This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa
File:                     81e132f5-7153-3263-a573-22214c133437.roa (raw, json)
Hash identifier:          b2Z/+MdVzRMYl6u6pDzE7vpceKLi1Cjj8puukMu8vBk=
Subject key identifier:   58:43:10:EF:E2:D7:A3:C1:A7:27:C0:69:56:45:FE:EC:57:57:25:5D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584C40112BD0CCD3D9C88C99DE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa
Signing time:             Sat 20 Dec 2025 14:00:38 +0000
ROA not before:           Sat 20 Dec 2025 14:00:38 +0000
ROA not after:            Fri 20 Mar 2026 13:00:38 +0000
asID:                     396982
IP address blocks:        108.170.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:11:2b:d0:cc:d3:d9:c8:8c:99:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Dec 20 14:00:38 2025 GMT
            Not After : Mar 20 13:00:38 2026 GMT
        Subject: CN=0ed4b8c2-d839-4897-9c0b-bd2c8644034e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:55:04:fc:2f:23:c7:67:34:4f:f3:60:2d:
                    44:75:29:85:24:e5:99:c2:08:90:52:91:b8:69:22:
                    5a:85:8f:13:15:0f:8c:1e:50:93:43:af:fe:45:47:
                    d1:9b:66:7e:81:39:9d:f1:ae:41:ee:fd:93:ab:55:
                    f3:d9:53:bb:a6:7c:eb:75:d7:65:e3:3a:bf:29:0a:
                    17:e7:33:44:b0:4f:89:3b:3e:ae:30:92:1b:13:37:
                    46:bd:f5:48:94:7a:3f:06:ad:17:2c:18:04:e0:98:
                    46:34:1e:e7:a0:53:cd:26:39:cc:1e:db:01:63:af:
                    7e:ef:6c:ce:bd:e3:d9:45:c4:db:65:d0:62:75:36:
                    b5:93:fb:6e:f8:ad:82:ee:de:f8:5c:c6:07:17:30:
                    d6:85:fe:e9:ff:ff:74:85:6f:2a:77:f7:fe:18:2a:
                    7c:ec:49:83:95:af:a0:46:2d:eb:f9:8e:25:de:04:
                    7c:1b:0f:62:67:61:05:71:bb:b5:1b:df:37:d3:e0:
                    5e:bf:3a:ab:26:d3:92:22:b7:3d:45:cc:f4:49:cb:
                    10:f6:54:e7:82:a1:54:a4:71:53:d9:db:62:27:c3:
                    aa:a0:04:9a:80:c5:8f:db:a9:dd:fd:f0:77:ec:b3:
                    65:75:c5:ef:95:46:bc:8a:33:c1:ca:e7:89:41:9b:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:43:10:EF:E2:D7:A3:C1:A7:27:C0:69:56:45:FE:EC:57:57:25:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:d9:60:db:9b:2a:30:05:f5:43:a9:87:32:ad:be:06:45:
         f4:1c:ed:dc:c3:49:1e:65:cc:8f:6d:04:5b:35:ae:75:f7:d2:
         65:5b:11:81:15:4d:1c:d5:07:ba:75:2d:ca:39:58:b1:4a:ad:
         9d:8a:8d:39:2f:f8:ae:fc:35:2d:aa:11:99:1e:5c:bc:70:91:
         78:6a:1d:b0:e2:8d:b7:fc:dd:ab:d3:54:71:d8:98:5c:7a:07:
         8b:bd:1f:ed:f4:57:41:19:0c:76:ab:6f:d5:fd:59:0d:85:85:
         8b:a9:a7:9f:09:73:19:a9:5d:42:0c:52:5f:a1:3d:f0:86:a1:
         f3:8c:e5:64:46:ca:bf:bb:71:b3:51:4a:d0:b9:17:71:4f:20:
         1c:de:fd:81:29:2a:b5:3d:b0:bf:a6:4b:4c:bf:01:eb:96:d3:
         f5:15:d2:10:71:fa:4a:d0:51:f1:6f:f6:55:f4:9e:21:c2:51:
         72:dc:9d:ea:8f:84:00:60:25:20:28:a5:dc:c5:1a:c4:90:60:
         47:48:04:47:a5:a9:6a:d1:24:8f:a0:c2:61:b2:5c:7e:a1:31:
         21:42:91:fd:df:8e:35:11:07:32:24:45:40:f9:f4:b8:f3:51:
         73:cb:53:01:ae:33:6e:94:47:aa:a7:75:0d:11:29:65:5c:25:
         05:ce:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:01:30 2025 by rpki-client