This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/21f073fb-b1c1-3945-a374-2db283254625.roa
File:                     21f073fb-b1c1-3945-a374-2db283254625.roa (raw, json)
Hash identifier:          GCGin3S6lv6EKPpD9pz4xgk23qgXu1x8S4quHq4pFUA=
Subject key identifier:   9F:7D:E5:4C:F3:39:FD:0F:4C:E6:AE:FE:B5:01:E8:27:84:5A:AF:26
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584C040B59D682EBAEE84906ED40
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/21f073fb-b1c1-3945-a374-2db283254625.roa
Signing time:             Sat 29 Nov 2025 02:00:31 +0000
ROA not before:           Sat 29 Nov 2025 02:00:31 +0000
ROA not after:            Fri 27 Feb 2026 02:00:31 +0000
asID:                     6922
IP address blocks:        204.158.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:04:0b:59:d6:82:eb:ae:e8:49:06:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Nov 29 02:00:31 2025 GMT
            Not After : Feb 27 02:00:31 2026 GMT
        Subject: CN=e7187a3d-4578-4d92-9844-359ea099d631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:45:ee:39:33:b7:f3:56:3b:95:38:0d:d6:
                    09:d0:06:94:21:d7:70:8f:66:b2:82:7a:c1:a4:41:
                    d7:75:ee:0d:af:17:ba:dd:43:5f:a0:c4:f2:c1:73:
                    5f:87:2e:ba:b4:2e:6f:bc:c2:ed:fe:c8:43:e5:21:
                    0a:64:ac:08:c1:69:f3:c3:a2:c0:b3:91:25:0b:04:
                    1a:aa:bf:91:89:b7:fd:bb:d1:c1:3e:6a:1b:d2:a8:
                    65:41:81:7e:0f:c4:ee:e8:a5:b6:e5:ee:ad:a4:97:
                    0f:41:ce:21:8e:30:a1:0f:2e:08:e0:8d:41:43:a7:
                    80:8e:0f:ec:82:e2:53:63:ec:d3:bf:b9:c1:4c:48:
                    58:9a:d8:f6:2c:54:0e:af:20:68:b7:1c:06:9c:10:
                    b4:c6:f8:c9:68:20:30:7b:c8:12:2e:4e:2c:3d:4b:
                    71:da:22:0c:76:32:af:33:a4:b4:ae:5d:80:f2:c9:
                    75:8f:3e:4b:f7:f2:54:63:72:ce:f0:5e:be:63:3d:
                    71:3a:7c:2d:d7:63:68:97:1b:86:d3:fc:ad:fa:04:
                    a2:62:74:c4:3b:8e:fa:3d:e5:67:a9:d0:b8:3b:a9:
                    c6:f4:64:d6:0b:8f:03:e1:68:40:a1:30:76:57:a2:
                    30:6e:cb:32:2b:a4:ea:fd:d5:27:f6:a8:31:9d:5c:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7D:E5:4C:F3:39:FD:0F:4C:E6:AE:FE:B5:01:E8:27:84:5A:AF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/21f073fb-b1c1-3945-a374-2db283254625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:94:56:72:b5:bb:c9:52:4e:68:41:28:ca:e8:aa:a7:a9:65:
         8f:c3:4e:3b:78:13:8c:0a:65:5c:e3:f3:bd:73:58:74:7a:1c:
         29:19:4b:fc:c9:a6:ae:87:d3:1d:71:71:89:70:71:cf:39:8b:
         36:70:27:9f:82:7e:ed:5f:30:9e:5c:e4:34:49:7b:b4:13:7f:
         8c:b0:0a:d9:38:eb:4b:0f:79:6d:cd:62:6b:90:de:53:7a:af:
         9e:4f:5f:9d:c9:8f:12:fb:67:f1:c8:c2:49:06:10:d6:f6:60:
         3a:5f:11:cb:49:1c:2f:5c:d8:14:78:c1:03:a3:cd:d1:a8:fa:
         0e:3b:77:f4:96:01:a4:d8:1b:61:22:93:51:03:72:e7:d4:4b:
         b3:e1:04:a4:bc:55:a4:fa:cf:c9:0e:8e:06:9b:70:7d:78:86:
         ac:a2:f0:42:aa:d2:9c:8d:79:20:44:cb:e8:8c:54:c3:54:6e:
         4b:dd:c7:2a:8d:22:a6:52:0d:9c:a4:e0:c6:76:e6:e0:e2:8c:
         a2:e0:78:52:8c:88:ae:c4:be:41:95:7f:9a:db:43:46:89:bf:
         26:fe:c9:5e:d4:64:54:53:a4:e2:e8:72:28:ca:a4:e6:21:e3:
         88:6e:c4:79:cd:fd:ee:2c:4f:bf:48:93:13:53:23:8a:56:df:
         02:c0:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:15:23 2025 by rpki-client