This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/321be69a-0100-3085-8207-abd5f464bf59.roa
File:                     321be69a-0100-3085-8207-abd5f464bf59.roa (raw, json)
Hash identifier:          Xw2ZVf3F121Kj47CSct58NqDJ5W57IZBjVAFbFJ+JzM=
Subject key identifier:   79:59:FD:DD:F6:22:5B:DA:BA:43:7F:3B:A7:B3:91:71:CC:B7:14:55
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584C0C12A0E43894FB1E6F5D0A00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/321be69a-0100-3085-8207-abd5f464bf59.roa
Signing time:             Mon 01 Dec 2025 23:01:52 +0000
ROA not before:           Mon 01 Dec 2025 23:01:52 +0000
ROA not after:            Sun 01 Mar 2026 23:01:52 +0000
asID:                     399050
IP address blocks:        198.85.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0c:12:a0:e4:38:94:fb:1e:6f:5d:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec  1 23:01:52 2025 GMT
            Not After : Mar  1 23:01:52 2026 GMT
        Subject: CN=6c0213a5-6640-4239-8f3e-85fcb774c627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a5:15:a5:00:c0:87:95:09:0e:98:e6:00:cd:
                    e2:88:91:84:20:cf:ee:44:84:6e:11:90:3d:53:8a:
                    99:c2:16:84:93:12:bc:80:8f:33:d4:57:a7:72:22:
                    e0:5f:b2:d0:b0:f5:a8:7e:d5:b7:a5:72:2f:0a:45:
                    a5:e4:88:04:59:c9:a1:8d:cf:a8:54:3b:c0:b3:9f:
                    58:66:22:bc:bc:b5:40:28:52:5f:34:f8:33:78:41:
                    a9:cc:14:15:30:24:79:bf:38:7b:2e:56:9b:1e:ee:
                    52:9e:e6:64:43:ce:86:02:8b:68:d2:4b:a9:f9:a3:
                    f6:30:ef:86:cf:8b:c2:d7:73:17:a6:c2:34:5f:07:
                    40:fc:e6:75:ee:85:6f:d4:82:8a:11:05:ed:ed:a0:
                    3d:26:1d:aa:10:be:f1:8e:c7:f0:9b:4f:36:6c:2e:
                    31:74:96:ee:c3:63:65:4b:cf:96:fb:84:0c:76:4d:
                    6d:32:43:83:c5:34:a8:be:0e:42:77:3e:61:75:a0:
                    95:8a:f0:80:a2:51:1e:a4:a9:2a:b8:1c:4d:64:25:
                    5a:59:b1:4a:52:88:42:88:f0:31:15:e8:e0:de:e0:
                    88:4c:63:ef:cf:8a:15:fa:cb:12:4b:0a:e5:fc:ac:
                    30:30:2a:af:0f:51:88:e2:b9:ae:a0:20:5d:04:e0:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:FD:DD:F6:22:5B:DA:BA:43:7F:3B:A7:B3:91:71:CC:B7:14:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/321be69a-0100-3085-8207-abd5f464bf59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.85.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:e8:7b:38:51:40:40:88:0d:58:d7:cf:19:43:6e:80:2c:
         a0:06:62:44:10:20:47:76:55:78:ca:58:39:3c:5d:9f:84:94:
         4d:a0:5a:47:43:fc:68:c0:03:3e:6d:b8:be:3e:0e:23:d3:22:
         cc:cf:4d:7a:e2:1d:92:c7:c9:a8:5b:ae:14:62:8f:36:dc:35:
         9d:1b:9f:c7:69:8b:ae:cc:94:68:58:51:b0:a0:b0:d7:ce:34:
         46:35:bb:3a:03:67:e1:b8:8b:cc:70:02:0e:91:33:ab:17:50:
         b8:61:d8:3e:4d:54:d1:5c:69:d2:d5:17:77:b1:f4:c4:ee:b5:
         59:8e:b0:6f:f2:ee:81:c9:cf:4f:98:a0:3a:88:30:29:a6:a8:
         cd:7b:c1:58:d9:b5:3d:b1:0b:2f:f6:6d:1e:ef:7b:06:f5:4d:
         3a:09:40:37:33:53:a9:04:b9:5d:7a:d0:9e:0a:59:f1:9c:c4:
         5f:9b:21:ca:c1:26:ba:22:71:8f:91:71:24:c6:fb:8c:7b:90:
         ba:11:c3:6e:3b:ff:d0:62:3d:32:0a:b3:25:59:99:58:d0:f6:
         0f:72:05:06:5c:ee:08:8d:43:31:7c:6c:5b:a4:1d:a7:04:cb:
         51:36:66:ae:54:82:30:12:62:af:82:a7:a0:57:ef:88:4b:0f:
         0e:97:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:44 2025 by rpki-client