This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa
File:                     9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa (raw, json)
Hash identifier:          XK2sIRy8q+tBgnCl3aRBX1IIJrA53hGz3yd1ztcRVEY=
Subject key identifier:   65:44:5B:7D:50:A0:BB:3F:F7:CF:61:1F:80:0A:5C:FF:F0:62:B3:D0
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584C242695461D731DEE61E21B20
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     10794
IP address blocks:        171.161.152.0/22 maxlen: 22
                          171.161.152.0/24 maxlen: 24
                          171.161.153.0/24 maxlen: 24
                          171.161.154.0/23 maxlen: 23
                          171.161.154.0/24 maxlen: 24
                          171.161.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:95:46:1d:73:1d:ee:61:e2:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=ebbd0fce-b025-4315-a9fd-cab23819ffcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:22:00:3a:ca:4f:d2:f3:95:6d:4b:ec:67:
                    35:5a:6f:17:28:d6:2f:6d:02:cc:4c:6c:5b:5c:51:
                    38:5d:5e:12:97:4d:1c:3f:52:f8:00:6d:9e:5f:ba:
                    d0:81:4c:72:aa:a2:38:ea:c5:2e:d7:d0:12:8a:63:
                    cc:85:f7:38:27:4a:68:3f:b2:80:53:fa:90:a5:7b:
                    77:59:1d:8f:56:98:85:71:00:16:4d:be:dc:1e:09:
                    ce:58:0a:ec:89:28:8e:93:5b:cb:a2:ec:a4:58:67:
                    1d:46:29:c4:ae:17:62:a9:4f:f3:73:ef:2a:e7:09:
                    1c:5e:d9:bb:12:2d:07:6e:6c:b2:4e:e4:bb:ce:61:
                    0a:e9:93:d0:b4:2f:e6:e3:fa:47:62:d0:d5:88:98:
                    32:ed:ed:ea:b1:ad:49:ba:2e:79:8f:ae:ba:7a:cd:
                    0a:bc:d3:ef:f2:c4:75:bb:35:80:ba:a9:01:74:1f:
                    04:90:21:d0:b1:47:f0:0b:77:75:c6:bc:7e:60:1c:
                    3a:cd:ce:55:1a:b6:d5:89:dc:4c:96:e6:90:d2:ad:
                    33:b0:53:61:bf:4d:f4:f8:57:fb:36:aa:51:6b:fe:
                    e3:b9:b4:87:f5:22:aa:cb:89:29:ac:e4:8a:6c:62:
                    0c:d7:d3:b2:1e:7d:cf:f4:97:eb:51:d4:4b:c2:86:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:5B:7D:50:A0:BB:3F:F7:CF:61:1F:80:0A:5C:FF:F0:62:B3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5f:fa:e8:e5:e5:ce:8a:e4:87:24:0b:8c:65:7b:0b:a6:2e:
         73:fb:c3:a6:36:cd:98:40:48:82:b8:14:01:3e:63:71:85:7b:
         b7:1d:ca:4d:ec:61:6a:bf:90:98:2b:72:ea:98:83:64:a6:2b:
         d0:4c:11:5f:67:2d:74:a3:d3:7f:05:30:67:f4:d9:2f:e6:54:
         d7:e0:c1:df:e3:d7:a9:5c:80:9a:39:47:df:59:c6:1c:bb:d0:
         81:05:8c:9c:46:63:d7:51:b1:ab:f3:56:9f:e5:bf:fd:68:42:
         1a:19:d9:91:24:20:81:ea:c6:0b:e3:21:15:d8:40:d2:8d:64:
         97:84:e7:f2:e7:6c:92:5f:1d:0a:ea:54:f1:b3:37:30:2a:30:
         fd:f1:4d:0a:94:0e:f5:a9:da:63:32:a2:12:f2:ea:55:64:93:
         26:54:70:dd:e9:8e:26:75:1f:5f:5f:1e:04:e6:5b:4d:8d:a8:
         5f:56:b8:fc:37:17:f7:ce:5c:fa:c3:a9:ed:4e:54:05:fd:e2:
         83:29:b9:bd:07:f8:7c:1f:4b:50:68:67:b7:ea:39:32:c2:30:
         87:45:50:72:a3:4c:f1:0e:b2:16:48:5c:4a:01:23:5f:3d:b6:
         60:63:a7:fa:f0:a5:3b:96:da:71:c4:58:4f:01:ee:f1:8f:b0:
         06:60:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:29:46 2025 by rpki-client