This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa
File:                     ef3392a6-ef96-3774-8bd4-9944157036c5.roa (raw, json)
Hash identifier:          w1xl5qcH/2u3AsA3uPr62tBjtgxjcFAht7o+SqpJRas=
Subject key identifier:   B2:D6:FB:39:7D:62:47:41:E5:10:A9:35:A6:DD:0E:A0:AD:41:E4:E0
Certificate issuer:       /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
Certificate serial:       010D0C9F4328584BEAEB305FBA39AA3EE4648300
Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa
Signing time:             Thu 20 Nov 2025 02:00:30 +0000
ROA not before:           Thu 20 Nov 2025 02:00:30 +0000
ROA not after:            Wed 18 Feb 2026 02:00:30 +0000
asID:                     7029
IP address blocks:        204.114.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ea:eb:30:5f:ba:39:aa:3e:e4:64:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
        Validity
            Not Before: Nov 20 02:00:30 2025 GMT
            Not After : Feb 18 02:00:30 2026 GMT
        Subject: CN=29b0dd04-8113-4b9f-918d-6affb59d2ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:c0:91:e0:48:9a:35:c6:6d:69:57:62:0e:
                    60:b2:73:07:f5:da:d2:97:0a:64:ae:70:20:04:73:
                    51:2b:c2:cd:62:0d:80:ef:6e:e4:f8:8e:a4:ec:57:
                    e6:44:60:ec:b0:22:70:10:fc:a7:b4:93:a7:73:09:
                    2a:f1:1a:1a:7e:91:26:98:76:0c:50:df:ef:e1:30:
                    83:31:b9:ae:85:3b:df:e2:2e:18:e8:0c:85:00:a3:
                    29:0f:74:74:62:ee:1c:69:ea:8d:77:72:3f:61:5b:
                    db:5f:1f:11:7e:6b:12:ec:01:41:85:d1:56:aa:f4:
                    ab:a2:ea:be:16:a0:f5:f3:c7:c2:30:bf:e3:1e:f1:
                    5e:08:b3:b2:12:19:5b:00:0d:57:0e:20:d1:9e:51:
                    7c:14:47:b2:56:aa:55:41:21:da:f5:0a:5d:66:f8:
                    88:53:6c:04:0d:48:dc:71:9d:10:64:23:ee:7a:c8:
                    7c:a5:08:71:82:15:bd:d3:6f:89:83:06:81:77:30:
                    e0:88:6b:c0:04:c2:fd:b3:c1:f4:66:b0:cd:90:e0:
                    0f:8e:1d:98:93:5a:c8:c9:d1:9a:ba:8f:0f:d6:ae:
                    0f:28:0b:1d:ac:e8:cd:96:7e:49:65:47:19:d4:62:
                    c6:72:49:7f:83:f0:b9:05:b2:f2:e8:d2:92:e7:72:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:FB:39:7D:62:47:41:E5:10:A9:35:A6:DD:0E:A0:AD:41:E4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.114.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ff:ba:62:a8:48:e4:9f:70:3c:92:cd:33:e8:ac:1d:1e:9d:
         a9:90:91:27:db:79:22:11:41:68:9a:25:50:b5:11:6e:1e:cc:
         75:e1:2d:96:96:ab:57:a5:fd:89:10:00:b3:d8:52:e3:49:8b:
         ad:b4:7c:d0:bb:61:4c:ea:0a:d0:01:1e:03:28:27:99:88:07:
         af:e3:f0:ec:29:c0:fc:ff:8c:57:8a:19:79:81:37:a0:a7:10:
         dc:0d:3e:30:73:3d:db:c5:46:a1:9f:3b:95:2f:95:a3:2c:87:
         0c:4c:b9:9d:f3:30:f4:18:6c:35:e5:a5:25:44:6c:15:5e:7c:
         0c:0a:6b:41:8b:b4:a1:a6:59:1f:c5:99:63:46:77:81:d1:55:
         84:e0:03:c4:42:12:8e:0c:d7:d3:65:47:ac:5b:f7:29:29:92:
         97:bd:50:e6:ba:66:00:9e:af:0a:b1:02:eb:a8:07:35:11:c6:
         6b:37:03:c0:7d:19:3d:53:e8:e3:c6:ee:ea:dd:7c:01:e9:d4:
         79:f8:a0:01:bd:68:24:5f:1b:f7:fb:9f:d3:cf:d3:a3:f9:1e:
         6e:2a:f3:ac:32:0c:fb:bb:ec:45:c3:ff:9c:00:8a:c9:45:17:
         40:9a:13:d7:73:58:ce:b5:8a:e5:1c:2b:bb:8b:85:d0:30:5b:
         1b:2a:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:22:36 2025 by rpki-client