This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa
File:                     d294f045-3323-3f7a-bd57-473408d74726.roa (raw, json)
Hash identifier:          EDcVDTR8wlRpSUJtlmD5jT8pl7H1hsNUi3y+d2ko9qM=
Subject key identifier:   3A:58:82:A7:78:7C:F2:ED:8F:97:C4:65:2D:78:27:7F:DE:FF:ED:00
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584C4F6BD2EE414185872356D9F8
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa
Signing time:             Fri 26 Dec 2025 02:00:32 +0000
ROA not before:           Fri 26 Dec 2025 02:00:32 +0000
ROA not after:            Thu 26 Mar 2026 01:00:32 +0000
asID:                     2728
IP address blocks:        131.143.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4f:6b:d2:ee:41:41:85:87:23:56:d9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Dec 26 02:00:32 2025 GMT
            Not After : Mar 26 01:00:32 2026 GMT
        Subject: CN=db08a721-2534-454e-8d6d-f26f768a4ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:d8:94:c1:78:83:2f:59:b1:eb:b8:54:ab:
                    1f:40:68:f8:76:83:3d:48:c0:74:8b:e1:05:a0:1c:
                    61:df:bf:b3:7d:24:ac:23:b4:f9:bb:50:09:3e:b8:
                    a9:36:bc:d2:a7:32:3b:5f:81:73:e8:99:81:31:0a:
                    56:18:e8:84:6b:83:90:ec:24:89:38:54:9d:ce:ab:
                    39:f9:45:e5:db:8f:02:1a:ee:d9:0b:0b:e0:89:87:
                    47:01:38:8d:48:d4:d6:76:48:b1:ae:5d:d6:8f:2d:
                    3d:0b:ed:ee:b0:23:60:a3:6a:ed:b9:e5:42:47:09:
                    ef:05:ed:4e:66:58:f4:94:fd:9f:0c:9d:af:0f:87:
                    63:cb:29:6b:f7:52:1f:fa:a0:45:0b:36:27:37:23:
                    ee:3c:c4:fb:05:cd:55:4b:d2:16:4d:c0:2a:ba:95:
                    35:af:cb:11:60:97:19:b4:01:0b:09:da:48:45:75:
                    f6:d1:51:8d:75:72:96:07:28:f3:fa:d0:28:88:4c:
                    e1:d7:8b:1e:60:67:b7:92:d9:28:5f:b4:92:22:e5:
                    87:fa:4c:88:d9:e3:b4:b4:95:5d:a7:ba:f7:dc:55:
                    9d:67:15:19:8e:33:50:2e:6a:c4:83:4f:28:2e:aa:
                    1f:82:ef:1b:99:cf:88:e0:7a:b6:ae:96:05:f6:a2:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:82:A7:78:7C:F2:ED:8F:97:C4:65:2D:78:27:7F:DE:FF:ED:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:34:9f:19:06:39:61:2f:9e:c8:c0:ca:98:47:d6:9a:cc:
         f3:a7:c6:21:3a:77:a1:27:9d:a8:e4:99:b2:72:43:ae:78:dc:
         f4:5f:a9:dc:5b:e0:d5:d0:87:bd:81:80:2f:9b:b5:4f:b7:58:
         6f:50:ce:4c:75:7d:39:66:64:5b:fe:34:df:f0:71:e2:c3:4e:
         7f:91:18:d8:9d:f6:68:2a:d8:38:0f:db:13:a0:ed:f5:d1:80:
         c7:b7:32:72:9c:54:d8:d2:aa:75:ef:1e:19:13:c2:01:aa:d1:
         2d:af:94:0e:42:0f:d0:1c:a9:26:f6:74:60:13:59:93:c6:9b:
         ff:61:77:4d:9d:a7:c2:1d:fd:61:e5:a3:cf:ff:a7:b2:2a:a1:
         08:52:7b:4d:a9:3e:ec:01:8f:3c:9b:35:42:5a:ca:a1:28:cd:
         ae:df:b4:5a:c6:62:5b:eb:64:1f:b3:11:24:8b:4a:19:2d:94:
         e8:e7:c3:04:7b:d3:e5:35:1f:f0:34:40:0e:2a:52:23:22:f7:
         0b:a2:0a:f1:61:81:71:60:b6:52:21:c5:e7:93:70:a1:b3:78:
         74:b2:3c:4f:a8:0a:84:8c:fd:bc:a4:b6:cb:df:3b:51:2e:1b:
         7b:59:68:04:57:46:80:4d:f5:b5:57:76:fd:27:6c:02:e0:b0:
         6a:6f:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:54 2026 by rpki-client