ae:0d:ba:65:
                    06:d4:66:a0:f1:9d:06:fc:9a:ed:bb:bb:77:0f:5f:
                    72:61:d6:06:89:34:d8:24:5a:7d:3f:39:aa:33:f1:
                    01:26:41:f5:85:ae:6d:43:7d:1e:67:da:36:fc:9a:
                    a0:1a:11:c0:f5:90:6f:07:e3:69:b8:6b:84:f6:28:
                    36:93:0f:62:26:86:a9:87:29:e1:81:a9:10:84:08:
                    63:35:2e:ab:c9:b4:57:1c:30:5e:62:9a:12:bf:8d:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0C:67:3C:E8:2A:E1:63:1A:F5:52:F4:4D:72:AF:9D:3C:2B:77:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.70.0-198.16.73.255
                  198.16.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:1a:1a:50:19:4d:ed:1e:24:8e:f7:c3:c2:4d:ee:3f:66:
         b8:70:a5:01:02:a8:7d:c2:b5:aa:bd:61:1b:10:92:b0:d4:a7:
         cc:7f:11:9c:af:a7:5d:97:0b:87:30:c1:c2:c0:ba:88:61:7b:
         40:9c:d1:89:ce:0f:d2:91:25:7b:14:97:87:46:bf:89:d7:5f:
         bd:39:ac:8d:d6:3c:3f:c5:aa:67:a2:95:b5:76:4f:59:36:0b:
         1e:f8:8b:4f:10:c3:bc:6e:b8:cf:97:46:62:7a:9c:ba:cb:bb:
         a7:56:df:d4:ee:09:02:a4:2f:c2:7f:9a:54:98:a6:ed:65:93:
         d5:88:0a:2f:8e:cf:fb:d1:25:8a:fa:a9:7a:33:01:6c:64:c1:
         95:bd:6f:cf:f4:df:46:ca:5b:be:f7:16:0a:34:ff:13:04:b3:
         41:2b:4b:a3:8c:ca:b5:cc:af:c6:f6:d5:86:a7:d5:f4:31:ef:
         91:eb:2c:08:8f:18:b5:f4:9a:c9:4b:3c:be:a0:bc:d4:00:f5:
         30:45:5f:7b:9f:ef:4b:2f:9f:6b:b7:7e:70:86:04:e9:42:ce:
         34:64:d7:b8:d4:ac:1f:60:a8:e6:d7:55:5b:2b:3c:f8:6f:3e:
         3a:31:08:be:ca:87:8c:d7:26:11:e6:c2:6f:6b:11:de:0e:68:
         3f:72:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:14:46 2025 by rpki-client