This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa
File:                     b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json)
Hash identifier:          SSqoyxIJVEr1cR2L3qIlt9huakHBuIix0VOjbUFLrL4=
Subject key identifier:   D2:EE:9D:7E:63:2C:DE:BD:D2:5F:09:1D:F4:02:29:49:95:6E:01:28
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584BD5FB302F1FA85A7E79A79280
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa
Signing time:             Wed 12 Nov 2025 14:00:37 +0000
ROA not before:           Wed 12 Nov 2025 14:00:37 +0000
ROA not after:            Tue 10 Feb 2026 14:00:37 +0000
asID:                     22781
IP address blocks:        216.131.120.0/24 maxlen: 24
                          2606:b300:8200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:fb:30:2f:1f:a8:5a:7e:79:a7:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov 12 14:00:37 2025 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=c9c2a299-a107-4b67-9e0e-bb5d75ff4375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:20:95:0e:21:52:6e:23:e1:51:fb:bd:82:
                    a7:00:a2:f2:4f:93:bb:46:9d:9a:02:c8:92:21:ec:
                    ef:e4:75:a0:83:09:45:90:9e:18:ad:35:99:ac:38:
                    13:7d:68:ad:a5:3e:79:98:7e:ab:18:26:7f:b2:39:
                    6a:7e:1b:50:bb:bf:e4:56:9a:d5:fe:bc:89:10:4d:
                    93:6e:5f:08:b8:bb:41:b6:c5:e1:90:10:9e:25:fa:
                    42:b0:a0:23:8e:7d:02:6b:c9:55:dd:5e:9f:aa:c0:
                    ca:8b:01:15:34:86:9d:bf:2a:f8:fe:fc:2b:06:1b:
                    6e:e1:50:0e:60:b2:b1:f1:f4:1f:a6:96:02:b7:25:
                    d3:c8:71:35:40:14:71:ed:8c:7d:3f:6d:b7:bc:42:
                    66:0e:09:df:52:07:37:5b:47:c1:60:ae:70:1d:b1:
                    10:bf:c1:33:b9:a2:8c:ae:78:78:17:91:c9:84:59:
                    4b:76:9d:59:1d:83:27:86:3c:bb:7c:b2:dc:71:87:
                    2b:c7:0e:bf:58:77:56:d8:f7:8f:31:51:2c:0c:fd:
                    bf:b9:0f:99:dd:a1:a0:56:73:b8:79:64:05:3c:10:
                    0f:0a:7a:2f:35:53:4e:f5:4e:dd:ef:93:95:fa:f6:
                    37:41:6c:80:70:e7:a5:a1:99:15:df:97:77:53:ef:
                    d4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EE:9D:7E:63:2C:DE:BD:D2:5F:09:1D:F4:02:29:49:95:6E:01:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.120.0/24
                IPv6:
                  2606:b300:8200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:b5:de:55:bb:42:8b:fa:41:0d:ee:11:fd:65:44:d5:e5:
         a4:8c:bd:0e:24:68:4a:a4:a1:d5:e3:b8:08:5c:88:87:0d:a2:
         84:e5:13:b7:70:be:81:d9:25:d5:ea:ab:bb:83:07:39:f5:04:
         e8:9c:86:01:c8:6b:44:e4:c1:34:6b:68:dc:c6:f2:50:28:5c:
         3b:0b:ee:78:04:c1:65:50:e0:78:27:ee:f4:b4:a6:c8:70:f6:
         c3:e1:0c:fd:5f:25:74:39:8d:a9:f1:8e:44:3f:cb:d2:1f:6a:
         d4:0b:f3:4c:6e:72:69:9a:63:93:0c:c7:6f:b3:f7:08:44:a6:
         f3:bf:b8:49:60:45:b4:38:64:61:ef:af:32:43:f5:79:20:49:
         ae:79:e9:e4:9a:7b:c0:26:e2:0c:e6:0b:c4:06:ce:f6:13:be:
         d8:eb:18:33:d5:b9:91:2d:d7:77:67:78:0b:1b:d7:f5:41:13:
         ca:ab:c0:65:3f:74:41:94:e8:bd:83:69:ac:ba:c4:88:a6:a0:
         46:9e:2b:3c:18:a0:4e:bc:b3:2d:2c:83:7f:7b:87:c1:42:02:
         40:3d:f1:45:5a:89:f4:e0:40:77:f6:08:c0:38:c1:db:c2:b1:
         4b:5b:99:74:fc:95:b3:75:83:51:40:bc:cb:33:84:76:e2:78:
         2c:01:dc:30
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEvV+zAvH6hafnmnkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk
YzljMmEyOTktYTEwNy00YjY3LTllMGUtYmI1ZDc1ZmY0Mzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMMglQ4hUm4j4VH7vYKnAKLyT5O7Rp2aAsiS
Iezv5HWggwlFkJ4YrTWZrDgTfWitpT55mH6rGCZ/sjlqfhtQu7/kVprV/ryJEE2T
bl8IuLtBtsXhkBCeJfpCsKAjjn0Ca8lV3V6fqsDKiwEVNIadvyr4/vwrBhtu4VAO
YLKx8fQfppYCtyXTyHE1QBRx7Yx9P223vEJmDgnfUgc3W0fBYK5wHbEQv8EzuaKM
rnh4F5HJhFlLdp1ZHYMnhjy7fLLccYcrxw6/WHdW2PePMVEsDP2/uQ+Z3aGgVnO4
eWQFPBAPCnovNVNO9U7d75OV+vY3QWyAcOeloZkV35d3U+/URwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFNLunX5jLN690l8JHfQCKUmVbgEoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjIxNDgyYmYtODU5ZS0z
NTFiLWIzNTgtYTFjMDBiNjU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN4MA4E
AgACMAgDBgAmBrMAgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKzrXeVbtCi/pBDe4R/WVE1eWkjL0OJGhK
pKHV47gIXIiHDaKE5RO3cL6B2SXV6qu7gwc59QTonIYByGtE5ME0a2jcxvJQKFw7
C+54BMFlUOB4J+70tKbIcPbD4Qz9XyV0OY2p8Y5EP8vSH2rUC/NMbnJpmmOTDMdv
s/cIRKbzv7hJYEW0OGRh768yQ/V5IEmueenkmnvAJuIM5gvEBs72E77Y6xgz1bmR
Ldd3Z3gLG9f1QRPKq8BlP3RBlOi9g2msusSIpqBGnis8GKBOvLMtLIN/e4fBQgJA
PfFFWon04EB39gjAOMHbwrFLW5l0/JWzdYNRQLzLM4R24ngsAdww
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:05:13 2025 by rpki-client