This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa
File:                     5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa (raw, json)
Hash identifier:          DaH3r2MXrQj3s0u56sd1f9KyviWroRbWdMLVMTh+AYU=
Subject key identifier:   20:D2:65:70:0B:C4:E4:9F:2E:71:36:AD:85:A0:7D:B4:AD:1A:4E:4C
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584BC53B0D8C323F7030824E7180
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     202
IP address blocks:        20.148.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3b:0d:8c:32:3f:70:30:82:4e:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=b561dfc8-df2d-4e73-b20e-b6edc977f8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:78:60:d8:6e:5b:82:9f:87:7e:23:52:69:
                    3a:51:54:91:b3:8c:73:c8:c9:b1:3b:53:e9:61:d2:
                    a9:33:8d:9a:b1:9f:60:99:e2:cf:51:95:33:e3:8f:
                    b2:cc:8e:14:24:dc:ef:3f:1c:56:39:d2:5f:b8:c3:
                    24:11:8f:d4:2e:76:0b:36:16:46:ce:90:2a:ee:13:
                    0f:27:7a:0c:42:af:20:a1:74:31:68:5b:5e:b0:74:
                    44:fb:8f:f8:42:9b:5f:b6:6a:d4:b3:44:ad:66:5f:
                    65:a0:e1:8b:1c:ab:61:65:cf:7e:28:33:be:71:8b:
                    0d:7a:0e:c2:b2:f8:d9:4e:03:9e:6b:7c:bd:9c:d7:
                    0e:19:5d:55:7a:53:a6:73:04:f8:8e:13:5a:47:43:
                    d8:6d:13:80:c9:3d:78:bb:09:11:e5:b0:15:b3:76:
                    bb:6d:58:6d:78:cd:37:53:af:ec:90:fe:05:cc:69:
                    9b:a1:fa:85:54:2b:c5:fc:5e:e7:c6:3f:2a:ca:5c:
                    50:26:cc:59:01:49:21:03:41:da:5e:fa:24:0c:a5:
                    f0:3d:4f:37:b7:22:2e:2f:52:fa:ae:3b:03:d8:67:
                    ba:a8:37:36:4c:fd:7b:ad:ca:9c:f2:d5:56:7e:b2:
                    dd:65:ae:e3:71:53:41:99:5f:95:de:08:b0:b7:0f:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D2:65:70:0B:C4:E4:9F:2E:71:36:AD:85:A0:7D:B4:AD:1A:4E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:34:ef:a3:6b:2e:66:99:af:3b:6f:ad:ee:20:11:f9:d4:83:
         83:4a:c1:29:15:3f:f6:c6:e8:ca:f0:85:c1:85:9d:5e:d4:2e:
         bf:87:2a:27:28:95:ed:77:18:39:12:73:19:cf:ef:19:9e:c3:
         09:6c:d7:49:2d:3b:50:30:d8:f1:84:ae:8f:2f:44:fb:a7:7b:
         8d:ed:27:72:f9:7c:90:d4:57:3e:e4:02:0a:dc:71:83:f9:6f:
         31:04:95:a4:ff:4a:60:80:d4:b6:62:4b:61:f7:74:01:08:61:
         92:19:37:f1:6a:6a:d4:7b:a1:4e:43:40:68:71:60:c8:2d:37:
         64:6c:cc:67:c0:f1:0e:28:81:8f:9f:71:ff:b4:39:f5:02:a6:
         ef:12:e8:c1:4d:6b:3d:6d:68:1b:ee:d8:20:40:7f:60:fd:ac:
         11:06:15:02:af:8a:8f:f1:8c:da:ef:11:fa:25:0b:97:6e:ab:
         44:69:87:26:8e:07:b4:9d:a6:d8:17:23:03:c8:7f:a5:20:9b:
         81:c2:75:1c:da:26:10:03:86:05:dc:84:9d:81:35:0d:cd:9f:
         8f:fe:0e:0b:83:49:a6:2e:35:b3:62:15:4c:93:34:60:78:ce:
         05:f7:bf:54:2c:ba:21:fa:9b:86:ce:01:64:a4:be:06:9b:6d:
         76:55:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:10:39 2025 by rpki-client