This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa
File:                     437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa (raw, json)
Hash identifier:          u71OWZuAWwm6eggnvmq26CVbmxz1xlrlC1IL7Fa+UMY=
Subject key identifier:   AE:9F:21:9A:C9:63:07:6F:79:82:09:9C:63:51:E9:E7:71:34:6C:AD
Certificate issuer:       /CN=ca91b8b1-a975-4a43-947f-794da888c198
Certificate serial:       010D0C9F4328584C02A5FA5514255BC0272D6E00
Authority key identifier: 12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa
Signing time:             Fri 28 Nov 2025 14:00:39 +0000
ROA not before:           Fri 28 Nov 2025 14:00:39 +0000
ROA not after:            Thu 26 Feb 2026 14:00:39 +0000
asID:                     396982
IP address blocks:        204.138.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:02:a5:fa:55:14:25:5b:c0:27:2d:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca91b8b1-a975-4a43-947f-794da888c198
        Validity
            Not Before: Nov 28 14:00:39 2025 GMT
            Not After : Feb 26 14:00:39 2026 GMT
        Subject: CN=2bcdab94-474b-4bae-9a81-80610572d81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:1d:a6:dd:17:f9:9a:4b:6a:c5:2b:64:68:
                    3b:71:0f:d7:c1:d9:ff:d2:b9:f0:08:81:d9:5c:cb:
                    8f:5c:bd:9a:b2:62:d8:47:7a:dd:76:91:39:9a:ba:
                    dd:ef:ce:3e:e5:f4:a7:6a:14:02:bd:24:6e:3d:56:
                    e1:d9:28:3e:6f:25:7a:d0:ca:e2:e2:c0:71:9e:44:
                    d7:2c:73:13:e7:40:f6:2a:a0:8b:9b:13:9f:9b:47:
                    1b:78:3b:32:47:cd:ad:2e:03:58:4f:45:24:2c:3a:
                    52:c1:ef:55:69:72:33:12:72:55:84:c4:fb:c0:c4:
                    46:3f:47:9d:8c:12:96:61:fe:9d:fc:c6:dd:20:50:
                    e4:0e:3d:f6:63:c3:38:7e:c9:05:43:d5:2d:d2:91:
                    52:eb:a9:e5:88:20:36:a3:52:be:07:2b:b0:e5:95:
                    3c:c8:54:7e:aa:a4:2a:fb:90:eb:75:c5:ad:18:d3:
                    4b:2a:b1:23:60:e3:58:c8:fd:90:9b:87:9f:4c:5d:
                    90:a9:90:0c:e2:57:71:5b:55:3d:9a:cd:9f:62:18:
                    f0:b3:7a:63:ec:a5:d8:ef:ce:c9:95:08:19:2a:62:
                    21:89:cf:b9:51:67:ed:c8:cc:9f:83:fb:19:00:10:
                    9c:fe:d9:7e:f1:a3:fb:c3:f9:a3:4a:49:c0:af:8b:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:21:9A:C9:63:07:6F:79:82:09:9C:63:51:E9:E7:71:34:6C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl

            X509v3 Authority Key Identifier:
                keyid:12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.138.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:71:b9:02:bc:2a:45:c8:a8:b9:c7:10:1b:65:f3:24:b9:
         82:fb:f2:e6:42:5d:9f:35:92:e1:c2:a9:62:f9:52:50:42:e9:
         fe:f8:b1:1d:66:16:e5:4b:90:2a:22:9e:b6:50:a1:ee:94:dd:
         f5:ed:84:69:72:e6:a4:fe:ff:36:f6:79:47:f6:0e:89:40:52:
         aa:de:70:8b:c0:d0:eb:8a:63:50:57:9d:d7:ec:9b:96:96:6f:
         1c:f8:24:5e:64:9a:05:96:17:eb:b9:e2:de:46:f7:62:58:bb:
         d1:26:c2:0f:18:b9:91:6d:eb:be:1c:58:d7:d2:a6:5c:bc:da:
         15:9d:49:1d:c8:c1:76:4b:02:26:e7:2b:e7:53:fe:a5:ae:f8:
         a6:33:02:12:b2:51:e0:80:47:43:c0:51:df:2e:cd:e3:79:87:
         0a:a7:82:75:49:bf:85:0b:b6:22:52:c6:2d:07:7e:65:5b:4a:
         f8:8d:d3:d4:c2:3c:e3:c7:e5:2d:18:1a:00:41:e2:8d:48:39:
         79:4f:0e:68:6a:47:fb:91:8b:12:a8:4c:2d:0c:26:16:6d:e2:
         1e:33:24:18:61:e0:59:fc:f4:47:d2:0d:1e:c9:f8:ed:52:2e:
         36:fa:ee:56:90:b7:e5:b1:ab:4e:5e:2b:2c:db:72:d0:10:35:
         a8:bf:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:19:22 2025 by rpki-client