This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa
File:                     5130bef9-5e24-3975-9914-0892f8dec7d1.roa (raw, json)
Hash identifier:          6JGQNMkC3K7otxTmVgBhynkn4CIgJt0I90ittnWHUIM=
Subject key identifier:   7E:CD:DB:72:DA:E8:21:4E:CE:E2:AC:88:C8:B4:43:33:32:47:A1:FA
Certificate issuer:       /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1
Certificate serial:       010D0C9F4328584C0D022459D2E16FAE53B82A00
Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa
Signing time:             Wed 26 Nov 2025 14:00:39 +0000
ROA not before:           Wed 26 Nov 2025 14:00:39 +0000
ROA not after:            Tue 24 Feb 2026 14:00:39 +0000
asID:                     401560
IP address blocks:        23.131.252.0/24 maxlen: 24
                          2602:f744::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0d:02:24:59:d2:e1:6f:ae:53:b8:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1
        Validity
            Not Before: Nov 26 14:00:39 2025 GMT
            Not After : Feb 24 14:00:39 2026 GMT
        Subject: CN=5f7ade17-2b18-405f-bec1-3f3c0b09c5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:e1:cd:63:35:91:b0:dd:5c:85:ef:1b:e4:
                    f4:83:d4:e3:fd:c7:fe:da:e9:f6:85:de:14:09:5f:
                    d3:ad:3d:1f:a6:cd:95:8f:cd:b2:88:2a:59:e3:d5:
                    bc:d7:28:1c:b1:7b:e2:0c:07:b7:32:b2:2d:f2:6e:
                    2f:90:7a:fc:5d:fe:58:45:17:8a:19:bb:4e:8e:e5:
                    e6:03:f0:6f:08:e5:68:e8:9d:ba:1d:75:0c:ba:0d:
                    8f:b7:28:99:03:5e:f5:be:6d:86:01:00:a2:78:8d:
                    34:ee:55:7d:d4:20:78:05:f0:05:0a:b0:33:a3:fb:
                    8d:ac:6f:a1:f2:2f:ed:cc:6a:3d:1a:2b:b3:6f:a6:
                    be:b4:a1:77:1e:98:11:9c:8e:fe:8e:d4:2a:1c:9d:
                    a9:4e:b7:2b:02:31:52:a4:0d:62:2c:47:e5:6d:7d:
                    ea:14:5b:cc:1d:e2:24:67:2c:e0:f7:af:c0:88:ec:
                    6f:2c:58:43:5c:da:b8:46:1d:b9:0e:38:80:aa:ad:
                    6c:53:62:6f:d8:be:af:5a:52:fb:8d:f8:dd:fb:5d:
                    ad:f0:05:51:ae:76:66:3e:9e:ac:6c:5b:89:48:5f:
                    32:ab:49:e2:d5:9b:ad:fb:43:b5:4b:99:55:32:eb:
                    cd:5e:89:6b:a4:7d:8a:a7:8e:4a:c5:79:19:de:cf:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CD:DB:72:DA:E8:21:4E:CE:E2:AC:88:C8:B4:43:33:32:47:A1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl

            X509v3 Authority Key Identifier:
                keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.252.0/24
                IPv6:
                  2602:f744::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:98:51:0b:78:07:f6:0d:01:a0:cc:b7:da:45:a5:d5:e4:
         50:70:e8:bc:64:22:d1:cc:73:b1:f6:88:fa:55:89:d3:0c:f3:
         a7:bc:e8:e9:0b:7a:f6:6e:92:14:95:f8:af:27:66:c7:3f:6b:
         ac:b6:97:6d:e4:ad:fb:c4:7a:45:5a:4e:b9:6b:30:61:d2:c8:
         21:26:59:38:00:be:aa:d1:3f:6c:09:6e:70:d8:c8:ab:d1:7b:
         7d:3a:ea:eb:09:f0:b7:a7:bf:86:94:a4:98:73:28:bc:76:f4:
         89:a9:0d:ad:b5:8f:ef:19:e7:54:a7:9e:9b:98:41:2c:db:f9:
         67:17:4b:d0:44:2c:e0:9b:9e:03:22:ff:99:27:74:e6:f2:97:
         71:58:4e:2b:dc:15:d7:5a:c3:0d:31:6b:8c:cf:33:a4:8a:65:
         20:b0:58:b5:16:f0:1d:4e:4b:19:d0:f5:06:21:9d:ee:9f:a9:
         2e:0c:87:ba:40:9a:62:56:90:49:23:1b:3c:38:dc:64:d5:6d:
         2f:fa:97:36:e1:13:43:71:ad:94:57:c4:e8:a3:79:02:e5:3c:
         60:09:4a:6b:4e:a6:13:ab:8d:d1:25:d6:9f:3c:77:c6:a2:fc:
         74:07:1a:4b:34:0e:9d:c4:bb:72:1a:44:bd:91:1c:c2:80:77:
         44:58:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:10:51 2025 by rpki-client