This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa
File:                     afba448f-444e-3ef6-90f6-f3e3076cdc26.roa (raw, json)
Hash identifier:          q4tcSuSzW43SO8p8ExJKQUrExl9PexlbsOqCKjYSEZw=
Subject key identifier:   AE:EA:DE:6D:C9:D6:CC:AC:2D:1C:4F:C9:1A:E6:6B:29:60:42:1C:1E
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584BCF0074C75F5F7CF6D227D100
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa
Signing time:             Mon 10 Nov 2025 02:00:31 +0000
ROA not before:           Mon 10 Nov 2025 02:00:31 +0000
ROA not after:            Sun 08 Feb 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        138.1.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cf:00:74:c7:5f:5f:7c:f6:d2:27:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Nov 10 02:00:31 2025 GMT
            Not After : Feb  8 02:00:31 2026 GMT
        Subject: CN=b6043bd5-7971-4a90-a1fb-907cfb82f101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:27:2d:93:e3:6f:c1:bd:63:bb:2e:34:c3:
                    7e:8b:45:21:6f:b8:d7:12:a7:8e:6d:06:ef:51:35:
                    97:e2:0b:c6:5d:93:b6:ae:e5:27:8a:b4:d9:30:9f:
                    29:b3:f5:9a:68:5f:d2:77:59:aa:99:e5:19:fc:1f:
                    1d:26:77:7b:bb:b7:93:d8:12:7b:ef:bb:ad:6a:88:
                    67:ae:0c:69:66:3b:53:04:3b:7f:93:f4:c8:6d:e0:
                    f4:e1:51:9a:f0:58:ac:9b:ec:4a:06:bb:2e:80:be:
                    5d:7b:0e:c0:2f:52:59:b6:de:89:20:60:f6:a4:76:
                    78:ba:7d:a7:59:f5:89:b5:38:63:7a:21:70:72:aa:
                    68:07:f1:b9:98:a8:4d:ee:d0:1c:84:f3:41:dd:c8:
                    6c:01:9b:be:0d:c6:fc:6c:d4:73:35:ad:0d:64:78:
                    94:85:ee:ed:1a:ee:e0:f7:bb:ef:c6:ff:49:29:c5:
                    eb:8d:2f:1f:85:60:33:15:50:75:82:90:37:fe:bd:
                    ab:60:82:34:62:f2:8c:98:e4:32:a9:0c:11:f3:20:
                    63:2d:c2:a8:5a:4e:cd:7a:b6:f8:11:9d:28:40:6f:
                    57:90:6e:50:26:21:b6:ac:36:96:2d:9f:76:e7:7a:
                    a4:65:76:5e:3d:e7:59:4c:08:e9:f1:7e:d6:cb:84:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EA:DE:6D:C9:D6:CC:AC:2D:1C:4F:C9:1A:E6:6B:29:60:42:1C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/afba448f-444e-3ef6-90f6-f3e3076cdc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.1.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ec:ed:85:33:28:59:ac:f1:e2:06:93:ae:9d:b0:2f:57:91:
         03:72:85:1d:ea:94:c8:71:fe:e6:40:ca:92:aa:c7:39:61:9b:
         08:3c:8c:26:89:67:52:69:fc:c3:c0:3d:bb:1f:85:ef:60:1b:
         ee:0b:92:e3:71:11:4b:ca:1b:2b:99:d5:fa:97:93:33:ad:1c:
         63:65:75:89:f1:d6:66:5c:8d:67:70:bf:91:37:50:37:ae:79:
         fb:e8:ce:e2:e5:9f:f7:7e:1d:0c:56:fc:55:59:2c:71:0f:bf:
         bb:aa:8d:5f:c4:ae:a7:bc:36:3f:29:94:2f:e3:6f:ad:0f:c5:
         b5:44:51:75:41:71:c8:4f:b8:3b:02:1e:66:12:b9:ba:72:59:
         f0:0b:0d:f5:57:d8:58:c9:c1:6e:de:7c:cc:cf:99:28:43:a2:
         79:fd:83:f7:69:a9:1b:6d:5c:29:0d:1e:e2:55:1d:fe:78:2c:
         6a:86:a0:10:e9:fa:f2:84:59:7b:cd:24:df:30:a5:07:62:58:
         f9:51:7b:f6:be:e2:fa:71:ab:0f:96:fd:ce:2b:1a:2c:11:d5:
         ca:1c:fd:98:9f:2a:57:00:f4:42:49:43:c0:46:0b:69:24:1b:
         9d:da:de:80:f2:20:90:81:a4:54:e2:9b:ee:35:20:3e:5e:49:
         8c:73:f7:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAHTHX1989tIn0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk
YjYwNDNiZDUtNzk3MS00YTkwLWExZmItOTA3Y2ZiODJmMTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaonLZPjb8G9Y7suNMN+i0Uhb7jXEqeObQbv
UTWX4gvGXZO2ruUnirTZMJ8ps/WaaF/Sd1mqmeUZ/B8dJnd7u7eT2BJ777utaohn
rgxpZjtTBDt/k/TIbeD04VGa8Fism+xKBrsugL5dew7AL1JZtt6JIGD2pHZ4un2n
WfWJtThjeiFwcqpoB/G5mKhN7tAchPNB3chsAZu+Dcb8bNRzNa0NZHiUhe7tGu7g
97vvxv9JKcXrjS8fhWAzFVB1gpA3/r2rYII0YvKMmOQyqQwR8yBjLcKoWk7Nerb4
EZ0oQG9XkG5QJiG2rDaWLZ9253qkZXZePedZTAjp8X7Wy4TvOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7q3m3J1sysLRxPyRrmaylgQhweMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYWZiYTQ0OGYtNDQ0ZS0z
ZWY2LTkwZjYtZjNlMzA3NmNkYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/s7YUzKFms8eIGk66dsC9XkQNyhR3qlMhx/uZAypKqxzlhmwg8jCaJ
Z1Jp/MPAPbsfhe9gG+4LkuNxEUvKGyuZ1fqXkzOtHGNldYnx1mZcjWdwv5E3UDeu
efvozuLln/d+HQxW/FVZLHEPv7uqjV/Erqe8Nj8plC/jb60PxbVEUXVBcchPuDsC
HmYSubpyWfALDfVX2FjJwW7efMzPmShDonn9g/dpqRttXCkNHuJVHf54LGqGoBDp
+vKEWXvNJN8wpQdiWPlRe/a+4vpxqw+W/c4rGiwR1coc/ZifKlcA9EJJQ8BGC2kk
G53a3oDyIJCBpFTim+41ID5eSYxz94U=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:28:02 2025 by rpki-client