This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa
File:                     c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json)
Hash identifier:          auIC9fXTnsb7jB8dgxW/ArHIADbZ8H8MEnh2voY+aUA=
Subject key identifier:   45:84:86:7A:D5:A8:E5:62:AE:16:D2:46:ED:7A:14:D4:48:A7:9B:B7
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584BD1CAF86B5E059644D96BA680
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa
Signing time:             Tue 11 Nov 2025 02:00:30 +0000
ROA not before:           Tue 11 Nov 2025 02:00:30 +0000
ROA not after:            Mon 09 Feb 2026 02:00:30 +0000
asID:                     395831
IP address blocks:        216.157.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d1:ca:f8:6b:5e:05:96:44:d9:6b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Nov 11 02:00:30 2025 GMT
            Not After : Feb  9 02:00:30 2026 GMT
        Subject: CN=dfd5406d-857c-4d24-9695-dbc446934715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:02:b5:e7:cd:af:3c:d9:31:d2:cf:49:54:
                    ec:d1:c8:7b:1a:7d:f2:16:b7:a2:27:e1:b0:b5:32:
                    b5:57:9f:53:5f:e1:78:46:c0:4f:68:9d:ce:5f:d7:
                    49:d3:66:64:5d:e3:08:b6:64:b6:b3:c7:5e:dc:09:
                    63:e4:f0:e1:71:25:cd:20:3d:0f:44:4f:71:3e:64:
                    a0:93:ce:ba:a9:4a:8b:c1:1f:06:45:96:1f:0d:b7:
                    fc:f6:14:55:41:fc:07:7b:de:94:8a:3b:b1:e3:a7:
                    c8:08:e8:50:b2:55:49:d0:ce:fe:df:72:09:74:03:
                    0c:63:da:d5:8d:22:70:c4:14:8b:50:86:4e:46:b5:
                    60:35:08:3a:fd:0c:b2:8b:a4:b6:74:46:bb:0d:4f:
                    54:32:2d:33:be:82:7e:23:96:3e:57:44:b7:b5:dc:
                    f5:7f:c2:c9:af:5f:dc:71:a8:27:f2:65:bd:05:4f:
                    9b:a3:02:37:5d:2d:5b:be:76:ea:94:19:a9:d7:16:
                    c5:3b:aa:eb:d2:1e:c4:39:58:13:21:ab:5b:59:d3:
                    d9:20:0e:f5:3a:59:52:c5:6f:a8:8e:dc:8d:8f:b9:
                    ce:62:3d:6b:65:98:bf:4e:a5:7a:e1:b5:be:10:0b:
                    1e:90:c5:c3:b6:84:53:18:3e:23:7c:11:df:33:de:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:84:86:7A:D5:A8:E5:62:AE:16:D2:46:ED:7A:14:D4:48:A7:9B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:da:45:20:83:d3:5b:10:3d:d5:d4:64:5e:06:63:dc:2f:
         ab:22:69:20:8e:ca:7b:8f:3c:0b:3e:41:52:2f:58:12:78:94:
         c5:a3:1b:f6:35:e0:c2:3c:49:a9:1a:0e:78:aa:78:64:56:c0:
         b1:80:e3:1c:38:8c:25:c6:a6:4f:a1:87:8f:c4:f4:52:91:9c:
         4d:56:23:b3:37:0b:c4:92:7e:a8:77:6d:95:27:c9:c0:fe:20:
         99:4f:4c:d5:a5:96:ea:04:7e:df:2e:26:3c:92:7e:b4:63:32:
         91:ee:a5:1e:bc:27:cd:83:a5:c1:83:ba:7d:9a:01:c2:ba:a5:
         a3:f8:bd:cf:42:77:d5:07:e0:10:2e:31:f2:a0:e2:67:56:51:
         9f:6c:cb:ce:29:58:f5:d9:24:90:97:8c:2e:84:c2:89:cd:44:
         97:ae:46:ef:aa:c7:0c:f8:7f:e5:1b:8b:9d:0e:1b:e6:9d:97:
         f6:04:3c:a4:f0:20:27:9c:c1:15:e2:5f:52:e3:1b:d8:b1:93:
         b1:49:88:c9:68:53:8e:fb:f2:d2:2b:a0:f9:2f:f7:02:36:9d:
         a1:7c:46:40:f5:44:aa:2a:62:90:37:ef:70:5b:19:9e:73:24:
         16:90:1d:35:a7:f7:c7:df:a9:cd:1e:8b:be:bb:58:f8:78:d6:
         74:43:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:05:54 2025 by rpki-client