This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/31afb580-3865-313b-a0f0-dd016c717eac.roa
File:                     31afb580-3865-313b-a0f0-dd016c717eac.roa (raw, json)
Hash identifier:          ZpvGp9CcftakN7HOhZgWzk2afklhh5i8wOhDapQqYMg=
Subject key identifier:   80:88:28:BE:6A:6F:40:23:BF:8C:5D:69:81:14:FF:B8:45:8D:10:65
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584BD8C5CFF795AA6831986F4090
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/31afb580-3865-313b-a0f0-dd016c717eac.roa
Signing time:             Thu 13 Nov 2025 14:00:38 +0000
ROA not before:           Thu 13 Nov 2025 14:00:38 +0000
ROA not after:            Wed 11 Feb 2026 14:00:38 +0000
asID:                     31898
IP address blocks:        144.25.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d8:c5:cf:f7:95:aa:68:31:98:6f:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Nov 13 14:00:38 2025 GMT
            Not After : Feb 11 14:00:38 2026 GMT
        Subject: CN=bc023797-1072-49f8-ac87-0c674fc171ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:fe:fd:29:4a:70:f5:d3:b1:8a:43:9f:19:
                    9e:90:df:ae:a9:60:81:56:22:6a:e3:f6:cc:95:1a:
                    65:dd:1e:0d:ad:fb:33:41:ae:72:ca:5e:27:a6:41:
                    da:24:47:92:46:f3:40:91:14:ef:a6:80:f2:ee:28:
                    aa:9e:80:70:4c:63:09:5b:6a:be:57:76:52:06:54:
                    aa:ff:77:79:b9:64:a1:f2:ca:98:3f:52:c4:65:65:
                    ec:ad:e8:c5:0d:e5:47:a5:1f:03:af:d0:cc:81:0b:
                    72:d3:23:64:17:dd:7b:16:06:87:61:f1:2a:4a:15:
                    35:5a:44:84:d7:33:61:e8:93:c8:3c:f7:f5:76:9a:
                    96:b1:1c:bc:35:fc:a7:3c:1f:68:45:f2:16:72:42:
                    41:11:e1:e4:8b:f2:ee:46:ae:43:36:89:db:2b:61:
                    b0:d0:1c:a0:a2:63:31:b6:56:1a:a9:51:26:50:5d:
                    22:2a:53:d2:52:37:d9:ad:03:ee:7f:d7:52:58:f0:
                    79:4a:07:e5:f4:4d:91:5c:af:8c:99:13:30:24:09:
                    df:4a:46:b0:6e:12:e0:0c:a6:41:6e:a9:ab:34:ca:
                    3a:74:50:3d:70:70:9e:75:ce:86:89:5b:ae:6d:9b:
                    c2:a6:c3:15:eb:90:03:7b:58:8f:75:af:90:19:39:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:88:28:BE:6A:6F:40:23:BF:8C:5D:69:81:14:FF:B8:45:8D:10:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/31afb580-3865-313b-a0f0-dd016c717eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.25.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:7a:6c:6c:9c:90:42:2b:32:eb:5f:e4:e1:e2:49:fc:54:
         58:5f:04:2a:27:85:95:e5:3d:72:a8:40:59:64:a8:e4:af:7b:
         d1:80:52:22:f9:a6:2c:1d:4e:92:5f:86:4d:f2:a4:a8:59:c6:
         0d:83:42:f8:9b:9e:fe:22:14:04:bf:62:99:0e:c4:6c:74:7b:
         7b:99:f6:45:82:05:56:a4:46:8f:cd:d2:e2:b9:e4:63:89:56:
         28:8f:53:7a:69:bc:fb:46:49:f1:97:56:73:a4:e0:7f:8b:9f:
         2f:ad:d1:f2:ea:dd:0f:4e:f1:44:75:90:91:d8:c9:8b:90:67:
         66:0b:03:a1:19:5b:22:c5:b3:27:e1:76:ea:0e:f8:a8:88:1a:
         bf:62:bc:19:63:19:21:09:97:32:9f:24:49:df:11:ac:e4:28:
         d0:2e:c1:4f:e5:66:0d:eb:82:b1:ad:ed:16:75:5b:7d:c1:56:
         00:8f:ae:c5:27:d2:f7:6b:c6:03:28:68:fd:f4:58:f9:83:ac:
         03:32:72:bd:6c:32:e5:17:7d:03:12:56:ab:f0:95:06:08:e9:
         e2:db:c3:15:9c:ec:aa:d1:a7:c6:a0:a3:c7:04:1b:48:8c:df:
         5f:70:08:b4:59:c0:ec:65:2d:e3:f4:81:75:5d:af:09:05:75:
         49:9a:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:28:20 2025 by rpki-client