This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa
File:                     ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa (raw, json)
Hash identifier:          lO12W0ik8Gr8OHnBne5PXxof2oAAT3s6e4g2uaD0jis=
Subject key identifier:   8D:6B:A0:42:A0:73:99:EB:76:D0:5A:7C:D1:AD:B1:2D:EC:31:35:1E
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F4328584BED2A44764EADF070772E9780
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa
Signing time:             Thu 20 Nov 2025 21:19:27 +0000
ROA not before:           Thu 20 Nov 2025 21:19:27 +0000
ROA not after:            Wed 18 Feb 2026 21:19:27 +0000
asID:                     22135
IP address blocks:        173.242.2.0/24 maxlen: 24
                          173.242.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ed:2a:44:76:4e:ad:f0:70:77:2e:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Nov 20 21:19:27 2025 GMT
            Not After : Feb 18 21:19:27 2026 GMT
        Subject: CN=46f0840c-10bd-4003-aff9-ee2be17cd88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:c0:5f:29:ab:2c:27:53:54:e5:34:28:51:
                    a1:29:c8:8a:9e:7b:9a:06:70:aa:12:4c:be:f1:bc:
                    65:13:85:9a:f2:89:1d:e8:00:64:c7:65:d7:f3:6e:
                    8b:74:48:eb:9c:90:b8:f6:49:e0:ab:24:fb:fc:e1:
                    6d:cb:e9:b4:01:dd:db:43:0a:73:5c:e4:19:21:45:
                    e4:81:87:8e:cb:61:ba:83:d4:98:aa:03:d1:98:7d:
                    4a:5f:80:75:bc:f2:2e:2e:2a:f8:f2:e3:bf:28:65:
                    0d:b3:04:59:a1:90:99:cf:08:4f:81:51:15:00:c1:
                    a0:c7:9f:67:69:92:10:25:df:39:8a:30:55:27:6b:
                    48:0a:db:80:37:c3:55:4f:cd:21:f9:c1:ca:48:08:
                    a7:24:37:b2:c0:a9:5a:92:6d:c4:4f:e3:e7:b3:b4:
                    2b:f5:63:ec:f8:64:99:b7:45:05:ee:21:b8:66:3d:
                    e6:29:d1:bc:ad:59:3a:65:48:ee:e0:90:33:a6:05:
                    e0:12:59:99:73:86:b2:24:70:d0:31:e9:39:f5:99:
                    89:2a:7e:11:cd:62:51:71:58:af:f8:fa:4c:71:ba:
                    77:6b:7e:02:da:78:6d:e6:6d:4d:1b:57:8a:46:36:
                    c4:fe:09:f3:c3:96:80:9b:a0:dc:b4:8e:5a:fa:0b:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6B:A0:42:A0:73:99:EB:76:D0:5A:7C:D1:AD:B1:2D:EC:31:35:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ab3227d9-5e37-3fe3-9b84-c94da4fbb158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:2c:a4:19:ce:04:c3:a9:78:41:88:06:f4:7d:8d:fd:11:
         6e:0d:2f:e3:69:35:46:47:09:08:a1:24:27:c6:c7:68:79:c6:
         b4:67:40:d2:e9:70:a7:98:2e:2f:15:ce:b2:f8:8a:c6:b2:4c:
         f8:17:02:2c:56:9b:33:d1:a4:40:d2:dc:7b:b0:30:ba:cf:37:
         90:84:14:2b:5f:c8:af:cc:f7:9b:5d:a5:3d:84:bb:94:db:3c:
         a7:54:a4:4b:14:44:ec:d0:b4:60:f5:58:45:0e:da:98:78:1e:
         af:91:da:f6:ea:a6:d5:85:ed:33:9f:ff:b6:e1:a6:9f:d0:7a:
         ea:92:9b:a3:e4:05:06:ee:83:66:c2:d2:7f:8c:f1:df:98:92:
         b9:02:af:d3:47:7f:2c:67:17:16:20:9c:9d:40:03:80:cb:dd:
         4a:8b:72:67:4e:61:4e:58:b0:7a:d3:61:7b:23:80:ba:ab:f4:
         e0:35:ba:a5:04:c6:5e:94:f0:ec:66:e7:63:a5:75:d4:ba:4c:
         fb:35:4e:14:79:4a:5f:32:3a:b0:45:c1:a5:c0:67:c7:b3:6b:
         ba:6e:cb:bf:25:13:21:8b:d4:4c:8b:59:6e:16:3d:17:db:80:
         29:69:b4:fa:43:0d:7a:fc:1a:9c:86:b5:6e:07:e1:4a:3e:ed:
         2b:43:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:00 2025 by rpki-client