This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa
File:                     c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json)
Hash identifier:          WID9Ty2XtNzXUNdbEDaMIa451X3P2nbWojjZWmWNNGA=
Subject key identifier:   E8:A7:95:E9:58:6F:D0:FD:50:AE:7A:4F:C0:EE:B5:C2:BF:54:37:14
Certificate issuer:       /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Certificate serial:       010D0C9F4328584C13C370578AD8A395A6420F80
Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     3527
IP address blocks:        128.231.0.0/16 maxlen: 25
                          137.187.0.0/16 maxlen: 25
                          156.40.0.0/18 maxlen: 25
                          156.40.64.0/20 maxlen: 25
                          156.40.80.0/21 maxlen: 25
                          156.40.88.0/22 maxlen: 25
                          156.40.92.0/24 maxlen: 25
                          156.40.96.0/19 maxlen: 25
                          156.40.128.0/18 maxlen: 25
                          156.40.192.0/22 maxlen: 25
                          156.40.196.0/24 maxlen: 25
                          156.40.198.0/23 maxlen: 25
                          156.40.200.0/21 maxlen: 25
                          156.40.208.0/20 maxlen: 25
                          156.40.224.0/19 maxlen: 25
                          165.112.0.0/16 maxlen: 25
                          192.231.145.0/24 maxlen: 29
                          192.231.146.0/23 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:13:c3:70:57:8a:d8:a3:95:a6:42:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=0d5d317d-9eb8-42d8-82af-8e9f5d8a5f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:84:3f:a4:19:79:7a:04:d0:2d:c8:68:92:
                    09:66:83:a2:89:29:b9:2c:99:2b:eb:6e:36:c2:fb:
                    33:6d:23:48:51:12:70:a2:b1:b7:c5:e8:54:90:60:
                    bd:4d:7b:40:72:8e:fc:e2:dd:c3:df:e0:16:71:1d:
                    16:7b:3c:20:4f:82:39:c1:9b:21:96:a9:7e:b0:42:
                    dd:5b:51:01:75:70:c0:bf:00:7b:52:8b:2b:7e:b7:
                    58:94:7f:ec:62:9f:40:41:8e:56:c0:fa:72:35:18:
                    f7:67:bf:99:22:95:36:c1:51:93:66:28:c5:c4:9b:
                    2e:c6:3e:b4:f8:17:59:36:c4:fd:f7:4c:5d:34:c9:
                    8b:37:eb:0f:1c:50:57:34:17:18:64:79:d2:99:8e:
                    3c:f6:1c:2b:89:10:f6:9e:df:70:f1:93:39:ed:be:
                    82:7f:26:cb:45:6b:1f:bd:1b:be:93:ee:00:d3:dd:
                    01:8e:87:bf:17:ed:cb:3c:40:d4:e8:2d:31:cd:5b:
                    85:28:6f:3c:e7:a8:7b:5f:03:64:5d:21:78:48:ea:
                    de:ce:97:64:8e:e0:f7:d9:ef:b8:46:73:ea:41:80:
                    15:ff:2c:8a:a7:78:fb:ae:94:96:93:a8:1a:03:1a:
                    b8:99:ff:73:a1:48:ed:7a:9c:91:14:83:30:c6:4d:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:95:E9:58:6F:D0:FD:50:AE:7A:4F:C0:EE:B5:C2:BF:54:37:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl

            X509v3 Authority Key Identifier:
                keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.231.0.0/16
                  137.187.0.0/16
                  156.40.0.0-156.40.92.255
                  156.40.96.0-156.40.196.255
                  156.40.198.0-156.40.255.255
                  165.112.0.0/16
                  192.231.145.0-192.231.147.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:5d:9c:ac:b8:43:3b:13:c7:79:75:13:91:c9:a6:ae:b4:
         15:6f:3f:99:52:a7:73:40:b1:32:11:4f:d2:0d:f3:a5:66:d1:
         9d:b0:81:77:8a:06:5b:bb:22:a4:a7:91:df:dc:59:9a:52:da:
         14:d5:36:87:46:03:12:84:36:93:51:59:ec:5b:fd:f0:c6:76:
         83:a7:55:8f:ca:07:ec:af:a7:6f:df:98:48:c3:57:a2:97:cd:
         6a:74:53:89:c7:61:7c:47:52:cf:28:c0:22:07:69:56:e0:39:
         5f:a0:80:d0:bf:69:5d:fd:ba:da:33:db:38:a4:01:59:0d:6a:
         9b:5f:84:fd:68:18:85:4c:9a:85:f6:db:a2:3b:ef:0c:3d:1d:
         80:cf:70:f5:50:00:53:ed:0b:5a:2f:be:09:11:53:11:24:b4:
         81:34:1c:0e:a7:92:9f:4a:1a:0f:dc:5c:3f:5e:c1:21:d4:4f:
         70:17:da:46:98:cf:6b:a6:b1:da:08:a2:3d:32:fe:a2:5a:fd:
         08:af:07:6c:54:71:ca:ab:9f:73:4c:ed:84:a6:2f:57:a5:2f:
         85:bb:49:18:bb:a1:88:8d:0c:25:67:53:1e:48:32:3f:34:ec:
         70:11:19:54:92:7a:53:b1:7e:fa:8a:d0:36:9b:7e:0a:d0:1d:
         a8:f0:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:02 2025 by rpki-client