This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa
File:                     856820c0-94f0-388f-8125-843a0216e0bc.roa (raw, json)
Hash identifier:          S8jYAqItWI70QD/iOU14LNKbuuK5Sw5iSorRv9LmvZI=
Subject key identifier:   6F:96:D4:CB:A5:39:21:99:9C:01:EF:2F:38:28:E5:2B:C9:5B:0D:98
Certificate issuer:       /CN=ebf567a0-4cf8-429d-82b3-3d284a246421
Certificate serial:       010D0C9F4328584B9658D23E86795362D65D6E80
Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa
Signing time:             Mon 20 Oct 2025 18:57:55 +0000
ROA not before:           Mon 20 Oct 2025 18:57:55 +0000
ROA not after:            Sun 18 Jan 2026 19:57:55 +0000
asID:                     1421
IP address blocks:        199.47.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:58:d2:3e:86:79:53:62:d6:5d:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421
        Validity
            Not Before: Oct 20 18:57:55 2025 GMT
            Not After : Jan 18 19:57:55 2026 GMT
        Subject: CN=f89544d1-6780-4cb2-946a-691112644558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:34:4c:97:dc:71:8c:38:6a:f9:a9:5f:98:
                    97:b6:bc:4b:3a:94:1d:55:4b:63:be:5f:e8:8a:3d:
                    3d:01:f2:96:62:9a:c8:b0:e0:9c:c5:4b:af:19:03:
                    d0:5b:4f:0b:aa:71:87:81:72:60:cf:a1:0f:c5:ae:
                    ef:c6:d8:5a:c5:85:d9:9d:74:ae:2b:ee:a3:57:35:
                    89:2f:b1:e6:3b:93:08:bc:b2:af:73:65:b1:4e:18:
                    46:72:d2:5e:58:a5:0b:c1:80:a2:3b:ac:4b:20:78:
                    0d:d8:68:57:e7:60:38:61:30:49:50:09:a4:41:f2:
                    44:00:41:e0:c7:61:2d:b6:c3:76:ff:b0:39:62:ac:
                    0e:71:81:cd:6d:97:64:86:b2:f1:7b:86:42:27:6f:
                    7f:f9:f6:41:f9:4b:1e:79:1f:38:6a:c0:1c:7c:50:
                    8c:13:d5:24:4c:67:37:e3:2b:79:31:67:da:80:4e:
                    36:6e:7a:4b:17:4f:2f:c6:ec:73:ed:7f:1a:2f:24:
                    bf:ed:83:7d:00:03:34:8d:88:ad:b3:a6:1b:6f:91:
                    23:e0:25:c4:72:4b:af:66:7f:fb:ca:99:fa:5b:77:
                    6f:71:5f:20:d2:d5:47:98:a6:02:b2:a5:bc:d8:cb:
                    a7:a3:06:e8:f7:09:fa:e2:b8:13:c6:93:63:94:51:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:96:D4:CB:A5:39:21:99:9C:01:EF:2F:38:28:E5:2B:C9:5B:0D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl

            X509v3 Authority Key Identifier:
                keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:56:b0:2e:c8:e2:75:6e:b2:bf:c3:db:97:11:0c:7f:d8:
         75:62:2b:8f:de:18:f8:ee:35:8a:47:4e:04:82:4a:cc:72:06:
         e0:1b:91:ed:f1:5f:9d:79:d9:76:23:b5:a2:3f:14:99:23:06:
         3d:8a:3b:28:cd:a0:f7:c7:a0:f0:4e:b2:b0:cf:6d:04:88:49:
         f8:40:10:b8:5b:ba:0f:dc:4e:3b:99:08:4f:6b:87:4f:9a:5e:
         13:b3:e7:6d:f1:be:55:34:4e:b4:5b:14:0f:62:8c:38:d9:b0:
         02:2c:ae:65:1a:3a:b3:0e:c9:2a:d2:10:14:2b:d6:03:cf:5d:
         02:24:57:47:b4:7c:d6:c3:48:bb:e1:7c:10:fe:88:f7:ce:55:
         22:03:31:73:20:36:db:b7:94:11:36:65:cf:c2:e7:5e:12:cd:
         3d:70:12:ab:ae:7f:9e:32:25:a5:26:2a:08:c4:f5:05:ec:8c:
         fe:3a:72:20:12:a0:60:87:1c:55:0f:5f:5c:5c:f9:73:be:56:
         a3:b9:fa:4d:ea:a2:4f:6e:d5:30:2b:da:7f:e9:e4:64:15:49:
         de:59:05:59:80:28:9b:a6:3c:3b:07:3e:bb:20:4d:95:12:16:
         66:a1:87:f5:1a:39:c9:ac:ee:70:a1:ca:d8:a2:09:3e:6e:1f:
         b0:4c:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:44:18 2025 by rpki-client