This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa
File:                     5d7ba423-e931-3576-a682-7ef77298c323.roa (raw, json)
Hash identifier:          LB+KYgQBno5AKfQwE6cFtOsEFW0uba4ciSeFNm6MmHY=
Subject key identifier:   E0:85:E6:DB:DF:4E:A7:D2:A8:D3:CA:58:A6:AB:D7:A5:C3:3B:24:17
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584BFBAB4B76907796859584C010
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa
Signing time:             Wed 26 Nov 2025 02:00:31 +0000
ROA not before:           Wed 26 Nov 2025 02:00:31 +0000
ROA not after:            Tue 24 Feb 2026 02:00:31 +0000
asID:                     40788
IP address blocks:        192.64.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fb:ab:4b:76:90:77:96:85:95:84:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Nov 26 02:00:31 2025 GMT
            Not After : Feb 24 02:00:31 2026 GMT
        Subject: CN=00855008-6b87-48ce-afc0-2c0e539e1b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:53:40:51:24:59:76:99:cd:a2:2a:d6:26:
                    74:62:cf:cf:81:75:0c:d1:8d:b4:bd:c3:03:81:13:
                    a4:7c:4b:bf:91:80:82:c0:a5:3b:68:8a:9b:3d:b5:
                    de:eb:24:7a:98:25:18:7c:a4:17:a3:bd:1d:1c:1c:
                    21:ff:d0:cb:95:00:61:55:48:77:d0:5b:1c:3a:f9:
                    85:1b:55:3d:58:11:f3:1d:9f:d1:18:45:ff:8d:42:
                    c0:28:17:cf:25:53:17:8c:38:ee:d6:43:6c:24:46:
                    ff:e4:cd:c2:c6:6f:8d:23:50:ea:b0:c8:04:ab:37:
                    4d:2d:22:dd:4c:29:77:70:3e:4b:96:bc:50:d2:d0:
                    87:d8:1c:13:3c:a3:04:65:58:1f:81:c2:b0:30:3d:
                    33:b8:c9:bc:c9:74:5e:9b:b5:f3:c3:da:30:f0:6e:
                    99:24:fe:ca:60:3f:e5:55:43:d9:ac:bd:9c:5c:84:
                    28:df:09:f2:33:ca:68:bb:f4:45:5a:44:22:c8:bd:
                    32:6b:7d:1c:60:d9:88:89:ab:f8:45:01:fa:7e:dd:
                    4d:f6:39:fd:7a:c6:6a:ff:ab:56:a8:6b:9e:ba:b9:
                    d2:ac:f5:c1:c5:bb:45:a1:11:cc:e3:59:4b:35:07:
                    c5:bc:38:2e:db:5e:8a:a7:aa:25:6f:8b:ca:3a:59:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:85:E6:DB:DF:4E:A7:D2:A8:D3:CA:58:A6:AB:D7:A5:C3:3B:24:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9f:26:2b:7a:a5:82:e5:fd:25:98:66:98:21:04:86:7e:95:
         5d:f2:0f:ec:62:86:f4:9e:16:c1:bd:57:f8:a0:27:1f:c2:ea:
         80:97:b9:31:dd:0c:89:03:17:43:92:f3:d6:39:71:65:9c:93:
         5f:71:f4:77:9a:1a:cf:8c:fb:f7:b1:cb:63:f7:ae:53:85:d2:
         7e:51:3a:b2:74:92:c0:f6:7e:09:10:ba:01:af:06:98:a6:12:
         54:88:df:d1:47:6c:10:f9:72:03:5e:31:ad:83:06:c5:a0:20:
         46:47:0a:a4:ab:f9:18:1e:e3:bc:b4:70:01:fe:43:c3:06:75:
         32:c3:72:87:c8:6f:4d:cd:ac:f7:7c:07:d0:cd:8c:10:9a:8b:
         a3:c6:65:83:9b:a4:6d:f3:b0:f9:80:28:80:14:01:82:51:8b:
         f1:67:47:97:19:c7:45:c8:1f:7a:11:86:8b:98:26:1e:ac:d7:
         b1:1b:f7:2a:bf:e5:02:da:57:53:28:8d:8b:c5:08:66:06:00:
         a5:93:f7:f3:59:eb:28:de:ae:7e:d7:dd:70:25:06:0c:1e:a4:
         d7:10:61:16:35:e2:af:02:f7:d3:2e:c2:0e:9a:5e:84:6f:d6:
         d0:96:01:8c:ad:03:fc:c8:f9:49:eb:3c:bf:c7:9b:c3:7f:85:
         64:d2:78:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:37 2025 by rpki-client