This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
File:                     5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json)
Hash identifier:          mcOOMxYNM1aoLfePg6G2E7iNYmMNE8etc7R+VHwhL20=
Subject key identifier:   09:C4:1A:91:5B:99:F4:B1:40:9B:45:DE:B5:75:12:A6:CA:77:23:77
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584BF615E507DAE7C3B63F5D6040
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
Signing time:             Mon 24 Nov 2025 02:00:32 +0000
ROA not before:           Mon 24 Nov 2025 02:00:32 +0000
ROA not after:            Sun 22 Feb 2026 02:00:32 +0000
asID:                     16509
IP address blocks:        216.157.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f6:15:e5:07:da:e7:c3:b6:3f:5d:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Nov 24 02:00:32 2025 GMT
            Not After : Feb 22 02:00:32 2026 GMT
        Subject: CN=4b0c8479-740d-4ca8-b196-943938424855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:1a:12:d6:d4:0b:10:f7:8f:fe:86:e2:9b:
                    27:38:f3:ba:d4:b3:bc:60:86:99:ea:af:0d:94:ad:
                    8e:13:9c:9f:c0:5c:d4:21:fe:1e:b8:b4:58:1b:42:
                    ec:5d:93:14:11:61:c9:c5:8f:a0:79:8c:80:b9:6e:
                    4b:c8:87:9a:2f:86:01:f7:92:d0:3a:fc:02:bf:1d:
                    11:a3:a9:53:f7:4d:36:fb:cd:49:bb:8f:3e:89:32:
                    15:54:47:69:02:c9:be:d7:61:07:23:16:2f:e0:8f:
                    37:b0:5a:f9:cb:72:17:94:5d:b0:ce:21:c5:fc:99:
                    05:f1:b8:1c:b8:c0:71:e5:c8:7b:cf:57:b7:20:92:
                    b7:48:50:96:81:f0:0d:2b:e6:63:35:37:ca:f1:ab:
                    ec:b3:fb:e0:ec:ba:31:80:7b:8d:29:b6:09:23:8e:
                    00:66:b2:42:bd:4d:c9:ac:56:34:f1:38:4c:1a:c0:
                    2d:fd:9f:16:6a:94:f3:22:01:5b:05:5e:d7:08:37:
                    e7:a6:0e:1c:5c:93:04:96:d0:29:83:8a:29:3a:48:
                    09:06:75:b7:ce:3b:4e:c7:b5:bd:ee:2c:ad:52:dc:
                    bb:10:28:97:3a:c2:ca:94:ec:30:7e:2a:c6:0f:32:
                    97:66:9b:d6:ac:b1:f1:6d:1b:28:52:15:b0:af:97:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:1A:91:5B:99:F4:B1:40:9B:45:DE:B5:75:12:A6:CA:77:23:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:99:f8:61:d5:c0:d4:54:5c:e5:75:72:cf:4a:77:3b:24:6b:
         23:30:77:2f:01:10:e5:4d:10:7a:04:4b:ad:fc:85:35:e9:84:
         0d:56:5e:44:7b:2d:09:84:7f:36:a5:6f:1f:af:86:6a:ce:cd:
         99:20:f3:c7:97:a1:e4:b4:82:8f:ab:9f:ae:01:30:d5:37:73:
         e0:07:6c:60:15:b6:49:60:fb:cd:e4:62:1c:86:f0:e0:92:89:
         90:7b:78:ae:77:70:29:03:a6:d9:55:44:2a:d6:87:71:97:a2:
         03:61:8d:3f:57:ac:46:dc:bb:1f:d5:b0:e3:74:0c:b6:98:44:
         ae:53:69:40:69:3b:c4:2c:cd:8c:36:8e:dc:46:1e:a0:ad:d3:
         06:bf:a4:a7:88:31:bc:09:db:c6:b0:fc:e7:02:20:d7:dd:3d:
         cf:36:fd:24:6a:bb:83:bd:28:25:dd:3b:56:00:9c:3a:68:7b:
         f1:9f:dd:3d:de:d5:df:2b:4d:bb:4f:b1:7b:7f:a8:06:4f:ad:
         8d:b9:01:7b:5d:46:fe:f2:1c:fb:b3:a3:97:d5:e2:58:cf:fe:
         cd:c6:cb:87:d1:40:73:76:31:6b:73:ff:d9:43:95:9e:29:6a:
         cf:ea:6c:2b:be:d0:2e:f2:cc:5a:57:2e:ae:e6:80:3e:12:5e:
         c8:e6:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:15:58 2025 by rpki-client