This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec71598e-5b29-3548-a7e2-227c89bbb610.roa
File:                     ec71598e-5b29-3548-a7e2-227c89bbb610.roa (raw, json)
Hash identifier:          uVFRa6deV0zRM1PXme76wOmhEhzB6RTOPYix8FOburY=
Subject key identifier:   90:4A:FD:0E:ED:CB:37:6E:8F:EB:0A:0F:49:B4:3F:87:7D:73:BA:B6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C0DD0F8A0C54A38955A88B1E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec71598e-5b29-3548-a7e2-227c89bbb610.roa
Signing time:             Tue 02 Dec 2025 14:00:39 +0000
ROA not before:           Tue 02 Dec 2025 14:00:39 +0000
ROA not after:            Mon 02 Mar 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        173.28.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0d:d0:f8:a0:c5:4a:38:95:5a:88:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec  2 14:00:39 2025 GMT
            Not After : Mar  2 14:00:39 2026 GMT
        Subject: CN=8c1e8fec-23b0-43b8-b2cf-762745ca4651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:b8:bb:8a:51:64:5c:18:6a:86:4c:a1:3a:
                    4a:2d:c4:ea:78:52:52:ab:99:21:ee:d5:7f:6f:ad:
                    b8:7e:85:1c:41:ff:5d:40:8c:17:5e:0f:43:87:78:
                    15:89:3a:4b:ab:7e:f6:bc:f1:8c:63:07:27:a8:68:
                    32:ac:49:ad:ff:be:6f:b5:77:07:6b:47:67:b3:af:
                    71:f7:45:07:a0:1c:8b:4f:02:40:8a:20:d4:89:1e:
                    15:0f:82:0d:06:4b:32:1e:3d:ac:a0:28:a3:cc:cf:
                    e2:65:c6:d5:74:70:91:df:04:b5:c2:d0:1b:c6:41:
                    5d:81:cc:8b:80:7b:2f:b6:2b:6c:01:f2:6b:89:fc:
                    2e:d8:13:c2:fe:d5:39:c5:8c:40:38:40:27:f1:6f:
                    14:51:59:88:40:8c:07:60:69:f5:d9:f5:53:41:16:
                    1d:84:fd:92:dc:80:0b:a4:ab:85:75:77:b0:f3:0e:
                    d7:66:a4:2a:4c:27:22:c6:01:10:56:aa:4e:d9:12:
                    42:41:64:43:78:b5:58:28:00:81:c2:54:b9:c1:fe:
                    35:40:81:0c:4a:09:ab:d8:d8:00:01:f5:7c:46:1f:
                    90:5d:1d:38:3f:b1:3a:6f:d2:a9:25:61:2d:07:d2:
                    85:44:5c:60:34:82:f2:1c:2d:f4:ae:58:cf:87:db:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4A:FD:0E:ED:CB:37:6E:8F:EB:0A:0F:49:B4:3F:87:7D:73:BA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec71598e-5b29-3548-a7e2-227c89bbb610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:be:c3:07:ab:70:a5:67:3f:56:88:82:cd:d9:7f:67:a0:60:
         d8:41:d5:c5:c7:0f:32:f7:d8:54:80:84:b5:63:62:60:6f:57:
         72:87:ea:48:e3:9a:ec:15:88:c6:2a:27:64:18:d8:7b:58:34:
         b6:3e:d7:95:06:13:10:c4:34:9b:a5:64:ac:ac:e9:e5:12:7b:
         9a:30:b4:a6:78:60:ab:8a:ed:65:bc:02:61:91:22:af:b2:0e:
         42:94:78:ed:28:e4:0b:6e:20:8e:bf:be:9a:cd:1d:e8:70:45:
         ff:1b:da:68:37:52:a6:b0:c8:91:56:f7:3c:d0:04:68:a1:f3:
         20:72:ac:28:9d:37:ce:ce:1a:d2:69:8c:99:a3:65:fd:00:b6:
         19:ff:2c:30:4a:20:e6:b5:25:4d:42:43:c2:90:84:98:91:a4:
         40:e7:9d:00:3e:68:ac:52:2b:61:61:93:83:18:a2:c4:8e:48:
         4b:34:76:5b:fc:77:f1:12:c6:01:df:fc:f2:cd:09:05:9b:80:
         4b:3c:46:bf:09:12:ae:11:e0:8f:e8:e9:37:c0:8a:7f:9e:fd:
         9c:37:7e:05:c2:0f:42:cb:ca:8a:3c:6f:9f:e6:af:19:eb:67:
         8e:22:81:c7:9c:69:89:fe:f0:c4:06:d2:b4:ba:cf:5b:f5:07:
         64:78:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:31:54 2025 by rpki-client