This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa
File:                     bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa (raw, json)
Hash identifier:          M8BPmj9Mu6q1D9ViyTtbuGxaB/IB3yqxeSgiPJ5zcd4=
Subject key identifier:   03:FE:B4:07:96:37:8E:DA:55:50:B6:9D:67:A1:8D:DE:57:22:6D:03
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584BEDB5DE91C26022A853861DC0
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa
Signing time:             Fri 21 Nov 2025 02:00:30 +0000
ROA not before:           Fri 21 Nov 2025 02:00:30 +0000
ROA not after:            Thu 19 Feb 2026 02:00:30 +0000
asID:                     852
IP address blocks:        103.120.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ed:b5:de:91:c2:60:22:a8:53:86:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Nov 21 02:00:30 2025 GMT
            Not After : Feb 19 02:00:30 2026 GMT
        Subject: CN=4d8b38e6-6019-4a97-9258-e5d12f04c5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:36:5f:10:31:dd:57:85:99:ed:d3:87:43:
                    31:d3:b8:ef:12:43:b6:35:c1:cf:99:22:88:b0:a0:
                    d7:dc:10:05:76:86:9e:7f:22:6f:63:ea:35:88:9e:
                    f5:f8:3d:e6:d2:ef:60:71:9a:e2:af:b1:56:e5:55:
                    03:a4:37:fe:12:f0:f4:ad:55:f6:4e:04:61:eb:2a:
                    6e:46:b3:46:55:2d:95:d6:3d:91:20:c8:2f:00:58:
                    d7:22:1e:9d:cb:e0:fa:bf:85:b3:92:1e:78:ab:f9:
                    2e:b7:42:4e:80:44:c9:2b:bb:e7:9e:97:fa:91:48:
                    07:57:84:ec:55:99:f2:58:23:1c:5e:64:00:52:14:
                    48:9f:4c:6f:e4:6c:b0:25:f9:88:a2:7e:fd:56:09:
                    af:6e:8a:44:f6:84:98:f7:5c:a0:b7:2e:65:86:64:
                    05:4d:41:4f:f1:43:f7:72:7a:aa:a0:33:0b:d3:b8:
                    7e:df:1c:77:b2:32:1c:15:f1:c2:c5:c7:c5:4b:f2:
                    b2:7d:63:59:78:e7:a5:b6:65:79:d9:1b:7a:35:ce:
                    56:bc:54:5c:b4:53:61:20:a5:c0:a5:4a:6f:86:2a:
                    b3:14:72:0f:f5:6d:e3:e3:5a:b5:68:03:a7:69:89:
                    d9:7d:24:c8:61:76:19:3e:58:e9:da:79:43:68:35:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:B4:07:96:37:8E:DA:55:50:B6:9D:67:A1:8D:DE:57:22:6D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/bc0eb400-033b-3ca5-a440-4c11eaf4666e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:be:1a:0a:de:de:df:11:97:3c:02:64:1f:ce:b2:8c:11:8e:
         69:f1:f9:53:5e:d6:36:4e:85:f3:6a:d5:5d:7e:ad:c2:d7:f0:
         ba:20:0d:e1:2d:04:ab:a1:9b:8d:f7:72:f3:84:01:45:bb:93:
         6b:48:ac:43:84:56:2a:37:00:f3:18:f5:5b:3c:cf:1d:08:fe:
         dc:53:f4:74:93:54:d6:88:94:de:4a:97:8b:ad:38:3f:f4:a5:
         cf:d8:67:86:bb:9a:6e:94:e1:ca:aa:fe:ac:c7:3f:c8:9a:e8:
         48:eb:a6:f3:ee:8c:31:71:67:39:cb:d1:39:68:9a:3d:42:3f:
         28:cf:9e:8f:ab:6b:95:04:ba:89:2d:32:b8:12:96:f0:32:a8:
         da:37:9d:4a:84:14:1a:19:01:3d:ee:fe:e7:b9:35:3c:0f:5d:
         a4:ba:a0:b0:70:b5:ea:1d:e1:54:36:19:1e:ae:49:08:a8:19:
         94:32:84:82:0b:c5:e6:13:4f:a2:a9:0f:88:bc:90:f8:9f:ad:
         25:29:6c:3b:b6:38:58:49:07:83:4e:84:34:52:13:07:db:9a:
         db:0d:79:1c:65:90:c9:3a:d3:d6:2f:4a:8f:e0:f0:a8:84:fc:
         ce:b7:d4:1a:bf:ca:a0:8a:da:4e:2f:31:6d:cc:9d:9b:e3:ac:
         55:a7:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:37:02 2025 by rpki-client