This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/522ee799-00c1-3c81-9a66-32d095f18a7d.roa
File:                     522ee799-00c1-3c81-9a66-32d095f18a7d.roa (raw, json)
Hash identifier:          0kvxOr0WyQP5Ugt9fIJj2UJcGzP77U9ylvmin7/hBHg=
Subject key identifier:   BB:8A:A0:77:18:B6:4C:40:82:3F:5D:42:43:BF:FB:B8:83:B1:81:F6
Certificate issuer:       /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial:       010D0C9F4328584C1200B80073B1A86BB3CF80BC
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/522ee799-00c1-3c81-9a66-32d095f18a7d.roa
Signing time:             Thu 04 Dec 2025 02:00:30 +0000
ROA not before:           Thu 04 Dec 2025 02:00:30 +0000
ROA not after:            Wed 04 Mar 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        161.223.187.0/24 maxlen: 24
                          161.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:12:00:b8:00:73:b1:a8:6b:b3:cf:80:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
        Validity
            Not Before: Dec  4 02:00:30 2025 GMT
            Not After : Mar  4 02:00:30 2026 GMT
        Subject: CN=1c5768a3-4190-4fe4-9283-5410f47268b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:2f:42:1a:20:9c:10:78:90:81:ee:32:30:
                    3b:65:a4:97:78:d8:5a:a5:ca:e4:3d:a0:ad:ff:e9:
                    6c:d5:86:51:94:c6:e0:12:f4:8d:71:39:dd:ce:21:
                    89:96:d4:c8:d5:44:68:5f:f2:6b:68:81:bf:a4:18:
                    c1:95:bc:1a:be:86:84:1c:2e:c0:15:f8:7f:ed:9e:
                    ba:8d:43:9d:c8:ed:54:b8:fb:77:43:a3:99:47:79:
                    31:26:e6:95:1e:49:ac:12:f4:ec:26:f9:0d:f5:1b:
                    8e:13:61:a5:d6:b5:da:a6:75:85:8d:7c:a3:ca:bd:
                    a2:25:c4:32:a6:e5:e0:40:f6:c2:d1:df:69:ac:31:
                    7f:8f:aa:61:02:ed:6c:84:b1:a9:cc:c4:d9:44:62:
                    b9:b8:22:fd:c9:6b:c0:6c:5d:d0:ef:f2:a2:67:d4:
                    0d:0f:f0:c3:eb:80:b1:f3:cd:69:7e:fb:02:1f:8a:
                    34:fa:04:0b:c7:62:36:20:a7:37:44:23:fe:0d:c3:
                    d6:4a:66:9b:5b:8e:62:6e:68:04:7a:4f:61:72:33:
                    a3:61:a9:c1:6c:c1:c0:6d:85:79:c5:12:12:4f:b7:
                    db:a4:01:bb:12:bd:8b:ed:3d:59:08:79:de:fd:7b:
                    fb:07:df:b6:f8:52:f2:c7:aa:b8:dc:78:b3:ad:1a:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8A:A0:77:18:B6:4C:40:82:3F:5D:42:43:BF:FB:B8:83:B1:81:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/522ee799-00c1-3c81-9a66-32d095f18a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.223.187.0-161.223.188.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:de:89:1b:b4:47:42:4c:c5:cb:34:d8:83:57:02:21:79:
         c9:86:50:d8:7b:29:68:db:ae:e0:f0:25:23:04:4c:e1:60:66:
         c9:be:79:ca:5f:b8:77:ca:b0:79:7f:32:17:09:5e:7c:5c:d9:
         c4:90:01:7c:66:a2:c8:ce:ce:dd:b3:6a:4d:dc:3b:52:ed:c7:
         55:fd:e0:bd:9d:3b:46:87:d4:d2:ec:44:19:97:87:26:ca:50:
         ce:a2:58:22:c5:c5:eb:47:5e:89:b7:8c:2e:10:d4:36:24:cf:
         a4:81:3e:d7:17:12:f5:a4:92:b5:99:15:a1:57:27:19:41:05:
         88:65:ae:85:14:5d:cb:c6:27:6d:7c:c3:4b:01:1d:20:3a:0b:
         2e:a3:9c:4c:5f:d9:fc:ff:a5:f1:80:26:37:21:b0:5b:11:14:
         df:da:86:ae:bd:16:00:86:f7:0e:88:b6:cc:f5:54:a2:13:22:
         63:69:6c:78:02:18:db:d7:ec:90:da:26:2c:a1:f7:93:a5:0a:
         dc:9d:d3:26:d0:ba:a4:47:31:3a:ed:2e:3b:36:1f:ec:1e:6c:
         51:09:a0:6e:74:88:e4:ac:e6:d8:02:5d:79:5e:e7:1e:f5:7f:
         31:67:ad:f6:19:18:61:49:8c:92:0f:ab:1e:c0:81:0d:fe:36:
         a4:2b:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:04:23 2025 by rpki-client