This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa
File:                     bec70105-240d-3338-ac1a-1f6dd61ef242.roa (raw, json)
Hash identifier:          Bdb4ff9jjQ4DRShhj6eak2KhBqd0Ko7+YifSx/gaDE0=
Subject key identifier:   BF:66:25:BA:8A:C7:F3:B1:46:2C:DB:0F:2B:C8:13:83:2F:38:60:BA
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F4328584BEFE980B9E3943EB4386C5700
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa
Signing time:             Fri 21 Nov 2025 20:56:22 +0000
ROA not before:           Fri 21 Nov 2025 20:56:22 +0000
ROA not after:            Thu 19 Feb 2026 20:56:22 +0000
asID:                     395222
IP address blocks:        142.249.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ef:e9:80:b9:e3:94:3e:b4:38:6c:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Nov 21 20:56:22 2025 GMT
            Not After : Feb 19 20:56:22 2026 GMT
        Subject: CN=3432bd40-e821-4803-ad9f-d2ae03fb37ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:6b:b6:ba:da:d5:00:27:5b:ef:22:df:eb:
                    34:6c:80:41:b5:d8:70:e2:37:82:88:ff:1c:a8:1b:
                    98:4d:a4:c2:7b:dc:dc:09:2d:f9:de:e3:f9:2c:17:
                    ca:32:f2:1b:b4:7f:58:e3:53:71:63:38:3c:2c:a5:
                    0f:f5:8f:30:0b:62:21:24:d4:bc:91:a1:e3:a7:e6:
                    c5:36:34:ab:a6:d5:42:03:58:cb:99:f3:b2:d6:d3:
                    b2:e8:57:82:42:84:42:68:94:fd:3e:7b:64:bc:b7:
                    6b:b3:62:87:68:65:55:b0:d4:ae:5d:2b:72:2c:dc:
                    79:db:8c:b1:1a:f6:04:fd:2e:05:d5:7c:e5:0b:52:
                    0b:29:37:95:f0:78:91:95:ab:f6:d3:3d:d2:bd:e1:
                    0d:00:a6:fe:c8:c6:4e:0c:9e:59:28:14:62:3c:8c:
                    6b:51:78:65:7f:5c:89:bc:10:d1:62:a0:51:75:9d:
                    a5:b2:d9:f3:91:8e:45:3c:4c:7c:1b:d9:a3:e6:99:
                    ac:bb:54:ad:06:67:ac:db:d8:ea:d8:3d:1d:78:48:
                    ff:9c:8b:ee:c4:6b:9b:c5:a9:7e:0c:94:7b:e1:a9:
                    ef:b0:e8:57:5f:8a:8d:5c:8c:8b:81:20:0b:d7:40:
                    b4:31:6e:be:16:2e:3c:48:96:42:7f:5e:82:35:d8:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:66:25:BA:8A:C7:F3:B1:46:2C:DB:0F:2B:C8:13:83:2F:38:60:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:1c:58:5d:cc:4c:bc:cb:13:cb:14:b0:c2:95:a8:b2:e0:
         ba:f0:8c:41:63:29:51:c7:a8:06:a9:ac:e6:e6:46:54:8e:3e:
         26:63:08:f2:0d:75:dc:6b:87:df:21:23:17:20:bc:8b:80:3f:
         29:62:ef:96:0c:84:d9:82:65:9b:17:72:35:00:ff:4b:ca:52:
         1d:10:70:09:f2:ae:6e:05:a6:31:fe:01:08:8c:51:fb:32:47:
         32:8e:66:f5:1b:79:08:ae:58:ee:59:1e:04:34:3b:7c:b3:b0:
         bd:32:d1:c8:06:9e:c7:c2:6a:ab:eb:17:ad:db:32:70:a6:85:
         77:33:61:fa:54:ac:e5:30:c8:ec:79:77:59:30:44:48:d6:ea:
         a4:5c:6c:49:2e:fe:c7:09:b3:0f:36:e0:6c:6a:78:b4:04:06:
         af:52:bf:b5:70:8d:fa:b8:b7:d4:0f:d1:89:2c:45:94:9e:76:
         76:2f:40:24:ec:f6:09:4c:fa:84:c3:11:c5:6d:33:9f:77:ad:
         f3:32:44:3a:82:48:e7:5d:95:c4:5c:ae:fe:bd:30:96:63:8c:
         6a:ce:b5:10:24:05:49:69:af:48:d2:53:8c:a2:63:ce:e1:3d:
         18:e3:50:30:16:f6:7f:91:10:82:ae:60:f7:b2:fe:9a:ba:5c:
         57:1b:f7:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvv6YC545Q+tDhsVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4
Yjg0MB4XDTI1MTEyMTIwNTYyMloXDTI2MDIxOTIwNTYyMlowLzEtMCsGA1UEAxMk
MzQzMmJkNDAtZTgyMS00ODAzLWFkOWYtZDJhZTAzZmIzN2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvExrtrra1QAnW+8i3+s0bIBBtdhw4jeCiP8c
qBuYTaTCe9zcCS353uP5LBfKMvIbtH9Y41NxYzg8LKUP9Y8wC2IhJNS8kaHjp+bF
NjSrptVCA1jLmfOy1tOy6FeCQoRCaJT9PntkvLdrs2KHaGVVsNSuXStyLNx524yx
GvYE/S4F1XzlC1ILKTeV8HiRlav20z3SveENAKb+yMZODJ5ZKBRiPIxrUXhlf1yJ
vBDRYqBRdZ2lstnzkY5FPEx8G9mj5pmsu1StBmes29jq2D0deEj/nIvuxGubxal+
DJR74anvsOhXX4qNXIyLgSAL10C0MW6+Fi48SJZCf16CNdiC6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9mJbqKx/OxRizbDyvIE4MvOGC6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk
MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvYmVjNzAxMDUtMjQwZC0z
MzM4LWFjMWEtMWY2ZGQ2MWVmMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy
ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4
OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw
OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHn8HFhdzEy8yxPLFLDClaiy4LrwjEFjKVHHqAaprObmRlSOPiZjCPIN
ddxrh98hIxcgvIuAPyli75YMhNmCZZsXcjUA/0vKUh0QcAnyrm4FpjH+AQiMUfsy
RzKOZvUbeQiuWO5ZHgQ0O3yzsL0y0cgGnsfCaqvrF63bMnCmhXczYfpUrOUwyOx5
d1kwREjW6qRcbEku/scJsw824GxqeLQEBq9Sv7Vwjfq4t9QP0YksRZSednYvQCTs
9glM+oTDEcVtM593rfMyRDqCSOddlcRcrv69MJZjjGrOtRAkBUlpr0jSU4yiY87h
PRjjUDAW9n+REIKuYPey/pq6XFcb9zU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:29:28 2025 by rpki-client