This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa
File:                     7c01087c-083d-3c5b-872e-09444b7eb99f.roa (raw, json)
Hash identifier:          QRdVHtw5c1zTNaroB7lf2S67MLLnwtL+842PYAVYex0=
Subject key identifier:   1D:4C:93:9E:4C:74:4E:6B:31:1A:08:47:E9:87:53:D9:34:B5:45:5E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584C09A0AF3A6A4A7779EB2DE500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa
Signing time:             Mon 01 Dec 2025 02:00:30 +0000
ROA not before:           Mon 01 Dec 2025 02:00:30 +0000
ROA not after:            Sun 01 Mar 2026 02:00:30 +0000
asID:                     7029
IP address blocks:        71.29.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:09:a0:af:3a:6a:4a:77:79:eb:2d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec  1 02:00:30 2025 GMT
            Not After : Mar  1 02:00:30 2026 GMT
        Subject: CN=4ebffbec-b90f-4bbf-8b87-5421c5c3bef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:55:d3:04:a2:c1:cc:5f:64:2d:e1:4b:1c:41:
                    ca:21:ff:45:13:50:ec:03:b7:59:90:4b:9c:25:94:
                    15:ba:c2:19:cd:b7:44:cd:a4:50:b2:07:06:6e:6b:
                    f8:21:d1:f2:73:a0:5d:b7:c7:50:d9:cb:59:4e:e6:
                    07:c8:24:a0:41:22:18:65:ed:40:8a:9d:b7:42:a5:
                    da:49:45:c1:14:fc:02:e0:03:11:07:91:9f:5b:71:
                    72:78:a9:48:21:82:f1:cf:8b:ce:21:4c:ba:4f:3d:
                    93:1d:41:90:87:36:c4:57:d6:02:e9:dc:67:c8:10:
                    2b:45:d8:16:8b:f7:52:2f:75:a1:6c:bb:a8:f6:9f:
                    75:9e:78:c2:cc:c8:31:a0:ab:ad:22:14:8b:2a:76:
                    e0:6c:6a:dd:27:a4:af:70:2a:62:8c:d7:04:af:ba:
                    3b:c6:02:3e:21:3c:f0:96:8c:c3:cc:20:a4:5b:67:
                    6d:fc:ba:a4:9c:79:d3:52:bc:54:36:97:7f:e0:b9:
                    b2:ef:b0:65:34:58:0b:11:ce:31:2a:12:e7:53:2d:
                    05:55:75:5e:b5:1f:2c:4e:2d:27:33:5b:b1:ed:01:
                    3f:20:64:10:5f:8c:d6:df:7c:f7:f1:11:82:8e:fd:
                    6c:95:fa:d7:02:8b:31:6e:0a:22:14:23:25:fe:d6:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4C:93:9E:4C:74:4E:6B:31:1A:08:47:E9:87:53:D9:34:B5:45:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:d5:a6:79:b0:6d:0d:08:d3:6d:9b:36:3e:4a:38:9c:37:
         f7:f1:79:80:93:38:3b:3b:71:6f:92:c3:25:ba:b0:a7:73:11:
         40:16:0f:0f:52:b0:ca:cf:30:24:84:78:18:cb:a4:f4:86:15:
         f3:13:41:c7:9c:f0:3b:18:2d:44:ae:19:d0:37:b5:50:51:5d:
         73:e1:7e:0a:7a:c2:9f:98:df:27:d8:58:db:d3:e0:99:22:a4:
         af:91:30:4a:d0:cc:1c:05:4e:6d:36:55:70:3a:6e:6e:f0:8b:
         7e:05:23:58:6e:44:b6:81:47:cb:39:b3:60:52:bb:14:74:99:
         5f:9c:50:4b:2b:f0:0d:38:b0:03:96:d0:66:58:43:db:3b:26:
         3e:4f:9c:0f:1f:33:36:b2:a2:f1:d5:dc:24:76:aa:b4:36:0e:
         92:c6:a2:3c:70:da:c4:94:34:d6:36:4d:24:e7:92:90:ea:d3:
         ed:6a:f1:ac:a6:0d:1a:68:69:cc:0c:ae:49:53:48:22:b9:30:
         2b:a4:e3:90:cd:87:e2:51:62:d3:0f:8f:ad:f0:1d:bf:e7:cd:
         8e:89:f0:b5:d8:ab:de:38:c9:c6:d0:c9:93:06:62:18:fe:7e:
         fc:42:95:0a:f5:ed:cd:0e:04:81:31:14:f4:37:7d:72:d8:87:
         44:32:ac:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:10:11 2025 by rpki-client