This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa
File:                     dfb884b1-46ca-3bd1-9fbe-33434208f792.roa (raw, json)
Hash identifier:          3b+gQyC5eMGjWVB5/Th7mTCK+KvXAhcPvBJ2QBOOeJU=
Subject key identifier:   F1:16:BB:9A:BB:1B:15:62:FE:DB:29:C9:B0:11:B8:B8:2D:0C:BB:9F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584C0B0638F4C956A951A799E480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa
Signing time:             Mon 01 Dec 2025 14:00:39 +0000
ROA not before:           Mon 01 Dec 2025 14:00:39 +0000
ROA not after:            Sun 01 Mar 2026 14:00:39 +0000
asID:                     7029
IP address blocks:        173.191.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0b:06:38:f4:c9:56:a9:51:a7:99:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec  1 14:00:39 2025 GMT
            Not After : Mar  1 14:00:39 2026 GMT
        Subject: CN=17894ea4-62fb-474f-99a5-65854be7d548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:b5:cc:45:f9:19:e3:bb:9d:26:e3:c0:ef:
                    f9:30:c3:f1:f1:ed:d1:36:a8:6c:e6:52:d2:ef:de:
                    59:87:7d:81:c3:36:c3:fc:c3:e9:f7:15:13:fc:bb:
                    05:aa:11:c7:68:06:dd:fb:f0:ff:22:02:d9:34:f3:
                    01:d8:76:73:ac:e7:2b:46:f3:8b:09:56:e3:35:e9:
                    2f:a8:1d:26:fb:50:19:2c:55:db:39:a5:a2:5b:20:
                    1b:13:ec:96:06:2f:38:45:c7:89:5f:1e:bb:47:0b:
                    75:d2:fc:47:de:c0:9a:36:c2:3d:96:ce:96:b7:46:
                    64:49:84:fe:2c:0d:2e:ca:5e:23:3c:09:49:b4:ee:
                    52:a4:70:34:fc:3a:98:01:5b:a5:d3:f6:e9:a8:f8:
                    42:38:2e:c7:f8:64:9e:7f:15:5f:52:1e:66:ad:89:
                    c0:57:32:0b:ef:01:a4:ee:93:45:11:79:e7:97:b1:
                    c7:7d:c6:db:fc:e3:e7:9d:ad:9b:e9:43:fe:b4:da:
                    44:05:77:c9:2d:e1:0a:7b:ca:3c:46:96:fc:f7:f2:
                    eb:73:54:f3:ab:1d:cb:71:88:c3:bd:c6:20:ff:a2:
                    d4:ba:d1:34:48:25:6e:cf:41:f0:b6:db:51:21:e4:
                    4c:e4:e2:83:46:70:5b:4a:55:fc:99:8a:c3:96:c4:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:16:BB:9A:BB:1B:15:62:FE:DB:29:C9:B0:11:B8:B8:2D:0C:BB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.191.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:6e:49:81:23:4d:2a:57:97:bb:d7:d6:c7:c4:c2:b6:18:
         e4:c1:3e:cb:2b:c6:0e:38:32:13:f5:85:d5:b4:a4:82:99:9f:
         dd:4f:f1:fc:71:5b:83:06:30:7a:62:45:05:48:ef:13:1a:c5:
         ab:aa:3d:ad:9b:08:eb:0f:79:f2:b5:11:f9:3f:8b:28:f3:5b:
         bd:13:07:cb:b7:f9:6e:d4:9c:07:bd:0d:b3:82:6b:8f:a5:4f:
         91:3e:92:55:e7:aa:2e:65:b4:9c:41:05:0b:f5:79:73:99:f6:
         b0:69:ed:a6:04:28:d2:fd:8d:4b:df:c4:14:a2:67:bd:f7:e1:
         94:98:b8:3e:29:c2:b1:7e:c4:d6:96:87:7d:a0:8d:f5:47:b8:
         11:d4:05:15:0e:e0:92:77:90:02:b7:5a:d5:03:17:b4:5d:f7:
         58:a9:e2:51:13:8e:94:0f:2f:4f:11:d3:24:ce:9b:e6:18:35:
         6f:73:92:78:e6:ac:77:45:0e:d2:75:47:f3:cb:bc:0a:fa:01:
         fd:e1:f0:7e:9a:9f:95:91:18:91:22:ff:0e:a6:ec:82:20:c8:
         c3:db:35:36:91:0a:09:5a:6c:d8:af:2d:fc:01:e9:57:20:84:
         e2:93:d9:fa:db:53:52:2e:fd:3b:3e:8c:04:57:87:14:65:ab:
         cf:d7:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:30 2025 by rpki-client