This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4895ba94-d136-3a80-bfb8-95ac90cf461d.roa
File:                     4895ba94-d136-3a80-bfb8-95ac90cf461d.roa (raw, json)
Hash identifier:          tkbvWiL+WcpMA0nOXWgsNPu0znNDOXvV4z9j46sc6Hc=
Subject key identifier:   ED:D1:D2:E5:05:76:60:5A:7B:A5:78:1B:BD:B3:A6:D9:38:43:E3:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BDB90743A15FB775DECD502C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4895ba94-d136-3a80-bfb8-95ac90cf461d.roa
Signing time:             Fri 14 Nov 2025 14:00:37 +0000
ROA not before:           Fri 14 Nov 2025 14:00:37 +0000
ROA not after:            Thu 12 Feb 2026 14:00:37 +0000
asID:                     36628
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:db:90:74:3a:15:fb:77:5d:ec:d5:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 14:00:37 2025 GMT
            Not After : Feb 12 14:00:37 2026 GMT
        Subject: CN=7e3a82cf-5fae-48ef-861f-39d176438c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:e1:85:22:9d:7f:5f:64:81:8e:a6:11:e9:
                    43:39:14:40:7f:be:c4:4a:16:df:5e:69:7d:ed:ee:
                    ff:50:e6:44:d3:48:0d:d0:42:40:1a:bf:03:5b:e2:
                    d6:b0:20:3b:4d:fb:55:bd:54:d1:d1:69:92:1e:c0:
                    ed:b4:f0:14:f2:da:04:f6:39:8e:72:2b:84:41:29:
                    41:27:84:94:01:3d:20:09:ec:32:f5:ee:fb:24:bc:
                    f7:bf:5c:d2:be:a7:0e:2f:9a:62:68:7b:1e:76:e4:
                    15:aa:8d:27:28:7e:17:d0:0d:1b:dc:c9:9a:d4:bd:
                    da:f4:96:ed:05:9a:75:15:26:64:31:0e:6f:a0:8a:
                    a4:c5:62:6f:b3:a8:95:f3:0f:5b:ef:87:8e:6b:0c:
                    be:57:7a:95:77:bd:1b:c1:f7:17:88:06:a1:ed:91:
                    95:46:7a:5c:ef:e7:66:00:6e:8f:f6:ec:2d:b2:a6:
                    87:83:36:25:99:a1:98:d2:86:9f:a7:88:dc:a2:0e:
                    2f:4b:0d:ff:da:bb:86:39:5b:ca:9b:0a:fa:25:bd:
                    9a:0c:74:16:51:f0:72:cb:7a:a0:4d:4e:e4:b6:91:
                    37:dc:f8:3f:2d:09:12:7a:39:5f:46:2c:53:78:d7:
                    3d:29:ac:29:3c:0f:89:aa:89:97:4e:1f:9a:68:32:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:D2:E5:05:76:60:5A:7B:A5:78:1B:BD:B3:A6:D9:38:43:E3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4895ba94-d136-3a80-bfb8-95ac90cf461d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:95:93:83:fe:85:72:59:aa:f5:4a:21:8f:06:5f:69:1a:30:
         10:48:c7:ac:d5:83:8a:c2:31:90:f0:33:0c:84:28:a5:88:b8:
         13:60:bc:dd:01:68:03:13:b5:c7:46:c4:a0:a8:68:9e:b8:e4:
         4b:14:db:34:4c:e3:cb:a8:fa:ea:6e:63:6c:02:08:aa:2d:96:
         d3:74:e4:9b:56:c6:00:f0:d4:ce:5e:14:81:79:41:d7:ce:33:
         f2:be:e3:73:78:c4:78:43:5c:2e:ab:ec:c4:c6:91:be:f1:b8:
         f8:89:38:c4:33:1b:fd:2a:1d:cd:af:6f:d9:48:1e:0e:75:0d:
         59:3d:ec:2a:53:d7:7a:07:d1:79:03:57:55:8a:72:b6:8a:79:
         d8:e6:b5:5d:1f:73:f6:0f:4e:62:d9:22:52:08:8a:89:a9:4e:
         3e:b3:e9:9c:9e:bc:16:1c:6d:e9:29:dc:67:0d:eb:a9:51:70:
         e5:85:16:ec:24:ff:b4:43:fe:19:32:02:da:ad:bc:5d:1c:f0:
         49:40:25:6e:55:ac:9a:b6:9d:6d:70:61:6a:ab:45:22:00:1a:
         ce:b9:21:04:92:b1:82:e5:32:41:92:8c:af:50:3c:7d:e8:3e:
         d5:f2:82:0f:9b:b2:b4:aa:c1:d3:71:e2:f3:0d:a0:31:53:a8:
         35:5a:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:18:31 2025 by rpki-client