This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2d9d5933-2255-3d87-8089-921bae894f27.roa
File:                     2d9d5933-2255-3d87-8089-921bae894f27.roa (raw, json)
Hash identifier:          JGiwKj9gzSdXutqpD+PhZYQgl6bqQmEFkG+9UH8pKLY=
Subject key identifier:   08:55:BE:DF:C4:D6:AC:01:55:A9:6C:9D:EC:B8:E8:E1:88:C1:EA:3B
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584BCF004BC50AAB1610C624D480
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2d9d5933-2255-3d87-8089-921bae894f27.roa
Signing time:             Mon 10 Nov 2025 02:00:31 +0000
ROA not before:           Mon 10 Nov 2025 02:00:31 +0000
ROA not after:            Sun 08 Feb 2026 02:00:31 +0000
asID:                     22652
IP address blocks:        216.137.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cf:00:4b:c5:0a:ab:16:10:c6:24:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Nov 10 02:00:31 2025 GMT
            Not After : Feb  8 02:00:31 2026 GMT
        Subject: CN=8fad7aa8-e944-4ea9-b23a-70f6d22bce9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:fb:23:69:c9:49:0a:ea:c7:b3:64:ab:fd:
                    dc:ed:58:da:ee:36:77:97:bb:f5:f9:4f:be:6e:14:
                    08:1b:b4:92:44:c2:21:ae:9e:0b:8e:c9:02:e9:c4:
                    a3:f9:99:8e:c5:a3:d1:84:01:1b:b0:bf:eb:8d:8f:
                    ce:74:ca:4b:44:5e:15:83:65:37:1c:7b:b7:a9:33:
                    2e:95:88:3d:1a:d3:b7:37:c1:fc:da:4b:42:a9:af:
                    75:ef:0c:7b:2b:68:8f:4e:71:83:d6:9d:cf:73:15:
                    2e:70:4c:45:5f:20:0d:5a:87:d4:3e:e2:0c:0b:a9:
                    d0:a7:10:9b:17:39:86:e3:50:26:b7:cd:ae:9f:4f:
                    61:cd:57:f3:9a:45:08:a5:ae:3d:d0:e5:19:57:4f:
                    bc:c0:ba:28:dc:88:b7:e9:31:87:c0:6d:45:fa:59:
                    a5:9a:b0:66:b2:1e:a4:de:95:97:cc:4b:4e:40:65:
                    0c:62:f2:14:89:b0:c8:64:f5:21:44:25:87:d9:f5:
                    13:15:ab:72:49:06:09:f3:61:70:c8:43:30:10:f0:
                    d1:ee:b1:ac:1e:4e:5f:fd:f3:0a:2b:bc:9b:d1:40:
                    0a:43:6d:7a:f5:84:32:f0:8e:7d:85:5f:11:3d:c1:
                    f3:4f:b2:aa:0c:24:d6:5a:04:1c:78:79:39:80:6b:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:55:BE:DF:C4:D6:AC:01:55:A9:6C:9D:EC:B8:E8:E1:88:C1:EA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2d9d5933-2255-3d87-8089-921bae894f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:97:4a:1a:bc:8a:71:4d:91:a1:7a:72:61:0c:25:10:6c:f9:
         20:d9:c4:9c:c3:11:3b:71:02:85:2e:e4:c2:55:91:51:3b:76:
         4d:7d:0e:c5:f0:6e:e9:f3:ed:81:3d:5d:73:53:8c:59:60:77:
         e6:4b:70:d4:64:78:ce:58:8f:f3:62:ec:c0:03:b1:3d:5d:a5:
         db:de:50:9a:e0:a6:85:fb:25:12:25:37:ae:ab:dd:cd:0d:ff:
         d1:5a:78:75:7c:76:d1:0d:cc:52:14:26:07:60:28:96:22:c9:
         d5:27:8f:d2:5d:d4:50:f5:93:8d:92:cc:b5:3e:5a:cd:f8:43:
         92:a9:30:50:27:fa:f6:49:1d:cb:9b:2b:ca:fa:b8:5f:dc:89:
         f7:27:69:4f:cc:3c:38:c0:32:82:4e:ce:ec:2e:52:a7:31:6a:
         9f:6d:4b:d1:09:47:2f:d0:cd:cb:c7:40:ea:36:e4:73:28:ea:
         9d:5c:96:c7:97:19:bd:4a:6c:c5:1a:68:56:ee:11:2f:60:58:
         37:98:c3:f1:d1:9c:d4:23:50:09:7e:0c:9e:e2:cb:fb:bf:32:
         06:80:ee:76:4a:dc:18:32:4d:a8:df:9f:56:d5:3a:32:12:ff:
         c9:7d:d8:ef:36:a8:cf:30:8b:82:55:5f:11:c2:89:71:6c:8d:
         60:bd:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:34 2025 by rpki-client