This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa
File:                     a993a619-ee1e-3438-894d-7b8dfa52d09d.roa (raw, json)
Hash identifier:          tEj3vtGi+3NaJjBKQpUDj9ZzWBg6Cq2vJ+eJ9xmARkI=
Subject key identifier:   28:BF:35:13:3D:B9:01:26:58:29:E5:94:CE:AD:58:24:12:24:9B:1A
Certificate issuer:       /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Certificate serial:       010D0C9F4328584C0B06408BA94DA7FA8242C700
Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa
Signing time:             Mon 01 Dec 2025 14:00:39 +0000
ROA not before:           Mon 01 Dec 2025 14:00:39 +0000
ROA not after:            Sun 01 Mar 2026 14:00:39 +0000
asID:                     30387
IP address blocks:        156.40.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0b:06:40:8b:a9:4d:a7:fa:82:42:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
        Validity
            Not Before: Dec  1 14:00:39 2025 GMT
            Not After : Mar  1 14:00:39 2026 GMT
        Subject: CN=b322f1d4-0dca-44b1-bbe9-0e7cbd39edc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:f0:b7:37:86:2b:23:15:29:eb:9e:3f:5d:
                    59:8e:85:3e:b2:0a:c5:5e:fd:b0:10:f3:fe:3b:87:
                    7c:f4:d0:d8:39:e9:92:a1:8f:18:e3:b8:f1:3a:b4:
                    c6:36:37:cd:63:e6:45:a7:83:31:a4:e6:23:62:08:
                    c3:20:12:c6:78:41:62:0d:fa:a5:89:b8:4d:62:4b:
                    0a:09:ce:0f:d6:63:4b:3d:65:d9:00:ea:cd:11:0f:
                    72:8a:b4:8d:cf:84:d0:22:6d:1d:62:df:59:47:40:
                    91:fc:d6:45:e4:d8:d6:bf:2b:67:ce:3e:80:22:21:
                    4e:af:af:41:78:29:cd:67:53:70:15:ff:fa:2c:ad:
                    1c:25:45:98:29:ef:a8:2a:3a:06:6e:79:71:30:e6:
                    f7:0f:9b:3a:39:45:1d:81:19:f1:9f:78:52:68:a7:
                    58:c9:ef:b7:1f:cf:ce:e1:7d:13:47:d7:01:03:0e:
                    07:48:2b:0e:69:e5:a1:af:96:a3:ed:23:ee:fc:af:
                    55:80:2e:36:02:fd:78:43:ab:c9:39:a9:80:ef:2b:
                    19:73:34:a3:45:e0:b9:60:27:4c:e1:de:b9:d6:53:
                    48:51:ad:f0:6f:49:c3:54:76:eb:71:93:87:77:04:
                    18:12:37:c4:f5:de:d3:c6:b2:f8:a3:d8:e5:b1:b7:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:35:13:3D:B9:01:26:58:29:E5:94:CE:AD:58:24:12:24:9B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl

            X509v3 Authority Key Identifier:
                keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.40.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:0f:a5:2f:f2:db:7e:f2:f4:94:c3:28:cc:af:dc:4b:e2:
         2f:39:02:8e:64:95:24:d8:8f:22:d3:df:da:f2:1a:b0:aa:08:
         80:ff:79:5a:68:85:7a:e2:e1:9d:ba:a9:9b:37:aa:6f:f0:06:
         b9:f7:4a:df:aa:17:69:da:09:00:5c:3f:53:ca:ee:cf:3c:d1:
         0c:06:f1:fe:0f:7a:54:5f:07:46:d8:0a:2d:e8:ed:40:da:cc:
         73:61:e5:24:f2:2a:9f:be:ee:eb:97:be:72:c1:1d:42:8c:a0:
         4b:54:65:41:8b:b7:b0:cb:1e:b1:15:92:70:da:41:d0:c0:5b:
         6b:25:99:44:d0:f7:69:35:eb:58:79:08:a7:b9:07:18:ad:13:
         70:ad:0e:59:3e:4d:27:03:09:b4:d7:df:cf:ca:81:86:49:0b:
         8b:38:17:46:ff:3e:cc:91:00:1d:cb:fe:79:b3:ba:3a:f8:d9:
         55:99:a3:44:61:04:5a:62:5b:b2:39:5d:e9:51:27:c8:92:4f:
         31:47:e2:18:e7:df:82:98:50:b0:74:21:77:30:7f:9f:2a:81:
         20:d1:ce:d2:70:15:fc:b0:f1:54:9e:2c:06:4d:50:b7:20:8b:
         4f:29:b1:62:b1:f6:10:e3:f0:bd:a8:0e:12:89:86:f9:2a:eb:
         5c:2b:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:36:02 2025 by rpki-client