This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa
File:                     72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa (raw, json)
Hash identifier:          aFXNxQpaMx7Mx2mzb6om9Jq6CgS5c7rp4x0a5cPC6dA=
Subject key identifier:   8E:C0:1A:13:03:EC:83:D8:DD:B2:B7:ED:FD:FE:E2:40:26:51:17:C2
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584BFD109CFE2BAF025050A3BE80
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa
Signing time:             Wed 26 Nov 2025 14:00:39 +0000
ROA not before:           Wed 26 Nov 2025 14:00:39 +0000
ROA not after:            Tue 24 Feb 2026 14:00:39 +0000
asID:                     11808
IP address blocks:        129.101.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fd:10:9c:fe:2b:af:02:50:50:a3:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Nov 26 14:00:39 2025 GMT
            Not After : Feb 24 14:00:39 2026 GMT
        Subject: CN=0a1661fd-8f0c-414a-8704-c18a995a0629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:49:00:c3:fa:17:8c:58:bb:6c:e8:7a:18:
                    70:4b:bd:93:f6:48:e0:f5:60:9f:0f:f1:08:1f:7e:
                    26:e3:0b:83:fc:ce:72:27:e7:87:79:f1:b3:62:ac:
                    57:2d:b8:50:a2:e0:4e:c4:ef:cc:8b:c5:23:60:5c:
                    d2:d3:6d:50:a8:c1:c9:9d:c1:90:70:8e:d4:5c:cb:
                    09:81:86:e9:06:ea:2e:02:67:75:3b:b5:c2:33:67:
                    5b:76:cd:93:2b:13:c1:b5:47:9b:9a:db:d4:a7:1a:
                    34:f5:93:2e:3d:37:c7:18:da:7a:f2:6e:3d:e3:5c:
                    49:4b:6e:b0:d3:7c:ab:7e:23:93:b4:24:67:ad:34:
                    29:27:3b:4b:13:42:89:64:e9:75:4b:c1:30:07:75:
                    e7:23:91:72:8a:9c:77:4a:56:24:d3:5e:41:33:ec:
                    20:a0:fc:9f:df:c8:c0:15:8d:75:91:e6:c5:e0:dc:
                    9a:e4:72:df:a4:1b:f0:92:8a:37:d5:4d:67:f5:4d:
                    a2:5c:16:91:8a:5b:79:de:6c:09:fe:07:6c:4c:47:
                    8d:86:b5:07:6f:4c:31:56:6c:e3:e0:8f:9f:39:99:
                    59:50:8a:9b:c0:11:80:64:aa:cd:6f:b5:22:d7:9f:
                    9c:3b:ae:a7:a2:ab:35:f6:97:51:b0:70:c8:18:3b:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C0:1A:13:03:EC:83:D8:DD:B2:B7:ED:FD:FE:E2:40:26:51:17:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:09:03:e7:14:9b:38:f6:55:41:49:8e:e5:78:fd:4a:ca:5a:
         19:a7:4c:d4:b6:6d:f4:5d:aa:a9:a4:8d:a8:4f:5d:b8:5d:6a:
         68:e0:e1:69:f0:b7:b0:cb:89:4c:3f:31:00:99:08:90:63:b7:
         56:52:ba:03:d0:18:48:08:fe:3a:56:c4:78:c3:20:95:af:22:
         d4:9d:d1:8d:0f:c1:18:e4:c8:9a:4d:f3:32:98:dc:f7:67:89:
         13:cc:59:8d:84:5f:84:c4:26:94:1d:d6:36:8c:88:4e:21:aa:
         b7:27:dc:71:f2:19:74:28:be:ee:ab:23:7b:df:85:3b:40:95:
         e6:7c:88:98:95:28:6c:04:88:a0:47:68:17:85:25:53:c6:b0:
         33:9a:69:75:36:52:45:4f:3a:5a:1a:b6:2f:18:06:b8:68:47:
         2b:45:b5:92:50:12:0a:a7:61:07:66:a9:b2:da:b1:3e:b6:c2:
         d3:c7:81:1f:93:4d:b3:5c:05:96:4a:30:25:f7:e5:86:28:3c:
         2d:e9:27:d9:e7:a4:48:c4:f8:49:56:cb:2b:41:a9:15:9d:64:
         5f:14:16:f5:e4:fa:75:4b:04:7a:16:3e:78:f2:5d:e5:08:2f:
         ca:ee:1e:14:6b:2d:c6:23:3c:8d:57:b5:f7:d7:12:81:41:0b:
         b9:7f:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:33:47 2025 by rpki-client