This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa
File:                     eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa (raw, json)
Hash identifier:          4ZF5BBfj7ljiCmuHPPzIZh16ZBOiILUUQhC8WsBk88U=
Subject key identifier:   C8:B7:28:FB:A1:41:E6:93:B3:81:07:2D:BB:10:A8:E5:56:DA:BF:B8
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584BEF1B4855260CBF506FEB4080
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa
Signing time:             Fri 21 Nov 2025 14:00:38 +0000
ROA not before:           Fri 21 Nov 2025 14:00:38 +0000
ROA not after:            Thu 19 Feb 2026 14:00:38 +0000
asID:                     32983
IP address blocks:        198.29.20.0/22 maxlen: 24
                          2602:f9e7:2e::/47 maxlen: 48
                          2602:f9e7:38::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ef:1b:48:55:26:0c:bf:50:6f:eb:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Nov 21 14:00:38 2025 GMT
            Not After : Feb 19 14:00:38 2026 GMT
        Subject: CN=4830abeb-2cda-407a-95c9-0071f678509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0d:04:cb:06:75:9b:34:3b:72:81:d3:ee:9e:
                    63:fd:86:62:b2:7a:1f:25:c4:96:00:90:4c:cc:41:
                    90:e2:64:5c:9c:1d:e0:78:ba:b5:53:68:27:51:79:
                    4f:b6:ce:43:f8:5e:9b:49:5e:7c:98:7a:78:db:d8:
                    65:2d:44:5f:78:93:c1:d0:f7:e2:21:f4:3c:93:ab:
                    09:e2:6e:d8:5b:c5:f6:7e:2f:59:4c:b6:71:03:4f:
                    15:ba:79:f4:45:d2:c7:45:31:d2:3e:83:d7:63:e2:
                    8b:98:b7:90:9f:be:08:26:ab:2b:06:fd:0e:d6:da:
                    f7:ca:36:9e:be:0d:4c:e7:7f:0a:a6:5c:eb:84:a1:
                    48:77:5d:09:9b:1b:d2:37:8a:e0:f8:b4:db:00:6d:
                    ba:09:0a:f8:f2:2f:5e:d8:02:ec:d3:aa:8d:f7:ab:
                    e1:5c:c2:0c:cc:b6:ac:4d:ef:23:47:b5:44:c5:a0:
                    59:e0:2e:52:28:2d:82:45:56:27:cb:01:a2:0b:a3:
                    85:c2:0e:8c:77:58:6d:b8:c1:a1:91:91:b6:bc:15:
                    2a:de:ed:c6:67:ee:23:18:64:24:72:ab:d9:c0:77:
                    e7:b1:7f:7c:f3:33:3a:e6:2a:9f:dd:03:b6:09:ac:
                    80:6f:6f:0e:5b:b7:1f:81:b1:33:98:8c:9a:fa:5c:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B7:28:FB:A1:41:E6:93:B3:81:07:2D:BB:10:A8:E5:56:DA:BF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.20.0/22
                IPv6:
                  2602:f9e7:2e::/47
                  2602:f9e7:38::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:28:7d:c3:1d:40:b8:a2:34:6d:2a:f4:c7:50:64:f0:a7:04:
         74:78:bb:f9:30:e8:0d:6c:4f:5e:d3:27:1f:9c:a6:d8:e4:5d:
         24:93:9f:d4:50:eb:c9:a1:1a:ec:61:26:40:49:0e:24:b6:d4:
         01:c2:ab:22:a9:1e:59:9f:87:c0:0f:f0:19:5a:ea:a2:ad:f9:
         c0:84:e7:06:9f:22:89:a9:aa:4f:2e:f9:bb:cc:07:06:d2:d9:
         dc:1c:d2:6b:b4:56:ac:ec:ff:63:f5:db:c8:70:a1:b9:b5:c8:
         a8:16:80:7b:9b:49:14:6c:19:15:9d:64:79:06:d5:64:4c:e2:
         01:7b:27:6d:5f:54:5d:ff:2e:83:37:20:33:6a:e1:ab:4d:4c:
         c3:15:37:13:3e:1b:bd:63:99:68:f9:f0:52:bf:80:a3:f6:b5:
         ae:3e:9b:7c:a0:f6:33:88:e2:2d:a4:cc:18:6a:a6:6b:40:e8:
         0f:f1:9d:0a:e8:7d:c9:a5:c7:17:11:3f:ce:25:d9:70:11:d6:
         d0:b0:01:56:9b:b5:db:c3:1e:52:6c:46:76:28:f5:50:07:c2:
         f9:65:63:2e:7d:15:a2:32:b6:5d:47:2f:12:ec:b6:b3:23:21:
         e1:22:86:66:ac:50:1f:99:7e:6e:d8:e2:4b:d4:8f:e7:81:34:
         01:a2:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:46 2025 by rpki-client