This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa
File:                     e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa (raw, json)
Hash identifier:          d3l3CFDV3MfyXDFGcYE0ZhcM8oBwL4TOGYrs0dkg7Ts=
Subject key identifier:   83:A3:EF:A5:3E:3F:A5:3C:98:FC:2F:29:BE:E4:6F:FD:83:52:4F:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BFE7655F163C0E02A00157CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa
Signing time:             Thu 27 Nov 2025 02:00:31 +0000
ROA not before:           Thu 27 Nov 2025 02:00:31 +0000
ROA not after:            Wed 25 Feb 2026 02:00:31 +0000
asID:                     19905
IP address blocks:        173.20.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fe:76:55:f1:63:c0:e0:2a:00:15:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Nov 27 02:00:31 2025 GMT
            Not After : Feb 25 02:00:31 2026 GMT
        Subject: CN=f2a30857-4924-4719-8699-0ea121ea5538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:9f:ab:fb:6f:5a:35:9d:25:3a:f6:88:e1:
                    f1:4c:30:ad:65:3c:12:30:07:af:38:b2:60:9e:dc:
                    64:33:f0:57:41:0f:7f:e9:97:fd:6c:25:ce:d8:86:
                    9d:4d:2b:36:cb:c0:44:7f:8a:9b:2b:c2:6b:a1:eb:
                    d5:e0:04:1d:27:88:b0:7c:ca:8a:39:2f:78:9b:b9:
                    34:d4:7c:ff:e0:e7:ab:fc:07:f0:98:d4:c2:78:6e:
                    46:2e:79:a9:fd:a0:a5:8b:d4:0e:48:92:10:62:6b:
                    f1:80:cf:4b:3c:d8:09:98:2a:f8:57:9e:ea:6d:6e:
                    c7:f2:1f:ee:b3:b0:c8:32:fb:c6:68:f0:39:69:41:
                    5d:cd:52:92:c6:70:2e:5a:b2:1c:a3:6f:6c:3c:dc:
                    d8:0c:ed:ec:02:ad:00:06:ff:f0:4c:36:a6:5c:12:
                    2e:13:b5:8a:52:0d:05:4e:bf:64:5f:d8:7b:0a:93:
                    fb:b8:bb:2f:88:2b:42:76:61:db:e8:27:d7:bd:54:
                    ab:2e:ca:bf:53:e9:2a:a6:84:06:5f:3a:3e:80:8c:
                    c3:09:f8:2e:81:c7:f0:e7:e7:fb:67:80:a5:dd:59:
                    07:4e:ea:09:ca:e4:80:50:db:34:b3:10:a2:3c:ab:
                    ba:e1:76:3d:49:64:2b:61:87:90:cd:09:ab:c4:8b:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A3:EF:A5:3E:3F:A5:3C:98:FC:2F:29:BE:E4:6F:FD:83:52:4F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:62:19:8e:90:22:ed:fb:93:8c:96:1d:fa:e5:4b:99:eb:ac:
         a1:cb:e9:81:d8:64:92:5f:41:2c:d7:c6:c3:f9:3a:28:d9:82:
         0f:ed:3c:c4:70:3b:7f:fc:28:7c:08:58:df:31:01:bd:9f:f9:
         75:10:c3:50:e5:04:5e:b1:02:9b:c5:c2:c3:90:c7:f4:6d:8f:
         b3:d7:c4:56:85:bd:ac:45:2a:d5:f6:16:c9:4e:eb:fe:fe:24:
         d6:5d:14:8e:d9:64:31:5e:17:39:02:05:36:bf:7d:a1:73:b0:
         eb:6a:66:dc:fc:7b:10:b3:27:9a:18:70:05:09:a9:86:01:9a:
         da:73:05:83:eb:fc:59:4f:2f:14:8b:79:4f:53:33:14:65:12:
         fc:8d:96:0c:2c:1f:54:c3:e6:68:aa:88:dc:c2:93:f0:d2:f6:
         26:94:0e:ea:88:bb:ec:34:da:a5:18:24:c0:07:37:ee:53:ed:
         b3:48:85:03:99:b2:6f:ef:49:af:f6:e1:69:e7:6a:d3:a5:2a:
         72:77:fe:11:95:78:8a:81:be:da:d8:55:b7:2a:c4:23:75:58:
         ae:c5:96:71:39:c6:80:c4:a9:04:3b:c1:e4:cc:98:03:08:3f:
         7e:42:0e:75:08:92:e0:20:b3:dc:e9:04:29:a6:f5:c0:3c:e7:
         b1:33:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:55:04 2025 by rpki-client