This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa
File:                     3cb7fab8-7537-3a90-a460-36313c91e1b5.roa (raw, json)
Hash identifier:          21lGJoFcbpUHFi6uefiRzRpnX4+bYbJbPxIrI3UEV9U=
Subject key identifier:   C4:DA:1F:1E:C4:AD:BF:CB:F3:35:5B:5D:A0:E6:EC:95:87:89:AA:CE
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F4328584BFD10B1A6E89534727793E580
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa
Signing time:             Wed 26 Nov 2025 14:00:39 +0000
ROA not before:           Wed 26 Nov 2025 14:00:39 +0000
ROA not after:            Tue 24 Feb 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        216.247.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fd:10:b1:a6:e8:95:34:72:77:93:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: Nov 26 14:00:39 2025 GMT
            Not After : Feb 24 14:00:39 2026 GMT
        Subject: CN=0299a430-bf09-40fd-a9b7-ea364ce34ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:2a:b3:ec:db:c2:bc:8a:70:1d:ac:d1:75:
                    e1:5e:c7:76:0b:fa:b7:5f:70:cb:26:8e:62:85:f5:
                    29:e4:89:f6:2e:e9:d2:7f:0b:24:16:d6:65:47:8a:
                    fa:27:3a:11:09:be:30:41:1d:02:b8:d6:de:12:ba:
                    40:90:8d:88:97:00:bc:00:29:b8:b0:91:95:a3:8d:
                    eb:f4:ae:49:83:f9:1f:1c:0e:89:95:9d:05:79:94:
                    78:84:5a:5b:e9:22:92:7a:7f:dd:3f:fc:84:7b:ac:
                    55:8b:5e:33:92:f8:de:f1:53:30:be:52:c4:87:93:
                    6c:4b:63:94:85:72:35:13:7b:89:5d:3d:db:ba:3a:
                    f5:a9:e8:a6:a7:17:48:63:58:ea:4e:21:fc:73:57:
                    29:f2:ab:5e:e7:18:3f:c5:3e:c0:7e:2a:e1:dc:95:
                    55:00:e0:c5:13:0c:88:d8:67:40:75:d9:44:a0:97:
                    cb:7c:bd:08:f6:ca:b2:15:93:0e:28:66:bd:7c:cd:
                    e4:c1:e6:d2:62:0a:4d:bb:93:97:ad:97:80:19:01:
                    53:37:92:f2:17:73:2a:7d:53:25:84:bb:97:ae:fd:
                    74:a0:f7:ef:75:96:b8:57:f4:c1:95:2c:79:42:6b:
                    88:6b:26:68:d8:a8:bc:13:4b:30:c9:ff:f7:52:43:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DA:1F:1E:C4:AD:BF:CB:F3:35:5B:5D:A0:E6:EC:95:87:89:AA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:6f:30:2c:fd:52:24:dd:c9:b7:04:a9:0e:6b:21:91:bb:
         04:b6:34:71:a8:b3:d1:33:62:46:e8:93:79:9a:0a:44:f7:37:
         d8:e4:99:a5:54:4e:c8:19:2f:be:22:7b:93:b9:b3:61:8d:27:
         04:73:2d:6e:38:48:47:d9:d1:44:31:ca:23:57:69:d8:38:e6:
         83:27:c2:8c:91:cf:78:97:93:fa:74:b8:82:16:65:ee:5f:ba:
         d2:92:de:5f:e2:5a:40:30:dd:11:17:ab:29:27:5b:cc:46:1b:
         42:e8:eb:96:38:47:4e:df:17:d2:f4:2f:92:bf:f9:42:3b:7f:
         66:61:4c:0f:d3:fb:e1:58:ec:04:e9:8a:85:0e:4e:4a:00:60:
         7b:66:9b:f2:e7:ec:92:db:f3:eb:a2:30:46:de:10:a9:0f:20:
         af:69:b3:1d:d1:b9:1d:2c:16:80:d9:73:82:7f:1c:01:7a:e8:
         c6:ec:0c:ed:72:ff:b1:91:cb:6d:fb:9d:bf:a9:32:eb:ce:df:
         18:42:02:c8:35:d3:a0:b5:8e:03:e5:2b:1a:a7:04:04:21:40:
         9a:0a:59:d3:79:83:ee:0d:0a:6c:5f:44:5a:ec:35:26:13:f9:
         f2:fd:51:b7:b8:43:ed:e8:00:18:c1:8d:a2:2e:d7:04:83:38:
         bf:1c:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:56:10 2025 by rpki-client