This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa
File:                     b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa (raw, json)
Hash identifier:          WcKpyHAiD5bu4pVTB7sxXM99WKPRpVk/urNZy867PE0=
Subject key identifier:   00:35:92:89:14:80:6A:7D:1E:3E:87:8A:5D:4D:2A:52:8C:2F:42:BB
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584BEC50A2EC446C0A5952741200
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa
Signing time:             Thu 20 Nov 2025 14:00:39 +0000
ROA not before:           Thu 20 Nov 2025 14:00:39 +0000
ROA not after:            Wed 18 Feb 2026 14:00:39 +0000
asID:                     11404
IP address blocks:        199.189.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ec:50:a2:ec:44:6c:0a:59:52:74:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Nov 20 14:00:39 2025 GMT
            Not After : Feb 18 14:00:39 2026 GMT
        Subject: CN=40f26173-94f3-41e6-a344-ff4962b20815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:3f:c4:0c:3f:a7:47:a8:47:fd:68:53:0d:
                    37:94:8d:da:b5:75:ab:64:73:56:45:4f:a4:0a:af:
                    1f:65:8b:23:a0:e4:de:91:b8:df:69:fe:d5:43:28:
                    0f:07:84:43:88:f0:19:58:3c:67:98:a5:19:48:34:
                    74:f7:7e:e0:02:eb:36:a7:cd:5d:43:e8:4d:1c:74:
                    70:24:13:26:d2:a5:66:ef:fa:b5:b0:7c:14:13:0d:
                    6d:5c:19:47:d5:d1:4b:31:d5:8e:09:c1:3e:3c:95:
                    23:a6:9e:7e:25:36:21:6a:a0:13:f7:3d:18:6d:74:
                    4b:8f:cd:6f:64:af:78:fd:27:44:12:60:4f:df:57:
                    83:81:48:b1:d2:17:5c:80:6e:00:73:f9:72:cf:46:
                    c5:dc:7c:9f:74:4f:96:2b:45:ed:8f:0c:da:48:e1:
                    9d:51:8e:eb:78:97:de:6c:35:c1:03:0d:2f:aa:78:
                    b1:01:3c:b3:dc:70:50:d3:77:ca:25:eb:6e:9d:b0:
                    09:e4:83:bb:ba:ed:42:0f:01:ea:a7:f1:63:c2:88:
                    44:26:e5:f0:73:b3:46:a0:cd:72:de:40:d9:db:42:
                    37:91:26:9f:9a:a4:3b:35:51:e3:82:d0:54:11:06:
                    2b:bc:37:6c:87:6c:bc:fb:41:cf:10:7d:b6:da:be:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:35:92:89:14:80:6A:7D:1E:3E:87:8A:5D:4D:2A:52:8C:2F:42:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cf:55:cc:f6:b1:5b:c8:c8:93:49:0d:d2:b0:24:29:0e:6e:
         b9:19:1d:bc:f5:9c:29:95:38:0d:22:16:34:55:9a:f1:53:33:
         45:fc:fd:0e:ad:38:9a:f9:a9:c9:81:fd:c7:de:22:79:59:24:
         e2:fe:8a:a0:1c:f3:48:eb:ae:53:3d:ef:0f:1c:10:7a:7e:be:
         18:3a:09:bc:29:ff:dc:73:69:19:56:f9:45:9d:5b:0e:76:c3:
         23:d3:da:53:0b:e5:cd:e4:4d:4d:b9:99:a3:42:3f:e1:b8:ab:
         b0:5d:b6:25:c9:b6:43:7a:7a:5d:8e:93:b5:21:3b:be:77:c6:
         a3:bb:fe:fa:ca:a4:d8:c4:1a:a8:84:a7:ba:82:75:74:63:f5:
         b4:f4:f0:a0:1e:78:06:a6:32:2a:b2:e5:2c:fe:0e:c8:1c:b1:
         c9:a5:a8:b8:d4:25:e5:f6:49:ff:1a:e3:c0:c8:c7:b7:2c:92:
         47:82:b3:52:82:92:e9:ae:31:95:33:d7:5e:49:81:4f:23:2e:
         a4:5c:5d:c1:e7:95:51:39:bb:57:fa:06:72:4e:98:fc:6a:69:
         98:de:56:32:5a:e6:7e:09:80:30:c7:32:9b:d3:4a:4b:5e:e8:
         b5:17:ca:c6:76:76:b5:52:93:ea:cd:52:1d:af:15:d7:93:65:
         c7:9d:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:57:01 2025 by rpki-client