This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f3b2fcb-bd52-3922-8460-611cc876cf4b.roa
File:                     5f3b2fcb-bd52-3922-8460-611cc876cf4b.roa (raw, json)
Hash identifier:          znenrLn1GWkdIsHKDct6TzPa3aqU8YDvYhIRhrpZAVo=
Subject key identifier:   50:5C:4E:7A:19:0C:7C:EA:E1:D9:3E:D2:DE:4B:20:1C:35:E2:34:80
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584C166F8379E49B9A8A01F45FA8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f3b2fcb-bd52-3922-8460-611cc876cf4b.roa
Signing time:             Fri 05 Dec 2025 16:07:06 +0000
ROA not before:           Fri 05 Dec 2025 16:07:06 +0000
ROA not after:            Thu 05 Mar 2026 16:07:06 +0000
asID:                     64010
IP address blocks:        38.98.98.0/24 maxlen: 24
                          38.98.113.0/24 maxlen: 24
                          154.18.224.0/23 maxlen: 23
                          154.18.228.0/23 maxlen: 23
                          154.18.230.0/23 maxlen: 23
                          154.18.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:6f:83:79:e4:9b:9a:8a:01:f4:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Dec  5 16:07:06 2025 GMT
            Not After : Mar  5 16:07:06 2026 GMT
        Subject: CN=f106c20c-2d94-497b-9536-ae3ec7bfcd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:84:e5:e5:ae:a2:88:28:af:fa:a7:4c:7b:
                    6d:0a:2d:bd:4e:c8:91:e5:64:61:a6:b1:3d:0b:d1:
                    29:ca:04:dd:46:3d:26:5a:ed:51:c0:75:ba:73:e6:
                    27:6b:77:d7:66:ab:75:89:71:be:74:37:a7:ad:a9:
                    9f:21:8f:0a:72:9c:78:3b:aa:69:e0:77:05:bf:f7:
                    88:0e:02:c8:82:41:ce:f0:eb:fc:dd:58:f1:6b:e1:
                    69:56:88:97:9d:c4:3d:f7:27:45:0d:ca:b8:d1:21:
                    7f:f2:90:1d:1e:0f:97:84:7a:e7:22:06:d8:9e:75:
                    d3:d5:c2:e0:dd:d2:35:68:11:20:8d:ed:62:cd:db:
                    ca:1d:40:fd:db:18:54:c0:9c:9a:37:cc:ca:81:fe:
                    a6:52:0a:f3:86:9d:0f:e0:a7:da:50:45:27:1d:f0:
                    fb:c0:81:b6:69:39:af:5f:80:6e:2c:fc:39:9d:26:
                    f3:02:2b:78:9e:38:ac:70:fa:0b:a4:a0:6c:d6:1c:
                    17:4a:de:54:f6:8c:c8:88:bd:6e:f0:e9:ba:54:92:
                    f5:97:3b:a4:12:be:b5:dd:2a:ad:66:ff:27:dd:f4:
                    6d:eb:ed:a7:ad:c8:1f:dc:68:27:12:6f:5d:26:ec:
                    f8:a7:d9:45:45:b6:a0:e9:ab:29:db:36:ab:7d:cc:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:4E:7A:19:0C:7C:EA:E1:D9:3E:D2:DE:4B:20:1C:35:E2:34:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f3b2fcb-bd52-3922-8460-611cc876cf4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.98.98.0/24
                  38.98.113.0/24
                  154.18.224.0/23
                  154.18.228.0-154.18.233.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e1:67:cd:d1:10:57:24:4c:92:16:c2:66:97:0d:d2:4a:e5:
         21:6f:61:23:06:07:86:5a:eb:53:2f:02:52:3b:53:42:1a:1c:
         26:1c:3f:f0:6e:22:b6:55:a1:e4:02:2c:7e:96:9c:2b:57:7b:
         c0:3a:99:89:0c:a3:c5:0c:b3:b5:ca:97:0a:84:c0:80:6d:35:
         3e:2c:10:23:7d:30:45:de:2f:82:79:3b:6f:f1:e2:4a:9f:c7:
         bf:44:41:92:cf:fd:e2:e1:80:fa:fc:b7:c2:a4:b3:fb:b9:1b:
         95:e6:da:a5:9d:c6:53:e2:4a:e8:23:b9:6d:d0:7a:17:c6:26:
         17:40:93:22:9d:5a:b4:b4:46:9d:4a:07:59:df:4e:47:bb:a6:
         d6:fc:4a:f9:f9:09:d1:18:4c:35:7e:08:ba:00:7c:fb:a6:87:
         00:a7:e3:c6:b5:6b:42:0a:94:bd:c8:0c:f5:aa:79:b5:58:58:
         78:f8:17:ad:4e:d7:e1:76:18:93:f1:d1:64:be:db:cf:75:04:
         93:d7:58:0a:a3:ad:78:92:33:ea:6f:ba:92:05:8c:55:20:ad:
         be:88:94:10:39:49:dd:7f:0d:a3:60:d3:7c:a3:da:d9:c4:a6:
         0b:e6:d1:b7:93:00:53:7c:08:28:ba:f9:53:8c:7a:f8:d2:3e:
         b5:e2:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:47:38 2025 by rpki-client