This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
File:                     b737c496-4672-34aa-b061-ed83ae9c485f.roa (raw, json)
Hash identifier:          zede7Qdy7vZwVhh/In1miGLbYEvc4Io4W6SoMRz7E00=
Subject key identifier:   B7:A7:72:19:8A:AF:94:83:AD:5B:1B:71:15:B2:1C:5D:77:9D:ED:04
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584BD1CAF5D456AA48F66FB684A0
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
Signing time:             Tue 11 Nov 2025 02:00:30 +0000
ROA not before:           Tue 11 Nov 2025 02:00:30 +0000
ROA not after:            Mon 09 Feb 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        155.63.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d1:ca:f5:d4:56:aa:48:f6:6f:b6:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Nov 11 02:00:30 2025 GMT
            Not After : Feb  9 02:00:30 2026 GMT
        Subject: CN=a3f6700d-7b49-4553-887c-1f7334474658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:7a:eb:36:a0:71:40:32:a5:c7:c8:10:f0:
                    00:55:2b:96:50:b8:b0:88:e0:ad:cb:a3:bb:d5:3a:
                    ab:05:ba:fc:ba:47:c8:62:92:eb:67:cc:f0:76:01:
                    33:f3:3d:57:13:b9:cd:7a:8a:d9:25:bb:69:e8:43:
                    17:54:87:93:91:e5:22:df:66:94:45:fb:dd:48:d0:
                    a0:93:c9:a8:12:aa:81:7f:81:90:81:26:66:72:42:
                    54:0b:32:56:a1:29:3a:78:43:4d:e7:eb:af:ec:74:
                    18:bf:26:7b:3c:7b:a1:e2:53:12:30:95:c0:3e:ba:
                    f8:0a:dd:ea:e8:b2:54:2d:42:c6:d4:09:29:70:4e:
                    6a:88:6c:8d:27:8a:49:29:ab:50:1a:ec:10:0e:7d:
                    6d:46:55:c4:09:2d:9c:9b:d1:80:8a:7f:72:6c:16:
                    f7:e8:13:bf:fd:5f:d4:6d:01:85:f8:90:de:8a:2e:
                    d3:e0:27:75:96:dd:6d:07:d2:be:10:95:38:72:24:
                    bd:1e:9c:24:39:95:c0:09:3a:55:df:8c:c6:9f:23:
                    3d:dd:86:5b:7e:42:15:cd:60:1e:e9:ba:37:ab:6f:
                    63:c1:6e:30:fd:3b:d7:7e:ea:23:d7:1a:08:21:a1:
                    66:56:5f:56:98:e7:25:9d:1a:14:45:1d:74:26:81:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A7:72:19:8A:AF:94:83:AD:5B:1B:71:15:B2:1C:5D:77:9D:ED:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:4a:a3:6e:e4:4c:b0:69:c2:51:9a:5f:45:3e:d9:91:91:
         aa:a8:ab:1a:7f:02:bc:0c:1b:a3:01:29:be:b4:9b:95:91:9b:
         ed:0b:2f:06:de:eb:4c:24:60:76:c1:9d:40:cf:9b:6c:ec:b8:
         f7:7d:58:3b:e3:5a:fa:39:7e:3c:dd:6f:0a:40:98:de:c1:54:
         be:2d:16:19:2e:8b:d7:1f:07:81:cf:9f:db:7b:7f:31:d2:39:
         cc:db:78:4d:71:6b:bb:16:a1:6a:0a:9c:ad:a2:23:43:99:3c:
         c3:03:eb:83:12:a0:98:3d:50:f2:c3:21:2b:03:69:80:2f:da:
         4e:37:38:8d:66:0f:ea:75:cf:27:fa:17:70:a7:c0:57:5f:6a:
         00:70:d1:5e:4b:6a:db:41:3f:42:09:18:ea:06:0a:8a:39:54:
         2e:4b:82:89:74:82:21:91:95:fd:fb:91:76:8e:fd:ed:95:b0:
         6d:d0:9e:95:99:33:bb:2e:be:7c:c0:43:4e:5a:d9:51:2d:a3:
         8e:77:f6:ba:90:c3:f8:63:98:d5:00:75:f9:b9:24:15:ab:9c:
         70:06:2e:58:cb:26:dc:e3:8f:4f:c9:2f:82:c6:18:5a:3c:d4:
         1b:cb:80:4b:21:e5:3e:ea:04:b9:0f:21:b4:b5:da:b1:29:f8:
         b1:82:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:04:33 2025 by rpki-client