This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa
File:                     425a6408-7e87-3b89-9b62-98c8b27a4d93.roa (raw, json)
Hash identifier:          v1IlF/tVVFa6MUem6NWG3kzoqaNgrv8dMe6OhZ0O4gA=
Subject key identifier:   C6:9A:F1:90:09:1A:FE:16:16:88:03:7D:F0:DC:BE:5E:C1:D8:91:9A
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584C09A0A0C9D42360E24CB60B80
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa
Signing time:             Mon 01 Dec 2025 02:00:30 +0000
ROA not before:           Mon 01 Dec 2025 02:00:30 +0000
ROA not after:            Sun 01 Mar 2026 02:00:30 +0000
asID:                     395886
IP address blocks:        98.158.28.0/24 maxlen: 24
                          98.158.29.0/24 maxlen: 24
                          98.158.30.0/24 maxlen: 24
                          98.158.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:09:a0:a0:c9:d4:23:60:e2:4c:b6:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Dec  1 02:00:30 2025 GMT
            Not After : Mar  1 02:00:30 2026 GMT
        Subject: CN=1f4e0fc6-8d56-4d91-93df-7785280528b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:da:98:f0:e7:15:3f:89:61:f8:99:a1:d7:
                    64:72:ed:c0:7c:67:39:c6:f2:58:7d:e7:99:85:cd:
                    d8:b0:0d:78:ad:93:90:72:d6:df:32:d3:a2:83:3e:
                    db:4b:3a:a1:fe:39:bc:e8:78:42:d6:c0:2f:52:52:
                    71:f9:26:16:07:ab:f3:11:80:9f:b5:78:6e:c4:93:
                    8a:f5:fb:7d:63:fa:53:e3:52:bb:b8:50:49:97:8f:
                    9c:68:1b:67:7b:c6:fd:3d:5e:22:24:a1:20:a7:b8:
                    a0:77:d7:be:d6:15:d0:3b:43:3c:46:b1:3d:72:5b:
                    43:11:2a:07:b0:26:10:47:15:b1:ed:8e:ef:8b:b0:
                    a3:d1:be:a1:48:9b:e6:05:29:87:94:87:f2:98:a2:
                    d8:08:bf:6d:d0:29:b5:a7:84:3f:dc:dd:cb:9c:16:
                    8d:04:50:3c:a8:47:e3:ec:f6:3e:20:07:02:11:3a:
                    bd:54:32:95:ca:21:41:b3:bf:83:6f:40:09:fa:40:
                    08:31:48:61:47:49:21:d5:00:d4:38:a6:79:0c:fa:
                    a8:c8:dc:61:68:cc:08:2b:a9:09:6e:0a:9a:24:7a:
                    0a:fe:a0:b4:12:68:cf:ab:01:ea:82:06:20:54:77:
                    c3:27:88:47:27:02:c8:5f:5d:d3:df:be:72:6c:81:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:F1:90:09:1A:FE:16:16:88:03:7D:F0:DC:BE:5E:C1:D8:91:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:89:5e:d5:24:09:7c:df:fe:66:ea:a6:4f:54:0e:5b:d9:1b:
         44:e8:e6:7d:b7:52:2c:ba:bb:11:32:0f:41:98:eb:84:f3:de:
         9e:3e:4a:36:19:43:e8:80:8d:07:84:d5:df:75:f6:b0:f2:ee:
         67:ec:6d:47:91:fd:6d:47:91:96:61:09:28:a2:f7:a5:67:0b:
         fe:2b:a3:37:4a:66:29:d3:71:2c:e2:1f:71:09:f7:bc:a3:00:
         e5:0f:52:36:ab:21:be:76:de:e5:61:7e:5c:ea:c4:ef:76:dd:
         ba:7b:14:42:94:d1:be:59:ad:cc:3b:1f:27:59:61:a0:b9:f7:
         48:55:27:71:7c:19:fd:cf:af:a3:25:0d:d8:39:1b:01:35:8f:
         b8:49:b2:e2:16:0e:ab:cf:e7:11:44:90:74:ec:14:8e:0d:5f:
         d5:61:27:7e:85:a3:97:17:f3:29:59:0d:46:bc:fc:e7:fc:8b:
         ff:5b:5a:d0:99:b7:cf:8b:ca:bf:ce:8f:39:a6:c9:fc:64:58:
         08:a7:fa:68:4d:40:47:83:41:32:ce:8f:d2:24:2f:81:af:e5:
         cf:17:b8:19:e3:4f:7e:86:5c:5b:aa:b7:e8:20:9f:73:d0:08:
         25:58:60:52:53:12:85:6b:d2:c9:c6:7c:58:07:22:6c:cb:4a:
         d8:98:1d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:10 2025 by rpki-client