This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
File:                     1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json)
Hash identifier:          uiywbrpyN2q3y8e4pXqyvvFgY7Eu49o9o/MGvGtNLwY=
Subject key identifier:   A2:70:2A:CA:21:9C:08:A6:6D:CA:F6:D7:77:22:5F:82:5A:37:DA:AB
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584BF4B09B487FE41AEE08D499C8
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
Signing time:             Sun 23 Nov 2025 14:00:38 +0000
ROA not before:           Sun 23 Nov 2025 14:00:38 +0000
ROA not after:            Sat 21 Feb 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        170.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f4:b0:9b:48:7f:e4:1a:ee:08:d4:99:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Nov 23 14:00:38 2025 GMT
            Not After : Feb 21 14:00:38 2026 GMT
        Subject: CN=257eecae-495e-43fa-9552-4e6a11caa15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1b:4d:ed:00:cc:ea:fc:44:ce:03:32:14:c9:
                    31:46:5d:1a:8e:dd:e7:5a:65:eb:26:a3:26:4e:f0:
                    cd:2a:8f:95:40:ae:03:5e:05:a6:ff:01:69:5b:d1:
                    b6:9c:f6:e1:41:0f:ec:63:d5:55:a4:73:24:cb:93:
                    c2:51:ae:90:94:4d:f7:ed:1a:3c:8f:96:3c:d6:44:
                    27:88:d2:29:63:64:f0:83:0f:51:90:f7:40:8f:64:
                    53:f0:40:95:33:fc:b3:d7:57:5d:01:0e:f0:df:c5:
                    e1:4d:34:c0:69:2f:f1:7a:ec:02:92:c5:d3:cf:9e:
                    cd:d1:73:b9:35:fc:20:2a:a8:40:6f:d8:56:0b:83:
                    47:69:6b:b8:d7:2d:e0:13:bf:b5:d5:67:15:99:aa:
                    0e:1d:fd:19:fd:2b:d9:9b:f9:ac:7b:21:f1:32:42:
                    de:13:1a:f4:02:6f:28:f0:ab:07:c9:53:49:bb:1b:
                    f0:62:0e:fe:31:c5:67:dc:20:de:07:b1:9f:5a:75:
                    27:e9:08:b4:0a:c2:80:33:6c:ad:2e:19:77:04:bc:
                    a3:a7:49:f8:e0:30:87:4f:ef:5c:d2:79:55:d0:a1:
                    26:03:fa:ab:c4:57:47:f2:27:b3:1f:62:76:11:82:
                    c3:b2:00:24:98:ad:a7:03:08:7c:3a:d0:82:b0:de:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:70:2A:CA:21:9C:08:A6:6D:CA:F6:D7:77:22:5F:82:5A:37:DA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:15:e0:b7:48:71:3a:f7:04:ed:df:c2:2f:29:94:2f:ad:bf:
         98:e3:30:02:e6:1e:e5:9c:cc:44:3a:d0:ca:03:5a:0d:03:ad:
         b4:0a:81:fa:f1:b4:ee:e9:74:aa:80:3c:e6:56:cd:0e:88:b3:
         dd:e2:3c:04:ec:68:67:5e:0d:3a:89:84:d6:08:9d:c3:0a:56:
         2c:27:ae:2d:73:cb:15:3d:4b:9f:6c:5e:ed:cb:ee:24:0c:3a:
         88:78:bb:f2:be:6b:ac:fa:ef:3c:87:d7:ce:0d:24:84:a1:d0:
         48:22:c4:10:f7:21:17:4b:36:83:83:42:19:49:0b:31:d3:ca:
         5f:da:27:02:ee:e9:d8:8e:2b:df:d3:04:82:48:2c:7a:ca:ea:
         25:d5:d8:8c:41:59:0b:0d:0e:9e:3f:9d:22:38:e8:58:c5:20:
         63:65:e6:44:c1:cb:17:f6:8e:c0:17:41:64:96:28:96:e6:8d:
         fc:2a:c6:ec:09:e6:67:33:7e:2a:64:f1:65:da:55:a2:6e:51:
         a5:87:dd:f1:58:79:6e:1e:32:75:ba:20:1e:16:fe:39:b9:7c:
         b3:6c:a5:d7:9d:46:01:0e:50:fb:de:c8:10:af:a1:ad:a9:2d:
         b8:3a:09:c9:7c:52:a2:61:54:2d:29:59:61:13:6f:06:a7:8c:
         3e:2c:cf:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sJtIf+Qa7gjUmcgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4
Mjc5MB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk
MjU3ZWVjYWUtNDk1ZS00M2ZhLTk1NTItNGU2YTExY2FhMTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxtN7QDM6vxEzgMyFMkxRl0ajt3nWmXrJqMm
TvDNKo+VQK4DXgWm/wFpW9G2nPbhQQ/sY9VVpHMky5PCUa6QlE337Ro8j5Y81kQn
iNIpY2Twgw9RkPdAj2RT8ECVM/yz11ddAQ7w38XhTTTAaS/xeuwCksXTz57N0XO5
NfwgKqhAb9hWC4NHaWu41y3gE7+11WcVmaoOHf0Z/SvZm/mseyHxMkLeExr0Am8o
8KsHyVNJuxvwYg7+McVn3CDeB7GfWnUn6Qi0CsKAM2ytLhl3BLyjp0n44DCHT+9c
0nlV0KEmA/qrxFdH8iezH2J2EYLDsgAkmK2nAwh8OtCCsN7DLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJwKsohnAimbcr213ciX4JaN9qrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5
N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMWQwNzA1OGMtOTFlMS0z
ZThjLWI4NTUtNjZiNGU4MWU2NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5
ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw
ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0
OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUV4LdIcTr3BO3fwi8plC+tv5jjMALmHuWczEQ60MoDWg0DrbQKgfrx
tO7pdKqAPOZWzQ6Is93iPATsaGdeDTqJhNYIncMKViwnri1zyxU9S59sXu3L7iQM
Ooh4u/K+a6z67zyH184NJISh0EgixBD3IRdLNoODQhlJCzHTyl/aJwLu6diOK9/T
BIJILHrK6iXV2IxBWQsNDp4/nSI46FjFIGNl5kTByxf2jsAXQWSWKJbmjfwqxuwJ
5mczfipk8WXaVaJuUaWH3fFYeW4eMnW6IB4W/jm5fLNspdedRgEOUPveyBCvoa2p
Lbg6Ccl8UqJhVC0pWWETbwanjD4szys=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:12:48 2025 by rpki-client