This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa
File:                     d2974c0b-793f-3052-907e-201dffbd31d6.roa (raw, json)
Hash identifier:          eFsh9LS30oHqai4e243+QTeCAVTSG31ZhlFd0mDZx24=
Subject key identifier:   85:31:0C:29:1C:A8:2D:D5:54:8A:7B:81:2A:68:71:B2:CB:0C:F0:78
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C42DC1C3E242B17935C1F5B40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        161.232.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:1c:3e:24:2b:17:93:5c:1f:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=efc53bba-f2a3-4258-9c3a-a04ebda9490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:ff:65:72:4f:eb:a1:84:a0:48:9e:9a:c9:
                    6c:18:cd:ad:7f:bd:7a:b9:a8:eb:58:77:0f:0b:19:
                    2f:89:c9:f6:9f:e6:ff:6d:bf:9e:63:6d:36:21:90:
                    e5:b2:3d:7d:dc:a0:0f:65:0e:6e:58:53:1a:4c:0b:
                    d6:26:4b:a1:4f:2a:20:b3:1a:a4:28:75:0f:07:c6:
                    87:4e:f4:33:f4:14:d1:1e:18:e1:ae:79:21:06:d9:
                    3a:1a:24:bc:f4:53:30:50:54:a4:34:e0:ad:26:aa:
                    e9:56:44:36:e1:35:1f:3f:c9:01:d2:86:69:d3:e7:
                    28:0f:e0:3f:50:7b:0f:78:92:5c:5c:91:04:93:e9:
                    68:22:e9:e1:d8:3d:47:a8:08:55:53:0d:f8:26:37:
                    08:92:a1:b7:0f:e7:c9:a3:6b:b4:0a:29:b9:a6:1e:
                    2d:7f:fd:bd:5b:bb:83:b3:21:17:4e:8b:99:cd:bc:
                    79:68:91:f4:7c:9a:54:0b:39:39:37:57:60:bf:d0:
                    18:48:ad:70:f1:da:9c:2e:79:bb:f8:cf:46:60:fc:
                    f0:3d:57:c1:09:59:95:99:f1:c8:90:b1:d2:3e:71:
                    56:59:e7:04:08:c8:bf:d2:91:a4:3b:78:d3:b5:b4:
                    e7:7a:49:03:3e:6f:ea:5d:90:29:1c:4d:af:a5:9c:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:31:0C:29:1C:A8:2D:D5:54:8A:7B:81:2A:68:71:B2:CB:0C:F0:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:82:c9:ac:b7:cc:16:66:85:92:0a:b3:89:ed:87:90:1b:
         3d:0b:ab:a6:2c:34:0b:bc:d5:db:f8:eb:46:69:b2:02:fe:3f:
         68:12:77:fd:5c:cb:68:e8:4f:8d:9c:ff:d7:3d:02:9c:e6:5c:
         b7:6a:3a:e4:e8:99:42:18:fa:09:ad:b8:5b:8b:60:55:d3:6c:
         de:98:6f:39:cc:37:80:98:04:1f:46:db:43:cd:38:d0:cb:18:
         b2:8c:cd:43:4b:9f:a8:c9:3e:38:f4:f9:9b:04:f2:56:97:b5:
         6c:39:32:3c:ab:8f:9e:73:7e:13:1e:0a:d4:d5:e1:71:8b:65:
         ea:70:69:b0:70:69:89:56:03:bb:83:f6:2d:86:bc:07:31:6a:
         cf:a3:c0:ab:00:d5:75:9d:02:f5:a5:5a:58:9d:37:59:fd:c0:
         0b:87:33:f7:10:0f:3a:67:df:d1:a0:5b:e5:5f:9b:6f:81:09:
         66:d5:23:f2:b6:b9:aa:72:e0:66:a5:ed:49:b8:4e:c7:d7:d4:
         46:5b:23:73:14:36:3a:ff:26:10:ae:22:4d:3d:25:01:7b:a0:
         46:c5:e4:87:fe:ec:61:04:10:85:0b:3a:95:6a:07:42:bb:9b:
         23:23:d9:d3:98:68:82:eb:b6:5d:3d:5f:df:e3:57:7a:2c:f4:
         7b:36:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:55 2026 by rpki-client