This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa
File:                     ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa (raw, json)
Hash identifier:          Oime+cr590a1TZqUBwLrikcYXJblp5rQjD4uD/JMCFE=
Subject key identifier:   80:2E:FF:31:8B:D4:F4:E5:EE:DD:53:4D:B7:16:E6:89:D0:DB:C5:19
Certificate issuer:       /CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb
Certificate serial:       010D0C9F4328584C1630E8B82661836749A08980
Authority key identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa
Signing time:             Fri 05 Dec 2025 14:00:38 +0000
ROA not before:           Fri 05 Dec 2025 14:00:38 +0000
ROA not after:            Thu 05 Mar 2026 14:00:38 +0000
asID:                     393336
IP address blocks:        173.0.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:30:e8:b8:26:61:83:67:49:a0:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb
        Validity
            Not Before: Dec  5 14:00:38 2025 GMT
            Not After : Mar  5 14:00:38 2026 GMT
        Subject: CN=b6b6c68b-db0a-48c3-aac9-6f842d3cfe48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:1e:bc:0e:dd:67:a7:25:cb:ed:b3:bc:d1:
                    0e:5e:3b:91:38:86:e1:a8:43:99:79:30:1f:a9:9f:
                    9f:4a:7e:c5:34:4f:cc:fd:31:7f:de:ba:c8:10:32:
                    69:9f:33:7f:61:c0:5e:81:87:49:86:30:e1:52:92:
                    de:73:a6:53:49:61:2a:f9:bb:80:72:93:39:89:b5:
                    50:25:ed:a8:63:40:6c:6d:d2:9b:fb:ff:78:2b:c7:
                    95:81:70:8b:87:d9:06:9f:33:21:ff:b0:cc:57:b3:
                    36:90:11:8a:ee:c7:30:32:b5:a1:4a:54:13:a7:12:
                    7f:f3:23:cc:08:29:0a:89:d8:5a:b3:5b:29:84:df:
                    55:9a:dc:41:55:75:3a:77:9e:98:b6:98:a4:fa:6d:
                    77:62:5c:f8:62:83:b1:1f:74:e2:9e:a1:aa:37:98:
                    9d:7c:f7:fa:44:62:87:b7:bc:22:00:14:e6:02:f1:
                    21:76:fb:fb:29:6c:b5:9b:bb:54:b4:82:99:d4:c8:
                    db:28:35:05:0f:55:af:50:2e:32:ca:db:ff:88:89:
                    44:71:48:93:34:08:7d:ce:69:b5:3d:6a:48:6c:5e:
                    c4:c7:a1:93:36:21:13:5c:10:6c:a2:27:37:b2:61:
                    4a:3d:5a:58:d5:d5:a3:91:5f:01:ef:f7:d5:16:e8:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:FF:31:8B:D4:F4:E5:EE:DD:53:4D:B7:16:E6:89:D0:DB:C5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl

            X509v3 Authority Key Identifier:
                keyid:22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:4a:5a:e2:43:ce:c8:8c:50:1f:02:ba:dd:1f:ba:09:30:
         32:dc:2e:f1:82:7a:1c:4a:79:d2:9c:11:5d:13:ec:43:9a:73:
         c8:8c:f3:ae:5c:89:f2:3c:a2:28:1a:2d:05:28:91:c8:bd:bc:
         a1:e8:16:87:72:48:03:95:0b:2d:dc:89:1a:bb:e2:ee:89:f6:
         0c:5f:64:33:c6:52:ae:8f:46:b4:ed:50:2f:91:ed:38:26:90:
         db:b4:e0:d2:ba:26:1e:51:cc:2b:37:6c:e7:f6:4d:61:f2:8b:
         25:3b:fb:a4:5b:c6:ec:12:a2:93:72:19:5d:f4:18:9c:dd:f5:
         16:a3:bd:77:40:41:da:c9:4a:0d:bc:d5:3a:f0:99:92:9c:f1:
         11:02:e5:f1:28:e5:fa:52:ce:a4:07:18:d3:8c:23:c2:b4:d9:
         f5:93:73:aa:c3:dd:80:2f:5b:39:53:47:96:b6:6a:34:21:ae:
         1c:5e:95:72:fc:6f:8d:b5:48:64:63:5d:bd:64:2b:76:1a:d1:
         f8:43:e6:d5:22:b6:3b:85:ba:3a:63:5c:71:21:10:9a:9f:27:
         f6:9a:5a:81:4a:bd:38:6e:6c:d8:61:07:78:56:dc:d3:ea:fb:
         37:ac:1b:31:82:d2:56:bb:39:fa:c3:34:b8:dd:7d:04:60:8a:
         cc:a0:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:56:37 2025 by rpki-client