This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
File:                     ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa (raw, json)
Hash identifier:          CXNqs44oglXtAvrS3aSD26XIw3eKb0iSvvOkqwdpvQY=
Subject key identifier:   A7:FC:4C:E2:25:07:0D:A5:1C:71:16:3C:91:C5:6A:89:8A:C8:2D:0A
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584BD1CAF9D9C9A089BFD58DC3A0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
Signing time:             Tue 11 Nov 2025 02:00:30 +0000
ROA not before:           Tue 11 Nov 2025 02:00:30 +0000
ROA not after:            Mon 09 Feb 2026 02:00:30 +0000
asID:                     46261
IP address blocks:        158.115.224.0/23 maxlen: 23
                          158.115.226.0/23 maxlen: 23
                          158.115.230.0/23 maxlen: 23
                          158.115.236.0/22 maxlen: 22
                          158.115.242.0/23 maxlen: 23
                          158.115.244.0/23 maxlen: 23
                          158.115.246.0/23 maxlen: 23
                          158.115.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d1:ca:f9:d9:c9:a0:89:bf:d5:8d:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Nov 11 02:00:30 2025 GMT
            Not After : Feb  9 02:00:30 2026 GMT
        Subject: CN=a6276c26-92da-48db-8edc-ec911d0aaca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d8:ae:e5:8c:54:c5:44:4a:aa:4d:40:c7:a5:
                    29:3a:1d:5e:70:b4:b7:d8:97:68:0b:cb:59:36:a1:
                    a2:a4:1f:31:c8:37:e2:d2:83:1a:c1:6c:95:cb:55:
                    1d:b4:26:48:a8:6d:66:e1:c6:2d:d9:2f:a4:34:36:
                    6f:9e:d5:49:fa:11:00:96:7d:01:29:17:10:eb:cb:
                    6d:4a:1f:5b:cf:68:c6:bd:36:b2:33:48:1c:d8:64:
                    c4:cb:74:be:71:64:f3:2b:56:8e:86:04:66:69:eb:
                    ce:ce:31:fb:60:3d:37:37:b4:7a:82:69:7e:cf:81:
                    7c:8a:7a:60:59:ec:97:3e:33:4d:db:96:cc:de:59:
                    5e:5d:1d:f6:0b:c5:0b:53:9b:45:d9:69:3f:34:2a:
                    6b:d5:95:dc:ee:9e:3a:f2:3b:e6:27:ff:ab:61:c6:
                    81:95:85:c8:b2:64:f2:6a:08:69:12:f2:d6:80:ca:
                    e4:fa:d2:f4:18:c3:c9:70:44:3a:5e:01:d5:3a:8a:
                    83:90:a7:ec:d9:16:83:99:72:c6:28:3f:bb:72:25:
                    25:be:c9:1d:3f:e0:29:bb:9a:41:99:27:3d:c5:db:
                    cc:c8:14:5d:38:e1:68:8c:af:6e:a1:2e:07:58:11:
                    04:7b:e1:32:17:ac:4a:11:cc:18:2c:45:25:70:fa:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FC:4C:E2:25:07:0D:A5:1C:71:16:3C:91:C5:6A:89:8A:C8:2D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.224.0/22
                  158.115.230.0/23
                  158.115.236.0/22
                  158.115.242.0-158.115.247.255
                  158.115.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:38:a9:43:d7:f0:cd:12:80:1a:f3:f5:54:65:d7:b4:95:
         6d:73:37:84:ea:02:cb:be:4d:e7:c4:b4:ea:10:20:a8:ab:5b:
         d5:9e:1d:fb:31:54:ee:3d:23:4a:66:45:3d:9c:d8:39:ce:85:
         72:8b:74:92:64:91:35:51:9c:7e:23:4d:d6:3f:ad:00:9c:3a:
         53:16:58:da:23:53:74:70:a6:9b:8d:64:9f:66:cb:78:80:3e:
         46:98:e8:22:89:5e:4e:7f:08:cf:4e:35:8a:54:f3:22:d3:fc:
         83:cb:83:1c:7c:f9:7e:2d:8b:63:20:33:ba:a1:dc:2b:5f:89:
         46:14:6d:83:90:21:a6:75:ef:78:c8:9b:9f:8e:b8:5e:f2:60:
         1d:30:71:36:e4:cf:d6:dd:c8:b4:f4:6f:f5:8a:8c:0d:90:54:
         22:7b:1b:db:a8:56:05:ae:09:03:16:62:fa:99:27:80:12:bb:
         43:e3:23:a0:f8:1a:41:a0:a2:ec:ea:5f:6d:11:aa:ea:b6:1e:
         aa:8f:2f:84:e6:27:6a:df:8b:9a:5a:3b:a9:4e:c9:23:c0:11:
         45:b0:ca:85:fd:2b:d2:d9:77:0d:f5:9d:d4:94:cc:b8:14:f5:
         67:3d:66:7d:de:5f:84:12:34:b9:c2:f8:75:2a:f0:21:55:56:
         96:86:aa:05
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEvRyvnZyaCJv9WNw6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
YTYyNzZjMjYtOTJkYS00OGRiLThlZGMtZWM5MTFkMGFhY2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdiu5YxUxURKqk1Ax6UpOh1ecLS32JdoC8tZ
NqGipB8xyDfi0oMawWyVy1UdtCZIqG1m4cYt2S+kNDZvntVJ+hEAln0BKRcQ68tt
Sh9bz2jGvTayM0gc2GTEy3S+cWTzK1aOhgRmaevOzjH7YD03N7R6gml+z4F8inpg
WeyXPjNN25bM3lleXR32C8ULU5tF2Wk/NCpr1ZXc7p468jvmJ/+rYcaBlYXIsmTy
aghpEvLWgMrk+tL0GMPJcEQ6XgHVOoqDkKfs2RaDmXLGKD+7ciUlvskdP+Apu5pB
mSc9xdvMyBRdOOFojK9uoS4HWBEEe+EyF6xKEcwYLEUlcPo8lQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFKf8TOIlBw2lHHEWPJHFaomKyC0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2E3NTAyYzQtN2Y2ZC0z
ZGYyLTg2ZWYtYjRlYWFiMGQ3MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCnnPgAwQB
nnPmAwQCnnPsMAwDBAGec/IDBAOec/ADBAGec/owVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEu84qUPX8M0S
gBrz9VRl17SVbXM3hOoCy75N58S06hAgqKtb1Z4d+zFU7j0jSmZFPZzYOc6Fcot0
kmSRNVGcfiNN1j+tAJw6UxZY2iNTdHCmm41kn2bLeIA+RpjoIoleTn8Iz041ilTz
ItP8g8uDHHz5fi2LYyAzuqHcK1+JRhRtg5AhpnXveMibn464XvJgHTBxNuTP1t3I
tPRv9YqMDZBUInsb26hWBa4JAxZi+pkngBK7Q+MjoPgaQaCi7OpfbRGq6rYeqo8v
hOYnat+Lmlo7qU7JI8ARRbDKhf0r0tl3DfWd1JTMuBT1Zz1mfd5fhBI0ucL4dSrw
IVVWloaqBQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:04:29 2025 by rpki-client