This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa
File:                     e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa (raw, json)
Hash identifier:          umWXztlfQkvSI4wLjQkPVKgv3CfF3IsQYdUAHC3NUWg=
Subject key identifier:   99:4B:95:43:E6:7E:17:F4:A8:8E:95:AD:44:93:A8:0C:64:30:F1:81
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584C24269361790396803F3AF6E0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     10794
IP address blocks:        171.158.192.0/20 maxlen: 20
                          171.158.192.0/24 maxlen: 24
                          171.158.193.0/24 maxlen: 24
                          171.158.194.0/24 maxlen: 24
                          171.158.195.0/24 maxlen: 24
                          171.158.196.0/24 maxlen: 24
                          171.158.197.0/24 maxlen: 24
                          171.158.198.0/24 maxlen: 24
                          171.158.199.0/24 maxlen: 24
                          171.158.200.0/24 maxlen: 24
                          171.158.201.0/24 maxlen: 24
                          171.158.202.0/24 maxlen: 24
                          171.158.203.0/24 maxlen: 24
                          171.158.204.0/24 maxlen: 24
                          171.158.205.0/24 maxlen: 24
                          171.158.206.0/24 maxlen: 24
                          171.158.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:93:61:79:03:96:80:3f:3a:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=2c25c905-5291-4eda-bd1f-e644f480b3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:b8:31:48:b9:e9:93:6e:7e:a9:69:b6:ec:
                    5e:62:c5:5f:72:d9:6b:a0:6f:41:76:f1:2a:be:0d:
                    8a:8b:bf:b5:20:d6:7e:d7:b3:26:75:69:e0:2d:4b:
                    21:10:74:05:73:cb:6c:0c:90:06:15:a0:94:90:a1:
                    a8:d1:2e:55:50:3e:ab:a8:98:f0:5a:cc:bf:a6:f6:
                    f8:a8:7a:7b:a8:40:25:40:08:62:9d:18:eb:39:7a:
                    83:c6:97:2d:1f:b6:e2:13:0c:f1:6e:a1:27:58:f9:
                    5c:67:2f:0e:fe:25:33:46:90:50:9c:12:4e:fd:4f:
                    29:0b:a4:21:7f:ac:d9:eb:9f:d9:f3:f6:c8:57:53:
                    d7:68:80:79:ed:17:fc:8d:64:fb:39:f8:7d:61:ba:
                    58:20:a5:fc:a7:48:0d:98:f5:fe:c1:d3:13:a4:50:
                    0c:25:64:e2:88:1c:63:76:f1:ea:5b:ee:3e:9b:97:
                    f7:f4:10:47:a4:8f:02:b0:f8:0f:dd:2f:24:56:b6:
                    71:0a:82:21:55:2f:f1:4d:4b:c4:e9:47:9a:53:6a:
                    ec:7a:e1:9b:07:15:ee:cd:5e:f0:9f:73:6c:6f:21:
                    d5:61:af:0c:44:48:8d:59:6f:2e:d7:c2:06:70:49:
                    c2:a9:4f:d1:fe:a9:eb:7a:85:83:95:c8:a4:6d:f2:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4B:95:43:E6:7E:17:F4:A8:8E:95:AD:44:93:A8:0C:64:30:F1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8dbde97-51b6-3d32-b6b2-3b13f8d30e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.158.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:fd:29:ff:76:11:92:fe:92:9d:27:29:69:aa:5c:cf:53:
         69:57:0b:ae:05:69:51:d8:a9:67:c8:06:c7:48:85:65:6e:fb:
         08:71:c4:a8:87:a1:cb:dc:b2:35:27:01:e8:79:1b:93:2d:ae:
         53:a4:43:5e:ca:a2:89:e5:d9:f4:c0:a1:c1:9d:24:6b:af:06:
         f0:09:13:e6:be:8c:79:83:0b:91:fc:c7:b7:1a:be:4d:e1:e2:
         cb:f0:6c:7e:70:8f:2d:a8:db:0d:3a:5c:ff:c7:d6:53:9d:fb:
         5b:01:7b:a1:aa:6b:5a:a5:fa:9a:ff:17:72:e2:2b:ba:52:bb:
         fd:19:d3:90:9f:be:f1:ad:57:b5:8c:08:d2:29:ee:53:74:4e:
         6a:f8:f2:6e:3e:32:6b:1f:bb:65:e1:af:cd:51:d3:01:06:56:
         07:06:e9:73:3b:b6:77:19:9a:18:6f:15:87:18:14:ca:46:45:
         d0:cc:07:ef:cc:5c:6d:41:00:a3:8e:26:e8:6e:49:ae:f4:bc:
         79:47:ff:65:45:55:67:43:ce:7f:4f:0b:f1:c3:7f:81:f8:70:
         3f:bb:0e:cc:13:43:6e:0c:9f:17:0f:80:ee:e8:47:15:ed:ba:
         db:e7:5c:8c:b1:3e:3d:85:fe:91:86:87:4e:91:cf:d5:e5:15:
         e9:65:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:21:28 2025 by rpki-client