This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa
File:                     97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa (raw, json)
Hash identifier:          S3yvtd9zFVW2Q3ZbnwsTnYR2xsioaI7CtUFudpJYhv4=
Subject key identifier:   36:5D:51:89:68:C0:34:BD:B9:77:64:B5:66:AD:A4:11:74:CA:E7:3F
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584BD5FB138DEB291E2AF8339A80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa
Signing time:             Wed 12 Nov 2025 14:00:37 +0000
ROA not before:           Wed 12 Nov 2025 14:00:37 +0000
ROA not after:            Tue 10 Feb 2026 14:00:37 +0000
asID:                     18434
IP address blocks:        147.249.0.0/24 maxlen: 24
                          147.249.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:fb:13:8d:eb:29:1e:2a:f8:33:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Nov 12 14:00:37 2025 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=295c12a8-9c96-416b-ab5d-c894b695b29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:d8:76:23:94:39:8a:45:52:38:a3:d2:c2:
                    00:dd:3f:cd:a4:48:c9:e7:eb:95:ba:0a:0e:16:c3:
                    2f:40:44:e7:db:c7:35:1d:a9:f4:2f:30:60:3d:53:
                    ff:b3:d4:35:c5:84:a8:e4:bf:18:62:4e:65:02:58:
                    86:9e:30:52:35:59:a3:6d:e2:08:50:e4:ce:66:9d:
                    68:d6:61:df:e6:95:e8:df:e0:77:5c:48:c0:5f:3e:
                    cf:72:3c:18:90:63:c8:93:1e:52:2d:03:f3:7a:c2:
                    8d:20:8a:92:0f:23:ac:5d:1b:dd:c2:de:ed:cb:19:
                    63:66:b1:82:af:ec:a1:93:9b:b3:28:89:5a:e4:d9:
                    fe:24:f8:23:0c:2e:69:3d:e7:ed:5d:fe:c6:8b:11:
                    74:d1:34:36:3a:ce:6c:52:d7:8b:21:e4:8c:c1:71:
                    2e:e2:97:44:6c:eb:4a:98:b3:74:2d:5f:28:cc:48:
                    1a:b4:83:4d:e7:02:7d:c8:e8:d0:96:bc:5a:49:29:
                    e6:73:fb:a7:32:69:10:3b:51:cb:e2:dd:e9:94:9f:
                    c6:1a:6f:08:1d:42:c8:49:8b:25:05:cd:b4:8b:72:
                    8e:0e:49:65:84:b2:65:db:fe:5d:a6:18:74:69:50:
                    b9:ea:98:34:10:fb:eb:a0:9f:61:8b:5a:76:3d:62:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:51:89:68:C0:34:BD:B9:77:64:B5:66:AD:A4:11:74:CA:E7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:04:68:6d:4b:b3:a8:1c:fa:4f:ad:5d:35:bf:2f:81:6b:
         97:2c:30:7a:e1:e2:db:80:00:1b:c6:5d:22:19:e1:09:c4:75:
         5f:a1:c7:ad:c7:96:0c:69:d1:9c:ef:78:28:7c:42:57:d9:9b:
         a8:c5:0c:fa:3c:2d:c2:c8:1d:91:fe:cb:1e:db:fb:81:3c:38:
         cc:e5:74:35:ed:df:a3:1f:c9:86:4c:4b:39:9f:7c:0a:9c:7e:
         5b:5d:15:1d:7c:f4:6b:3b:fb:48:59:b5:ad:cb:5d:91:92:87:
         09:42:db:31:7f:c5:f3:cd:e1:b1:a0:c9:b2:43:b4:46:54:55:
         58:d4:65:bb:8a:13:74:03:62:ef:e6:37:1c:74:d7:de:bc:4e:
         6f:45:14:62:ea:8e:70:73:2c:c9:b2:b7:94:14:cb:94:4c:f9:
         58:b5:19:3f:68:31:e8:1b:0e:e6:95:08:51:d9:e7:54:ff:8c:
         49:ba:73:60:f0:a0:13:79:cf:34:50:96:d1:46:f8:30:d6:de:
         39:55:ef:83:fa:92:b2:a8:43:82:18:74:ac:6c:30:26:d5:5a:
         79:b6:64:99:f4:ff:da:ec:0e:e0:cf:8a:ad:e4:e5:a3:bc:77:
         1e:b2:bf:85:dd:c9:6c:3d:49:49:69:3b:d3:eb:13:66:99:36:
         4f:f7:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:42:53 2025 by rpki-client