This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa
File:                     d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json)
Hash identifier:          FrZYwVzgEgHt82e4nvclD1nlMq5QW3ITY+mUwvkakhU=
Subject key identifier:   DD:99:66:54:5E:0D:B1:D3:1A:04:07:87:84:F6:37:3D:02:94:C2:0B
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584BD5FB1F056837BE7F1967C580
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa
Signing time:             Wed 12 Nov 2025 14:00:37 +0000
ROA not before:           Wed 12 Nov 2025 14:00:37 +0000
ROA not after:            Tue 10 Feb 2026 14:00:37 +0000
asID:                     396905
IP address blocks:        138.43.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:fb:1f:05:68:37:be:7f:19:67:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Nov 12 14:00:37 2025 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=b1423510-507a-4302-8dbd-93244653cc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:70:90:31:9a:8b:a1:ba:02:89:25:47:ea:
                    2d:b5:de:f7:45:db:00:11:a1:64:93:2b:72:a5:b5:
                    30:35:b7:82:ea:12:e5:f1:f2:e2:4a:30:16:84:46:
                    e4:7d:c6:f4:80:2f:51:90:73:ff:87:51:85:27:d5:
                    3c:68:ff:a9:3c:a1:0e:48:35:c1:2f:8c:ef:02:e0:
                    3a:02:26:e1:d2:ac:90:9d:d1:45:2c:80:47:f8:7c:
                    8d:ec:3e:78:b5:2d:38:e8:4d:b7:c7:be:df:e8:00:
                    2b:55:bc:c6:94:62:a9:41:da:09:d0:95:d0:e6:63:
                    43:51:73:32:19:70:0e:1c:cf:8e:d4:78:0d:7b:b9:
                    f4:8c:9e:c7:d9:8f:d8:10:ed:56:23:60:85:74:cc:
                    08:44:4b:27:03:5e:fb:7e:89:9a:ea:27:b1:05:52:
                    56:64:3d:11:b0:ac:c9:26:e9:0a:78:b3:67:53:0c:
                    16:99:7a:c2:f4:14:be:5a:98:04:a1:a6:74:e1:69:
                    fc:d9:32:ef:d8:33:6b:2a:4f:53:dd:bc:92:5b:a8:
                    4e:8c:15:6a:ff:4b:4e:97:55:02:a1:5c:4c:f1:5c:
                    6b:19:58:de:6c:72:0d:25:e0:d0:04:73:ef:34:77:
                    38:7c:16:24:42:ff:a2:40:4a:cc:ee:17:49:40:e8:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:66:54:5E:0D:B1:D3:1A:04:07:87:84:F6:37:3D:02:94:C2:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:16:6b:2e:9f:80:50:2b:76:f6:5d:8e:41:22:3c:7c:2d:aa:
         81:3f:50:6f:73:7b:9d:53:ff:8d:9f:d3:7e:d6:d2:2d:b0:57:
         dc:f9:2f:c3:1b:7e:58:71:32:49:30:ec:fe:bf:95:da:4b:64:
         c9:9a:51:b4:c8:ab:a7:c1:93:57:e1:7e:bf:84:7d:71:b2:21:
         57:27:b9:4a:6d:85:09:c5:71:2b:4d:de:2f:76:c5:d7:ff:43:
         a0:b1:dc:65:c4:16:6f:dc:98:aa:ee:3d:f0:b6:1a:b9:03:bb:
         3d:48:5d:34:6d:31:48:e3:ec:02:f2:eb:a9:f4:7d:d9:b2:a2:
         4f:28:69:67:58:f5:47:c9:1d:6c:b6:19:a2:d7:09:0a:3e:a6:
         66:7d:e2:28:c3:3b:46:7b:6d:e4:51:d9:93:6d:81:d8:c4:30:
         84:8b:dc:27:82:49:a9:77:ae:cc:4c:8b:2f:90:6a:6d:a5:19:
         69:7f:fc:78:c2:74:9f:c0:ef:9d:a5:e9:2b:ec:83:2c:79:83:
         24:27:7e:65:8d:6b:72:6c:75:8b:f1:98:16:0a:04:98:ba:27:
         ec:53:30:d2:8a:28:82:fe:c9:37:43:41:2b:73:63:84:e9:6b:
         71:29:a1:eb:f1:8e:18:c6:9c:25:f6:57:68:f3:d1:0d:d3:5a:
         30:60:b0:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+x8FaDe+fxlnxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0
MTc1MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk
YjE0MjM1MTAtNTA3YS00MzAyLThkYmQtOTMyNDQ2NTNjYzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXRwkDGai6G6AoklR+ottd73RdsAEaFkkyty
pbUwNbeC6hLl8fLiSjAWhEbkfcb0gC9RkHP/h1GFJ9U8aP+pPKEOSDXBL4zvAuA6
Aibh0qyQndFFLIBH+HyN7D54tS046E23x77f6AArVbzGlGKpQdoJ0JXQ5mNDUXMy
GXAOHM+O1HgNe7n0jJ7H2Y/YEO1WI2CFdMwIREsnA177foma6iexBVJWZD0RsKzJ
JukKeLNnUwwWmXrC9BS+WpgEoaZ04Wn82TLv2DNrKk9T3bySW6hOjBVq/0tOl1UC
oVxM8VxrGVjebHINJeDQBHPvNHc4fBYkQv+iQErM7hdJQOiQFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2ZZlReDbHTGgQHh4T2Nz0ClMILMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz
MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZDNlODVjMGUtZDQ2NS0z
YmMxLTk1YzQtY2VmZTBhYjNlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj
YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0
NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1
Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiis8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOMWay6fgFArdvZdjkEiPHwtqoE/UG9ze51T/42f037W0i2wV9z5L8Mb
flhxMkkw7P6/ldpLZMmaUbTIq6fBk1fhfr+EfXGyIVcnuUpthQnFcStN3i92xdf/
Q6Cx3GXEFm/cmKruPfC2GrkDuz1IXTRtMUjj7ALy66n0fdmyok8oaWdY9UfJHWy2
GaLXCQo+pmZ94ijDO0Z7beRR2ZNtgdjEMISL3CeCSal3rsxMiy+Qam2lGWl//HjC
dJ/A752l6Svsgyx5gyQnfmWNa3JsdYvxmBYKBJi6J+xTMNKKKIL+yTdDQStzY4Tp
a3EpoevxjhjGnCX2V2jz0Q3TWjBgsEY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:42 2025 by rpki-client