This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa
File:                     3568e153-bb9a-3142-b886-5e86d1911256.roa (raw, json)
Hash identifier:          aSrj2umyawOxTEpMW4Em7TaODjxROQes6cP+XjDp+jw=
Subject key identifier:   E1:01:FA:5A:18:A4:3E:5E:62:72:89:7D:7F:6B:D2:84:77:22:57:B4
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584C0B93E0F3C8B34EE035BC90A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa
Signing time:             Mon 01 Dec 2025 18:46:29 +0000
ROA not before:           Mon 01 Dec 2025 18:46:29 +0000
ROA not after:            Sun 01 Mar 2026 18:46:29 +0000
asID:                     23473
IP address blocks:        216.171.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0b:93:e0:f3:c8:b3:4e:e0:35:bc:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Dec  1 18:46:29 2025 GMT
            Not After : Mar  1 18:46:29 2026 GMT
        Subject: CN=7c91ac8d-2679-44a9-b940-50152b5d0f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:43:b6:72:9b:b5:f1:71:04:33:a9:ca:37:
                    e1:6a:89:1c:21:3e:cd:3a:80:a6:7b:0f:67:3a:dc:
                    d1:8e:4a:1d:ca:2f:f2:52:66:16:6a:dd:43:00:76:
                    4f:8f:03:8f:35:6f:77:b6:c5:bb:59:93:f9:39:78:
                    d8:0f:d0:36:7a:be:db:1e:1f:9c:64:c7:d3:55:cc:
                    6b:9d:9a:65:e7:68:5d:8a:1c:ab:6b:4c:d1:88:12:
                    60:33:e8:a4:83:90:f4:b8:45:ea:72:a5:fe:e7:2c:
                    52:02:69:48:e8:4a:b3:20:54:66:7a:40:2e:3d:9f:
                    ef:75:84:bb:1d:b6:a3:08:3d:00:44:1c:a1:17:0f:
                    80:45:a5:d3:ae:f7:00:7e:a9:43:43:f8:c9:e1:26:
                    b6:51:5a:c1:92:c7:80:06:01:79:85:24:ea:a5:51:
                    e0:56:cc:0d:92:91:14:d1:a1:4e:72:c9:d0:65:3a:
                    73:fe:58:e2:87:37:e3:b3:be:6f:80:5f:4d:a4:71:
                    1c:c1:bd:28:4e:54:31:bd:4d:5f:74:f6:c6:5e:e8:
                    d3:f8:82:a8:e9:51:7a:40:ef:2a:b4:7a:03:95:79:
                    6c:6b:58:cd:1e:ad:39:77:65:ba:0e:08:64:cd:a6:
                    b0:51:10:d8:e0:89:e5:97:3e:37:e2:ed:d0:30:3e:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:FA:5A:18:A4:3E:5E:62:72:89:7D:7F:6B:D2:84:77:22:57:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:02:f8:b7:4b:ba:a7:20:fc:1b:42:96:0d:f1:91:67:44:49:
         81:9f:5c:8c:9a:86:1e:2d:8e:ed:9b:e8:f4:a6:be:ba:c0:d1:
         73:7d:c7:76:90:d0:f8:96:fc:0a:c6:b3:be:8d:89:b0:6f:fd:
         ec:00:13:c3:e3:c1:8c:6c:d4:f5:45:b3:c9:f2:7a:c2:d6:73:
         5e:08:2c:21:e8:ba:35:8b:62:d1:fb:43:6a:1b:68:89:7e:f6:
         b4:a4:0a:c6:fb:8e:b3:11:f0:4c:12:19:d2:ca:bf:bc:b0:93:
         43:85:bf:4a:c9:71:6d:74:6d:99:e5:b9:9b:e0:55:6c:13:ce:
         6a:28:59:c2:72:ba:52:7e:85:2a:bd:cb:a4:d7:ee:cd:10:c2:
         17:fa:18:11:0a:31:f2:21:bc:8e:a1:1d:f6:38:e8:94:c3:3a:
         df:be:74:96:94:43:8a:e5:e5:82:23:f3:42:30:a5:ba:d3:86:
         0b:56:b4:63:14:16:bc:af:13:e0:4c:5f:7f:30:6c:11:65:26:
         e4:7b:4c:f6:db:9d:b4:4d:00:d5:4b:30:f7:98:86:7e:7d:b8:
         d9:fc:87:10:a3:79:3a:78:37:a9:a3:ce:16:b9:c9:fa:2e:9c:
         b8:e9:5f:c3:30:86:90:f2:d4:a8:de:01:c5:0a:16:b2:68:d3:
         7f:02:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:46 2025 by rpki-client