This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa
File:                     a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa (raw, json)
Hash identifier:          5bgNVYkec8Zhp3IcBQI5yJuOMA5Dw0utbUUuxuNUcZ4=
Subject key identifier:   42:D4:3D:C3:A7:1E:BF:49:44:00:2B:0A:ED:08:2B:EA:44:C3:5A:ED
Certificate issuer:       /CN=040ef740-8591-41e5-89d0-9b0266d3fcf7
Certificate serial:       010D0C9F4328584C0C6B4ABA418EE2577551F300
Authority key identifier: E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa
Signing time:             Tue 02 Dec 2025 02:00:30 +0000
ROA not before:           Tue 02 Dec 2025 02:00:30 +0000
ROA not after:            Mon 02 Mar 2026 02:00:30 +0000
asID:                     11370
IP address blocks:        199.201.225.0/24 maxlen: 24
                          2602:fa50::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0c:6b:4a:ba:41:8e:e2:57:75:51:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040ef740-8591-41e5-89d0-9b0266d3fcf7
        Validity
            Not Before: Dec  2 02:00:30 2025 GMT
            Not After : Mar  2 02:00:30 2026 GMT
        Subject: CN=d2487efb-8a62-4cd2-b243-34e26f679390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:06:e9:cd:5f:45:f4:40:5a:a6:24:03:79:
                    f3:c6:54:9d:5b:2a:34:5e:15:67:1f:08:54:a8:e8:
                    96:76:0a:12:1b:f9:59:8b:19:0b:00:c1:20:9e:f5:
                    1e:6f:c2:6a:7c:36:fa:8a:c6:76:8d:17:b7:73:f2:
                    33:12:aa:46:82:f9:b0:c9:11:b0:15:90:21:0f:e6:
                    0a:3c:7c:10:da:02:dc:82:05:d9:d4:ae:ea:96:a5:
                    d7:b3:23:98:ff:b9:a2:27:6c:1e:bc:44:e0:cf:db:
                    9e:ab:42:f6:f6:25:c4:42:77:c9:11:b3:a2:97:06:
                    02:fd:b0:be:4a:64:af:47:4b:de:bb:c7:96:a6:62:
                    e2:4b:75:4e:dd:bd:2b:8c:e7:00:5c:2f:d1:46:45:
                    51:b5:61:ff:ae:cf:e6:80:fc:0b:a6:b4:19:d8:e9:
                    78:b0:3a:e5:70:88:fd:b9:15:01:e1:bc:64:19:77:
                    91:3d:bc:5f:90:08:07:59:81:c6:72:55:92:fe:db:
                    1f:c8:84:ce:45:d1:b3:58:25:e9:66:e9:e4:a6:80:
                    ed:20:9a:34:98:c7:27:ca:18:7c:68:fa:fb:80:68:
                    ab:cf:d3:8f:ee:12:1b:8c:d0:f2:db:0d:0f:4c:c2:
                    32:ac:4f:c6:49:26:9f:cf:fb:1a:d2:b6:7f:74:30:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D4:3D:C3:A7:1E:BF:49:44:00:2B:0A:ED:08:2B:EA:44:C3:5A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl

            X509v3 Authority Key Identifier:
                keyid:E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.225.0/24
                IPv6:
                  2602:fa50::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:b8:95:8f:c4:75:8e:67:3c:0e:c1:ff:96:42:54:74:b6:
         5f:57:76:57:23:b7:8e:06:f8:0f:93:77:93:5d:0e:e3:4a:74:
         05:9f:1c:fd:44:c8:93:1e:42:f4:0b:99:b2:c4:a6:df:95:1a:
         4d:ed:84:87:b5:7f:10:9d:4a:29:b6:6b:5b:4f:68:86:71:bb:
         89:0e:21:b8:e3:e1:7b:f7:7b:da:1e:c7:24:e5:50:c5:26:75:
         a3:e1:b7:9e:01:4c:49:13:67:2b:f9:88:ed:58:68:40:05:1a:
         13:99:16:e5:e0:4f:85:80:53:6c:ac:d1:76:a0:10:d7:80:7e:
         7e:ac:49:49:5e:70:67:20:12:a2:18:a4:41:61:a8:42:25:af:
         12:cd:be:10:15:f1:79:a3:97:0d:8b:64:6b:a2:8b:1e:80:26:
         50:85:2d:ac:54:0d:41:1a:d0:8d:a9:59:08:02:27:2d:62:e7:
         b2:98:05:3f:17:ac:8d:63:d9:ff:0c:0d:23:ec:8d:4a:fd:94:
         f0:d2:06:f3:ee:fa:c9:ec:e1:3b:2f:11:c0:15:99:ff:2e:c5:
         d3:19:4a:b1:38:e2:5c:f3:da:8a:81:79:a5:02:8e:73:43:b4:
         45:d6:6e:b2:bf:de:5b:90:82:43:68:4a:5b:94:4f:15:a9:e6:
         b1:3e:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:43 2025 by rpki-client