This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4c2df8b8-1249-327f-9ed0-9487601f3975.roa
File:                     4c2df8b8-1249-327f-9ed0-9487601f3975.roa (raw, json)
Hash identifier:          J8YjYV6m9p1q9ETFMNnOdJJT7NEV6I0QOPkn5qgAoV0=
Subject key identifier:   44:90:26:BD:F4:74:9E:31:AB:86:FD:3A:89:96:95:FD:03:10:BB:7B
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584C242694D676BFA3F96D4F7300
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4c2df8b8-1249-327f-9ed0-9487601f3975.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     10794
IP address blocks:        199.43.64.0/21 maxlen: 21
                          199.43.64.0/24 maxlen: 24
                          199.43.65.0/24 maxlen: 24
                          199.43.66.0/24 maxlen: 24
                          199.43.67.0/24 maxlen: 24
                          199.43.68.0/24 maxlen: 24
                          199.43.69.0/24 maxlen: 24
                          199.43.70.0/24 maxlen: 24
                          199.43.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:94:d6:76:bf:a3:f9:6d:4f:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=90ee7325-1bdf-4cd9-86ea-7a6d66c1e33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:e7:3c:e0:c1:a8:95:74:ce:18:ba:5a:9b:
                    20:bf:af:e6:aa:29:58:47:c6:d9:f5:fe:83:7b:ea:
                    01:49:83:7a:f0:ee:65:b3:98:ef:3d:25:68:5d:70:
                    72:88:c5:4d:53:9d:e1:f1:ea:74:19:e6:c0:f6:90:
                    2d:da:b3:f5:ce:6c:fd:22:27:77:1b:99:4a:cf:dd:
                    e2:82:5e:33:14:2e:5d:9a:87:f4:ba:2a:33:75:86:
                    df:f9:7f:c3:9b:c9:14:ab:a3:54:c4:4f:25:02:af:
                    d2:e3:b5:07:6a:52:02:1b:d8:99:9b:d7:c3:88:87:
                    57:7f:8e:2f:d5:14:cd:3c:a2:27:4f:17:29:1d:5f:
                    53:bf:dc:ea:48:62:79:36:f5:4b:39:76:6f:12:23:
                    da:34:05:81:cd:33:26:f5:23:9e:1b:03:c3:9a:49:
                    bc:f8:ee:c6:87:d4:ee:ee:3f:f6:2d:70:6b:86:e1:
                    05:9a:4f:24:03:a9:92:a1:54:80:24:5b:bf:41:d8:
                    25:d1:e1:0b:97:31:4c:4a:29:bc:37:f9:a1:ef:0a:
                    a2:4d:06:75:a3:3d:34:05:a0:12:a0:2d:07:b9:b3:
                    93:c7:4c:84:b5:42:04:02:51:7c:fe:36:ae:04:35:
                    03:d9:a0:e9:7d:44:81:ac:6f:2b:7f:a8:95:f2:50:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:90:26:BD:F4:74:9E:31:AB:86:FD:3A:89:96:95:FD:03:10:BB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4c2df8b8-1249-327f-9ed0-9487601f3975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:52:4f:50:15:9a:0c:b3:e1:5c:ad:09:42:72:1f:5e:cc:3e:
         83:7a:81:5d:35:aa:8c:a6:49:ad:ab:dc:9f:1a:23:24:c1:c6:
         ce:52:78:15:b5:14:77:77:fc:a1:2f:fd:0c:61:17:26:db:26:
         32:56:a0:04:8e:71:a2:e3:96:9f:8e:8f:86:49:ea:94:fa:7c:
         a2:0b:ef:1b:84:e8:80:ff:67:60:7f:4d:84:1b:d8:18:1e:f9:
         2d:c3:40:84:a4:36:ea:66:bb:60:46:d4:f2:19:b9:5c:5f:ec:
         3f:75:7b:11:07:57:f1:02:7d:f2:23:ea:0a:4a:58:f5:59:97:
         22:69:be:9d:69:c8:2b:ba:6d:60:df:dd:8b:ca:fd:ab:a7:ce:
         c4:b4:d7:4b:dc:a9:ed:96:16:0b:a1:d8:9b:80:36:3b:a9:34:
         02:f1:ba:73:8e:59:97:1b:5f:d6:f3:dd:41:8e:e3:7b:0e:6d:
         35:96:9e:83:8f:f4:14:44:b1:55:7c:a6:7b:49:74:40:1a:b9:
         42:91:35:35:75:95:5a:87:68:98:10:e6:65:f9:6a:35:f3:50:
         a8:73:f9:54:50:ac:2d:a2:9d:d5:b5:21:eb:d4:50:26:c7:95:
         e5:3e:c0:b6:58:ca:d0:fa:03:84:89:7c:4b:13:03:3a:f8:dc:
         f0:92:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 22:48:05 2025 by rpki-client