This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa
File:                     c258e36e-fd95-31f2-b381-fab16f55d8da.roa (raw, json)
Hash identifier:          8DET6v329PMtkvpuQTRJIs7qSjksn9x3FFV38vwr5Mo=
Subject key identifier:   D9:95:4D:30:FB:D6:88:7C:EB:4E:4A:27:16:D7:FD:B3:60:D5:EA:31
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584BD33062986E5CC8277CEF1280
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa
Signing time:             Tue 11 Nov 2025 14:00:38 +0000
ROA not before:           Tue 11 Nov 2025 14:00:38 +0000
ROA not after:            Mon 09 Feb 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        158.115.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d3:30:62:98:6e:5c:c8:27:7c:ef:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Nov 11 14:00:38 2025 GMT
            Not After : Feb  9 14:00:38 2026 GMT
        Subject: CN=03a586ac-02e4-4564-831c-e3825a1eb894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:10:f6:9f:f1:96:7d:db:55:45:bb:06:ed:
                    aa:23:22:73:97:0b:40:17:1b:a1:0a:6d:81:57:78:
                    28:f1:3e:30:49:9c:a8:0d:1d:db:41:f1:ec:5a:6c:
                    9c:2f:43:35:91:52:29:59:d3:8e:ed:d0:c5:be:7f:
                    8a:08:1b:f6:ee:54:93:27:48:53:31:62:4b:73:04:
                    20:ce:5c:aa:a0:9c:41:d7:e9:ab:be:40:00:97:a7:
                    76:ec:f4:a6:75:eb:3c:20:24:fc:cb:46:09:11:b4:
                    47:08:75:24:af:cf:99:f6:d6:bb:3f:de:25:72:d7:
                    bc:f7:62:c1:f1:ac:49:af:ed:51:d8:97:6f:82:af:
                    81:d9:86:0a:12:9c:55:a1:72:91:ba:89:b0:c8:b0:
                    98:12:ec:e8:f7:c4:7c:5f:a7:4d:26:c0:18:6a:56:
                    0c:fb:23:90:84:f1:ea:dc:00:c9:87:cc:57:2d:64:
                    25:67:ac:72:93:42:21:41:58:b9:03:da:9f:63:bc:
                    ca:b5:86:2d:71:32:2d:ff:20:60:a8:79:1e:cb:b2:
                    59:fb:0e:3e:90:08:1b:5c:c7:1e:88:d6:67:41:bf:
                    98:9b:ba:cb:2a:90:06:04:42:8f:26:d1:32:4a:2a:
                    d2:c5:64:10:ca:09:a5:42:50:ed:67:50:7b:04:c2:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:95:4D:30:FB:D6:88:7C:EB:4E:4A:27:16:D7:FD:B3:60:D5:EA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:db:78:78:7d:f2:14:40:14:33:e2:d7:43:6d:7f:0c:90:
         a8:cd:9c:bb:2a:7c:5e:13:6f:bc:52:cb:e3:d3:e4:a9:5e:a0:
         79:57:ac:65:0c:6d:4e:dd:ed:ac:b4:83:1d:92:37:b9:86:26:
         d5:c8:6e:07:de:74:51:8a:17:dd:6d:e0:60:9f:47:24:50:a3:
         da:5e:e4:93:b9:ee:b6:d7:3f:57:05:db:20:50:3e:a7:4f:89:
         46:eb:cd:5b:e7:56:4b:9f:47:fc:fe:b9:e7:14:2c:54:86:35:
         97:01:f1:d3:04:2f:43:01:f5:03:61:a2:13:c8:b3:3f:fc:93:
         53:86:c5:64:81:45:7d:2b:e5:c0:ba:bd:e2:0c:fc:ca:35:d8:
         28:46:fd:94:06:c0:db:7b:25:2a:e0:56:28:b1:6a:f1:db:a1:
         19:1e:46:4c:47:cb:1a:63:38:2f:5e:35:1e:a6:91:64:a4:29:
         98:ab:22:f4:82:7c:d2:f8:96:4d:d3:44:1e:b4:4e:75:85:38:
         47:73:a1:02:8b:e4:6b:c8:56:0e:36:1a:92:6e:1a:1a:7c:c2:
         15:fc:1e:61:51:b1:49:df:0f:ec:0d:30:9c:45:49:9e:a0:69:
         cc:a7:70:a3:56:61:15:d8:ed:80:85:e3:46:c1:9a:49:ee:9b:
         50:d4:64:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGKYblzIJ3zvEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk
MDNhNTg2YWMtMDJlNC00NTY0LTgzMWMtZTM4MjVhMWViODk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4UQ9p/xln3bVUW7Bu2qIyJzlwtAFxuhCm2B
V3go8T4wSZyoDR3bQfHsWmycL0M1kVIpWdOO7dDFvn+KCBv27lSTJ0hTMWJLcwQg
zlyqoJxB1+mrvkAAl6d27PSmdes8ICT8y0YJEbRHCHUkr8+Z9ta7P94lcte892LB
8axJr+1R2Jdvgq+B2YYKEpxVoXKRuomwyLCYEuzo98R8X6dNJsAYalYM+yOQhPHq
3ADJh8xXLWQlZ6xyk0IhQVi5A9qfY7zKtYYtcTIt/yBgqHkey7JZ+w4+kAgbXMce
iNZnQb+Ym7rLKpAGBEKPJtEySirSxWQQygmlQlDtZ1B7BMKPhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmVTTD71oh8605KJxbX/bNg1eoxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzI1OGUzNmUtZmQ5NS0z
MWYyLWIzODEtZmFiMTZmNTVkOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgv23h4ffIUQBQz4tdDbX8MkKjNnLsqfF4Tb7xSy+PT5KleoHlXrGUM
bU7d7ay0gx2SN7mGJtXIbgfedFGKF91t4GCfRyRQo9pe5JO57rbXP1cF2yBQPqdP
iUbrzVvnVkufR/z+uecULFSGNZcB8dMEL0MB9QNhohPIsz/8k1OGxWSBRX0r5cC6
veIM/Mo12ChG/ZQGwNt7JSrgViixavHboRkeRkxHyxpjOC9eNR6mkWSkKZirIvSC
fNL4lk3TRB60TnWFOEdzoQKL5GvIVg42GpJuGhp8whX8HmFRsUnfD+wNMJxFSZ6g
acyncKNWYRXY7YCF40bBmknum1DUZFc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:02:28 2025 by rpki-client