This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04534b11-0ff2-3f47-b0cd-e5b4f0da0ae1.roa
File:                     04534b11-0ff2-3f47-b0cd-e5b4f0da0ae1.roa (raw, json)
Hash identifier:          Z1h+q6xruZkun+jrDet/GdYCF+0fbdlTC7Y4QrUhgzM=
Subject key identifier:   E3:5B:F8:99:67:5B:F6:3F:DE:0A:20:9F:CE:15:FD:B0:CB:60:60:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584C5EC6BF250BEE164CDB19EA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04534b11-0ff2-3f47-b0cd-e5b4f0da0ae1.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     10515
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:bf:25:0b:ee:16:4c:db:19:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=bdf763b0-a2f3-4496-bcc1-7ff9a0e5814d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:5f:46:e7:cb:f2:bf:49:c8:d2:42:8a:ee:
                    01:4a:37:e2:59:ac:02:9f:f4:02:76:ea:f0:ec:3c:
                    56:a0:6b:61:f2:86:f3:1b:b9:62:09:13:aa:83:19:
                    87:bf:5a:ed:6a:ff:a7:0e:72:dc:69:bc:c0:10:71:
                    32:e3:ff:b7:c8:98:57:60:d6:03:1d:45:ec:de:c5:
                    f8:b1:05:b0:9c:76:34:f7:ab:9d:72:3d:65:94:67:
                    98:fa:c5:36:7d:0c:be:2a:11:35:dd:3c:4b:3e:2f:
                    5d:e7:d9:01:71:41:d0:52:ba:90:56:69:6e:cb:06:
                    d9:6d:d7:44:c3:6e:bd:2b:d8:db:5b:15:f2:28:7c:
                    db:31:26:90:a7:f6:a8:2f:3e:0a:df:5c:fb:25:7b:
                    7d:22:56:59:24:0d:29:29:c2:95:9c:d4:1f:ee:ec:
                    c7:99:34:7c:d4:0f:0d:d6:47:58:11:43:42:fe:9c:
                    c6:9c:fe:42:53:ba:4c:63:19:7c:72:28:0e:14:22:
                    a8:7e:4e:d8:8e:6c:e2:f3:24:7f:22:4b:49:df:69:
                    56:7e:7d:1f:1b:4a:95:b5:b9:6b:04:30:48:5f:21:
                    f5:4c:fd:e1:bb:81:b0:bd:a2:92:83:3c:08:c5:ba:
                    19:95:17:dc:31:93:94:4b:2a:54:58:2f:9c:98:8e:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:F8:99:67:5B:F6:3F:DE:0A:20:9F:CE:15:FD:B0:CB:60:60:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04534b11-0ff2-3f47-b0cd-e5b4f0da0ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fa:59:a3:32:43:06:d2:58:54:03:ef:e4:c8:9f:7f:be:aa:
         87:f5:20:56:b6:e4:9e:25:6e:3b:46:78:db:a8:11:f4:47:a7:
         1d:a3:aa:e1:97:8b:49:5c:3f:dd:ab:38:e7:9f:29:4c:7e:1a:
         a8:87:af:39:cc:6e:2c:ac:04:3a:36:18:4d:57:77:01:9d:b6:
         1e:63:f2:fe:67:3f:32:85:c2:14:1f:d1:10:21:10:d9:d7:10:
         e5:8c:3b:41:a1:74:08:4f:49:8a:08:80:33:33:7b:29:b0:8d:
         91:8a:41:66:09:a2:36:7a:c4:ed:fd:2f:3f:8f:82:5a:94:08:
         7a:38:69:7a:5c:90:c7:e1:6b:1a:b6:3b:bf:bc:53:74:a7:b5:
         39:62:a5:ec:f2:a1:74:3b:20:f5:4b:6b:29:4e:0c:22:32:01:
         1f:96:38:19:f3:85:4b:e0:83:80:7a:80:be:73:e6:3b:2f:3b:
         2a:5f:70:a5:8e:90:6c:96:32:6a:35:2f:60:ea:3c:48:5c:79:
         b6:91:06:8f:ee:42:0e:92:0a:ee:c5:f5:ec:3e:58:77:94:9e:
         6d:c6:46:3d:6d:db:f2:aa:0c:4d:71:99:ad:2e:dd:75:57:8f:
         7c:93:39:ad:b4:24:3c:3c:df:38:84:0a:42:0f:7b:b2:82:9b:
         21:cb:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:10 2026 by rpki-client