This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa
File:                     8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa (raw, json)
Hash identifier:          fKhZ6C047+7PS0Pw5iBkhS8SAMQ8XGwbzqa1gXIb+xw=
Subject key identifier:   54:CC:F8:BA:55:AF:6D:C0:64:06:8A:D9:70:FC:8B:BE:FA:E2:A3:CE
Certificate issuer:       /CN=971a94fb-9c36-412b-ae91-2ddb520de93f
Certificate serial:       010D0C9F4328584C1630D56576EAEABD6442A400
Authority key identifier: E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa
Signing time:             Fri 05 Dec 2025 14:00:38 +0000
ROA not before:           Fri 05 Dec 2025 14:00:38 +0000
ROA not after:            Thu 05 Mar 2026 14:00:38 +0000
asID:                     400729
IP address blocks:        192.157.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:30:d5:65:76:ea:ea:bd:64:42:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a94fb-9c36-412b-ae91-2ddb520de93f
        Validity
            Not Before: Dec  5 14:00:38 2025 GMT
            Not After : Mar  5 14:00:38 2026 GMT
        Subject: CN=c4b323f4-a57f-434a-b126-5b1fcbabb48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:60:22:44:fe:b8:db:5a:67:e7:eb:06:ae:
                    af:26:fd:87:02:e0:42:79:66:a5:02:37:46:58:fc:
                    ab:e2:29:e4:56:eb:33:20:6b:80:04:a6:d6:2f:ec:
                    5b:94:07:99:a5:29:55:92:4d:79:80:8e:15:51:42:
                    fc:e7:a6:4e:7e:c5:48:7f:c4:7b:0e:69:c4:34:56:
                    74:db:e9:4c:9c:05:2f:67:bb:8e:fd:73:c5:16:47:
                    6b:27:74:8c:cf:04:1f:27:f0:43:21:7b:7b:83:ae:
                    46:0b:62:aa:78:b1:d2:97:c9:91:11:3b:dc:66:cc:
                    62:14:96:ac:12:61:17:b1:18:94:b4:8b:90:5c:be:
                    9e:73:0f:da:e2:ea:6a:e5:b8:58:21:3c:34:3d:72:
                    ef:d3:63:2d:4f:02:f5:8f:7b:8e:87:fa:a1:de:61:
                    62:ff:fb:f1:c2:4c:b6:17:15:d7:03:e3:52:f7:d5:
                    ae:c3:0e:85:b4:01:de:8f:4a:6e:6c:0a:d2:49:39:
                    15:b8:b5:11:51:38:53:b7:e4:13:2c:84:2c:85:4d:
                    1c:14:9f:c6:43:fd:38:78:00:6f:b1:46:d0:76:5f:
                    4f:33:41:14:e6:3c:c1:96:62:0e:18:e0:07:5d:80:
                    7a:ef:fd:53:4e:fb:97:69:f8:31:ef:13:53:ed:ed:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:F8:BA:55:AF:6D:C0:64:06:8A:D9:70:FC:8B:BE:FA:E2:A3:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:51:80:f8:bb:24:c4:c2:34:c6:33:f8:db:0b:07:21:56:4e:
         b4:9c:cc:73:00:e9:a0:0e:88:27:81:73:6f:20:74:7f:84:84:
         08:e9:f7:0e:47:f1:2e:59:bc:c3:65:f0:07:6a:ee:e3:53:eb:
         c5:2d:fd:e6:89:5d:87:21:f9:e9:5f:69:04:4a:4a:f5:90:ad:
         f4:7a:56:9c:41:07:bb:88:1b:b3:b4:ad:c7:de:a5:84:f7:b7:
         36:da:98:6a:d2:e5:27:93:28:5a:f0:99:c1:cb:c6:d0:c8:a2:
         c1:0e:8b:d0:9c:85:11:eb:24:8e:59:22:ef:7e:c1:58:49:af:
         aa:63:a9:87:ea:0b:7d:1f:90:b0:2c:55:fb:09:7a:49:72:a4:
         d5:58:16:a7:fd:ce:1f:12:75:81:cf:59:15:0c:29:9a:43:65:
         c0:53:38:45:f6:6f:34:49:b2:3f:c1:db:61:8e:b8:55:2c:1e:
         b5:9c:b7:cc:3d:e0:69:50:0e:41:de:a5:ea:e3:ae:f5:21:55:
         e6:15:c8:bb:53:08:70:3c:9f:7b:9c:18:a6:d9:a2:6c:5a:ac:
         ca:0a:4a:fe:4f:9c:14:27:89:f5:96:de:b5:64:ef:21:2b:01:
         66:d0:19:70:18:1a:1c:14:9b:a8:11:c2:4a:b6:f0:34:09:ce:
         01:51:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:03:48 2025 by rpki-client