This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa
File:                     b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json)
Hash identifier:          Zvs7OVlq+I6zEfMmba1rOEDW5bxfc3TifeQ+IKJkcWo=
Subject key identifier:   E4:00:C6:D3:1C:45:37:87:3F:5F:BF:D8:63:D7:55:2B:26:96:11:E8
Certificate issuer:       /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Certificate serial:       010D0C9F4328584C14CB68F1A3A8162FC46FC700
Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa
Signing time:             Fri 05 Dec 2025 02:00:30 +0000
ROA not before:           Fri 05 Dec 2025 02:00:30 +0000
ROA not after:            Thu 05 Mar 2026 02:00:30 +0000
asID:                     32931
IP address blocks:        199.91.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:14:cb:68:f1:a3:a8:16:2f:c4:6f:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
        Validity
            Not Before: Dec  5 02:00:30 2025 GMT
            Not After : Mar  5 02:00:30 2026 GMT
        Subject: CN=88c00f10-0689-4009-b2d0-272a976a0e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:ac:fd:04:d9:c3:9f:9b:4a:19:c4:68:cb:
                    0f:f9:a5:0e:c5:81:02:d2:99:57:0c:c0:95:29:27:
                    0b:45:7f:c7:15:02:64:15:a8:a2:61:89:8f:dd:f1:
                    c7:93:37:66:c7:18:d4:d8:ba:8f:b6:a7:1f:ce:92:
                    59:6f:4b:52:61:d7:24:c1:27:07:0f:c7:12:db:7b:
                    f6:21:54:d3:1d:6e:55:14:37:0b:68:6f:5d:f7:60:
                    68:47:18:16:91:a9:44:85:58:1e:5b:31:81:7f:32:
                    b2:13:f6:ce:b6:f3:aa:ab:eb:51:e2:ea:db:bc:a0:
                    83:bd:8c:ec:87:1c:2e:de:71:4d:56:0b:fa:42:48:
                    5d:c2:cd:01:18:e4:fe:e2:d2:1a:38:07:80:4a:40:
                    14:9d:72:75:54:8c:be:ff:3f:03:d8:04:d3:a6:01:
                    20:5e:ee:95:81:94:97:10:2c:bc:2f:9f:c9:56:c5:
                    13:fd:5e:45:c5:3c:ff:9b:0b:62:46:20:e4:7e:5c:
                    0d:89:80:db:99:6e:cc:a9:6d:31:a7:78:31:e7:01:
                    9b:c6:71:7b:e7:66:63:cc:54:69:d7:68:43:03:35:
                    e7:b6:b5:d5:3e:fc:4f:c6:9d:80:94:32:6a:cf:7b:
                    15:73:af:26:d1:29:ec:20:c3:1a:e6:7d:1e:c2:d9:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:C6:D3:1C:45:37:87:3F:5F:BF:D8:63:D7:55:2B:26:96:11:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl

            X509v3 Authority Key Identifier:
                keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:69:17:d1:3e:af:bb:cd:c4:4e:d1:15:0c:94:57:9e:a2:5f:
         72:63:e7:b1:7e:03:98:1f:41:9a:fa:3a:89:63:b1:31:fb:4d:
         c1:a2:91:03:87:19:37:dd:9f:97:9f:ec:81:a7:db:83:52:89:
         e4:36:2f:3d:c2:55:21:c8:5c:de:cf:cd:69:3b:eb:82:3a:3e:
         39:f0:5e:be:ac:0d:34:d4:51:d1:1a:9e:fa:3f:af:4d:80:25:
         7d:7c:36:ae:a2:b8:f1:19:2b:03:6c:d5:c1:4c:79:88:0e:b4:
         31:26:2a:4a:d3:97:05:f2:3d:5c:dd:e6:6e:ce:aa:b8:1a:5c:
         08:63:72:6a:22:e9:6a:bf:44:03:c8:3f:9d:38:51:cf:59:05:
         5a:79:b2:a8:cb:81:0b:5c:bb:aa:8b:34:ea:8a:c7:87:61:33:
         6f:a7:c6:7b:d9:1d:82:ce:30:82:b4:75:a1:ae:9e:6f:0d:36:
         9d:9e:60:11:59:b3:d9:d3:0b:c8:c0:2c:55:0c:24:43:91:53:
         97:51:83:92:95:84:7f:03:a2:85:fd:e0:41:7b:55:5e:22:ac:
         04:4b:55:a6:c9:1e:bb:ab:75:6c:a3:39:b0:6f:5c:bb:62:e1:
         e8:f0:73:59:ce:23:ec:ed:a2:dc:88:60:5c:6d:0d:8a:68:68:
         30:4a:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:13 2025 by rpki-client