This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa
File:                     f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa (raw, json)
Hash identifier:          yXyB8+OSJRBQDS8SRpzFX2yoRMIzfuUIuloCKkQSGkc=
Subject key identifier:   63:ED:C2:AF:D3:74:7D:A3:57:03:81:07:AF:35:A5:65:70:DE:70:13
Certificate issuer:       /CN=9179e4ff-328d-4753-b8f9-9149f799cfec
Certificate serial:       010D0C9F4328584BF615E40BC8B8B3EEC277E2C0
Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa
Signing time:             Mon 24 Nov 2025 02:00:32 +0000
ROA not before:           Mon 24 Nov 2025 02:00:32 +0000
ROA not after:            Sun 22 Feb 2026 02:00:32 +0000
asID:                     400298
IP address blocks:        172.99.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f6:15:e4:0b:c8:b8:b3:ee:c2:77:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec
        Validity
            Not Before: Nov 24 02:00:32 2025 GMT
            Not After : Feb 22 02:00:32 2026 GMT
        Subject: CN=91724e6c-5b2b-4573-a10b-2735adaaeccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:50:3f:6e:81:87:dd:3b:e7:9a:b2:fb:88:37:
                    b2:cc:4f:2b:bd:59:8e:d7:46:7e:94:43:30:29:fa:
                    a3:ef:88:25:32:a8:91:01:f1:50:95:f8:46:ea:ef:
                    b8:7f:d3:59:dd:bb:6e:8c:c2:be:4e:0b:a7:35:0d:
                    0f:a8:ff:33:60:e2:0a:d6:34:f5:b4:95:cc:fc:09:
                    2c:1d:cb:74:22:8d:82:4f:22:be:72:ec:e4:c6:65:
                    b2:cd:2e:9b:5b:af:33:1f:7d:17:9b:da:86:da:4c:
                    72:b9:48:11:76:a0:14:56:d5:7e:c8:18:ff:5a:db:
                    98:ad:5d:17:78:4f:b4:8e:52:7c:f6:28:93:28:df:
                    83:e9:75:e6:d9:9e:39:d6:f2:22:18:20:64:12:ac:
                    77:33:42:b7:b7:26:91:46:0a:42:bb:f4:82:96:6f:
                    0c:fc:87:11:17:07:75:c1:ad:71:bb:e6:f4:a5:9f:
                    77:e0:84:cd:87:ce:04:80:3a:92:b4:f7:63:73:48:
                    d1:d7:bc:12:80:28:80:3c:a3:d8:60:a3:fe:b5:03:
                    a2:8a:45:d5:07:81:cb:cd:c9:1e:f4:32:4e:09:72:
                    8d:bf:b9:53:4f:e8:b0:9a:4e:37:78:46:51:71:b9:
                    a9:d9:f9:39:ac:a7:a5:b3:85:27:d4:13:9d:0e:16:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:ED:C2:AF:D3:74:7D:A3:57:03:81:07:AF:35:A5:65:70:DE:70:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl

            X509v3 Authority Key Identifier:
                keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:52:dc:c6:ec:76:e2:df:ef:a1:26:bf:28:c5:06:06:3f:
         46:a7:2a:b0:a7:71:01:42:4c:90:0c:96:61:ac:39:41:9b:a1:
         e9:15:74:c8:c3:1b:7b:f9:71:8a:33:f8:02:33:98:88:a1:90:
         77:23:13:89:33:51:10:02:3a:e5:6b:da:19:96:f3:ba:fa:35:
         02:53:de:33:c0:35:7b:22:9b:1d:47:d9:87:ff:e1:c9:ce:e7:
         98:dc:fd:35:9d:2e:1b:37:08:ff:03:cf:bf:48:6e:56:f0:0c:
         3d:dc:78:e4:64:71:b4:55:57:56:3f:fb:7e:55:b5:18:46:dc:
         f8:40:01:96:5a:89:89:16:75:77:c5:7a:e8:f8:28:60:2b:fe:
         16:a6:d8:56:41:cc:3c:8d:89:9f:60:d5:12:9d:e5:21:d0:41:
         01:74:1d:b8:89:7b:db:bf:99:cc:8d:ba:77:02:61:51:d2:82:
         e2:78:70:ca:7a:54:14:9b:16:4d:7b:24:a5:0c:5d:22:7b:e3:
         79:9b:f9:cd:e9:73:7a:5a:3a:61:1d:e1:1a:44:47:71:11:b1:
         b5:4f:35:e2:2c:d0:e7:d7:99:32:3c:23:80:1d:90:c8:55:a8:
         a5:4f:59:8a:ec:6e:ac:eb:cb:b2:0e:84:4c:94:05:49:2f:39:
         91:26:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:11 2025 by rpki-client