This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d6f4d1f-8053-3029-aca7-121773bc8778.roa
File:                     1d6f4d1f-8053-3029-aca7-121773bc8778.roa (raw, json)
Hash identifier:          uNa7XUnMNnXg5ZRpY4QebhCyS+MUcdeJAzomqHcnsso=
Subject key identifier:   81:F5:2C:EA:95:1F:6A:66:DF:4E:D1:C2:B9:FF:1C:C4:DF:4B:D6:D4
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584BCC35BACFC6EE7EED34FE2AA0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d6f4d1f-8053-3029-aca7-121773bc8778.roa
Signing time:             Sun 09 Nov 2025 02:00:31 +0000
ROA not before:           Sun 09 Nov 2025 02:00:31 +0000
ROA not after:            Sat 07 Feb 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        138.2.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cc:35:ba:cf:c6:ee:7e:ed:34:fe:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Nov  9 02:00:31 2025 GMT
            Not After : Feb  7 02:00:31 2026 GMT
        Subject: CN=5529e68d-187b-4464-89d3-e6c162686e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:44:b8:75:25:ad:04:0b:73:e0:98:6b:77:
                    46:d9:70:9d:22:7b:89:07:8b:42:dc:e7:70:d0:9d:
                    b7:98:a2:aa:a1:13:79:31:43:ca:db:d6:79:66:3a:
                    ef:28:cc:ee:19:09:9d:fc:0a:e2:7e:4d:ea:20:0b:
                    e3:da:74:91:22:b1:12:29:25:97:12:f5:74:f2:19:
                    30:7b:44:6c:cb:c1:1d:88:3e:8f:33:e3:9d:07:b7:
                    ed:8b:11:a1:df:d4:9e:1b:c8:fe:c4:a2:85:b9:a8:
                    0f:87:06:68:e5:a6:f1:86:ac:81:39:ae:fa:98:55:
                    de:c6:b6:37:31:bd:4b:7d:92:dd:c6:86:c4:2e:a4:
                    c4:18:58:a7:be:36:53:10:9d:17:66:b8:59:56:1f:
                    73:7b:43:b8:86:1e:3b:37:81:2f:b4:dc:c3:39:21:
                    bb:a5:89:da:33:e1:7e:8a:ea:67:a1:fd:6e:b6:ce:
                    af:fd:cc:ff:cb:11:d7:5d:5d:79:a9:bd:2d:99:93:
                    2b:17:b6:73:43:c5:f3:fb:9d:23:18:c5:3c:5e:7f:
                    fb:3d:c0:13:1f:08:f9:8b:e8:8a:e0:72:3b:62:81:
                    a0:3e:d4:91:19:17:49:ea:5b:22:16:0f:1d:ad:91:
                    e0:eb:57:2e:96:65:c3:a2:25:f2:bd:09:66:63:6f:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F5:2C:EA:95:1F:6A:66:DF:4E:D1:C2:B9:FF:1C:C4:DF:4B:D6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d6f4d1f-8053-3029-aca7-121773bc8778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.2.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a6:9d:c4:dc:5a:6c:35:af:6e:d6:46:7d:54:5d:f0:ac:25:
         79:d1:dc:f2:88:34:90:04:f4:bf:92:7a:9e:e6:38:53:f3:92:
         54:a0:14:55:31:98:9f:f5:1c:79:84:cb:22:2c:3f:5c:bc:7e:
         e0:e1:21:02:41:15:67:9d:82:c8:5d:c1:b8:8b:e2:a6:cf:da:
         56:1b:e7:cb:34:cb:d3:e0:3b:e2:72:bd:b9:05:a6:57:80:6d:
         b9:1a:6c:3a:bb:07:b3:ac:32:70:f3:12:ae:78:48:5b:fe:c8:
         b3:f5:6f:46:09:f0:ef:8c:db:d0:19:b8:c9:50:eb:47:49:ff:
         64:25:76:8c:bd:07:a9:6e:bd:57:b2:5a:b4:e1:f7:d9:5e:3c:
         5d:88:f4:22:f3:4c:cd:33:e3:7b:91:da:e6:f6:71:a9:db:a1:
         ba:1e:c4:c3:eb:be:c9:3e:af:c6:12:fe:eb:a6:08:25:5d:a1:
         4b:f5:1f:97:2c:a0:69:0a:02:c9:1b:f9:bc:16:4f:bb:0f:c8:
         00:d6:6e:1e:df:e5:1b:71:77:9f:63:7c:50:b0:fa:22:d0:ea:
         0b:30:35:b9:5e:81:ac:49:00:aa:3b:a4:34:b7:99:c1:b9:6d:
         9d:8b:5d:e0:59:79:4e:63:62:c1:45:54:b3:39:96:16:c5:7c:
         cc:e1:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:28:20 2025 by rpki-client