This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
File:                     2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json)
Hash identifier:          hIYggnrcY5OkZ58lxD/AUx+5UqseFgzjWI+r4O4tZaw=
Subject key identifier:   E4:05:26:E7:AA:0A:D3:D9:A3:FA:32:84:39:30:53:5F:63:84:34:6E
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584C02A5FD9A1737B9CB8018E780
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
Signing time:             Fri 28 Nov 2025 14:00:39 +0000
ROA not before:           Fri 28 Nov 2025 14:00:39 +0000
ROA not after:            Thu 26 Feb 2026 14:00:39 +0000
asID:                     32329
IP address blocks:        162.218.224.0/22 maxlen: 24
                          164.152.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:02:a5:fd:9a:17:37:b9:cb:80:18:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Nov 28 14:00:39 2025 GMT
            Not After : Feb 26 14:00:39 2026 GMT
        Subject: CN=aa687308-3f48-4531-8d7d-320a86983d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:54:6a:17:85:01:c1:9e:b1:25:ca:c2:2d:
                    bd:cf:0a:20:cb:4d:78:67:0f:10:56:55:d4:01:88:
                    ad:f7:2b:d0:6c:fe:2f:c7:35:8f:54:3d:ff:9b:b3:
                    7d:f8:c3:f7:da:ce:19:8c:48:5e:ca:50:35:ea:0e:
                    01:dd:bf:88:ad:c6:57:83:88:19:ce:7b:b4:d6:0e:
                    b3:90:ec:0c:1c:4b:6d:74:fa:aa:d5:bb:f7:cf:fa:
                    81:58:a3:f3:d6:5d:b6:c3:02:43:1b:c6:a8:84:be:
                    6e:0e:e0:91:e5:92:2d:5b:6a:d6:6a:cd:3a:36:37:
                    0c:f8:53:2c:b9:22:94:e0:c7:e6:a4:49:36:57:32:
                    3c:9d:48:94:2b:c1:da:af:ab:99:68:96:1e:b6:83:
                    93:8e:16:d6:06:a8:7a:1a:0d:38:f1:84:67:42:6b:
                    cb:4d:7f:11:8d:b4:74:f7:72:74:cc:a8:db:fe:c8:
                    fc:7f:c4:a8:bd:95:06:bb:e6:35:84:35:43:34:23:
                    ff:37:e7:a7:e8:f4:ad:0a:5e:38:a3:8e:0e:f4:84:
                    5f:0d:4b:3b:bc:ad:70:6a:80:cd:3a:a9:15:a0:0d:
                    7f:f8:a0:e6:de:27:b6:5c:80:c3:62:53:ff:a6:6b:
                    2c:60:63:8b:2c:3c:2f:40:74:61:f9:27:f5:ff:3b:
                    01:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:26:E7:AA:0A:D3:D9:A3:FA:32:84:39:30:53:5F:63:84:34:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.224.0/22
                  164.152.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:51:10:22:66:b0:92:07:5b:fe:b9:f3:12:61:40:d7:e3:c0:
         e4:a8:fd:8e:8f:ea:40:6c:cc:4a:d9:9d:58:7b:1a:b9:5a:03:
         ae:f2:7d:6f:7f:74:8a:33:ae:42:7f:92:d5:d6:f6:bb:b4:7e:
         b6:bb:47:6f:ce:0a:87:01:9d:73:41:d7:4c:f2:f0:a6:27:d8:
         f9:a5:77:39:de:d7:70:8b:2f:90:3a:70:ff:f8:f3:68:f5:06:
         ad:7c:6a:fb:10:18:95:92:15:fd:16:c4:61:30:78:b7:66:bb:
         0a:25:88:12:a8:6f:07:1d:76:a9:78:88:5b:ce:1f:c9:38:6f:
         5e:2a:dd:0b:26:13:a1:9d:b4:f3:65:4c:ce:91:b0:a4:0d:a6:
         b4:11:1e:2c:4f:9d:4d:86:90:00:03:2f:b0:53:e7:f1:87:4a:
         53:a2:48:e6:fa:e3:a7:c6:60:db:94:1f:0d:9a:53:1d:83:19:
         3b:f1:5f:ac:9e:f9:7e:85:f3:9f:c4:43:30:bd:08:f6:60:18:
         6a:8d:33:25:89:2a:4f:2f:ea:94:46:e2:b2:a6:11:3a:3c:2d:
         7b:08:61:59:de:ea:cb:c9:3c:11:77:56:21:77:d0:91:be:2a:
         c5:5d:b7:9a:40:10:18:00:0b:11:37:0b:cf:37:75:2e:0c:7a:
         2f:7c:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:49:50 2025 by rpki-client