This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa
File:                     c0acfa2f-7274-3abb-abad-36132a4c20b9.roa (raw, json)
Hash identifier:          nzzgxE3saTZIoxMFpje4bmn3nNZpax7oA03S3tdhawQ=
Subject key identifier:   99:27:C8:38:92:35:64:58:8E:12:08:83:D2:AC:A5:64:72:3A:D4:C7
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584C06D601918A64E53D2FF89A80
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa
Signing time:             Sun 30 Nov 2025 02:00:31 +0000
ROA not before:           Sun 30 Nov 2025 02:00:31 +0000
ROA not after:            Sat 28 Feb 2026 02:00:31 +0000
asID:                     21738
IP address blocks:        140.235.156.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:06:d6:01:91:8a:64:e5:3d:2f:f8:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Nov 30 02:00:31 2025 GMT
            Not After : Feb 28 02:00:31 2026 GMT
        Subject: CN=8a43dcbe-2a85-4339-b8ed-1fcb0e7ab84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:82:d7:d1:63:d5:e6:e8:a0:7f:63:65:55:10:
                    16:5c:41:85:5f:c6:55:81:70:3b:09:91:42:14:ae:
                    29:51:79:c1:58:67:27:cc:aa:26:51:52:da:25:94:
                    37:19:29:94:4b:53:16:87:84:68:dd:2d:c7:52:28:
                    09:b7:bb:7a:f0:0f:ee:fe:b1:95:c6:41:cb:86:59:
                    b9:b8:f0:ff:15:ec:4f:50:a9:f3:17:e2:fa:d3:fe:
                    ce:b6:a2:04:4d:35:2b:32:e1:da:83:92:cd:7e:31:
                    2e:54:67:cc:f0:65:a3:2f:cb:c9:1f:b5:78:0b:b4:
                    3a:75:aa:8b:60:ac:a6:12:1d:f7:67:6c:b9:c1:c7:
                    b8:42:ca:a9:69:66:1f:a3:07:f9:ec:f3:5a:22:68:
                    03:13:07:8b:b5:07:4e:76:b8:c2:cf:03:6e:7c:1a:
                    82:6f:8a:f4:31:31:82:04:72:58:e4:90:40:b6:ed:
                    96:a2:7f:d0:b0:f1:aa:27:3a:5a:10:24:39:5a:51:
                    ff:d0:55:44:ae:db:93:fe:66:2c:a3:84:ca:eb:3a:
                    a1:da:ba:16:74:a3:32:8d:e7:23:d8:5c:d1:ef:4b:
                    88:dd:60:51:1a:bc:74:94:55:3a:c8:a0:90:a0:ca:
                    1e:5a:aa:9d:29:c8:08:58:62:6a:1b:c2:10:65:82:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:27:C8:38:92:35:64:58:8E:12:08:83:D2:AC:A5:64:72:3A:D4:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:f0:28:ee:23:72:bc:af:75:d6:b7:d9:0a:20:19:ca:89:
         7f:19:11:76:11:e9:5a:6a:cb:c5:c9:a9:17:22:49:84:45:d5:
         61:c7:66:a7:30:34:3a:b3:38:ba:8b:92:76:d6:1c:5b:a9:81:
         db:34:54:b7:f9:e1:53:e4:f1:9b:e7:52:1d:98:a9:98:c1:9d:
         e1:52:6b:29:f0:7a:c0:76:ba:d5:fb:46:b7:a9:17:b9:91:22:
         c2:26:35:82:55:45:af:11:97:a4:41:b7:7f:ca:40:ec:c9:fd:
         31:88:40:84:ad:71:73:99:53:7c:f0:f5:34:b6:46:5e:6b:fa:
         bb:71:1d:97:51:b6:55:0e:5e:bf:84:95:0b:3d:38:a4:96:d3:
         e7:5a:16:67:d1:e4:da:3c:d3:a5:9c:bf:45:a5:47:3a:06:66:
         9b:9a:78:69:b2:13:ae:aa:60:54:6f:6f:49:52:3d:da:a7:bb:
         74:3b:e9:36:e6:1c:0c:d2:4f:ba:a6:08:d8:02:e5:70:1f:4b:
         0b:29:54:d2:d1:be:51:87:69:b7:c6:d1:3b:67:d5:6d:0f:29:
         35:d8:a8:fe:61:f1:58:2a:9d:86:72:88:88:92:7e:fe:b5:25:
         a8:1d:7e:44:b1:23:40:c9:5e:4a:e1:95:54:48:da:1c:e1:46:
         64:8f:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:01 2025 by rpki-client