This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa
File:                     3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa (raw, json)
Hash identifier:          HC6je++HyBCEfo5GgXDBHQZvHxp+V+p/APCWw41VfuA=
Subject key identifier:   E1:E0:FE:27:3C:45:E9:CA:08:63:5B:13:31:17:94:6B:95:FB:85:D9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584C2226F8629923540F9A3E0BE0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa
Signing time:             Tue 09 Dec 2025 20:50:38 +0000
ROA not before:           Tue 09 Dec 2025 20:50:38 +0000
ROA not after:            Mon 09 Mar 2026 19:50:38 +0000
asID:                     31898
IP address blocks:        157.137.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:22:26:f8:62:99:23:54:0f:9a:3e:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Dec  9 20:50:38 2025 GMT
            Not After : Mar  9 19:50:38 2026 GMT
        Subject: CN=dd0c1916-7162-4367-b09d-3dd928f39d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:9c:8a:a9:2d:b3:4a:be:62:85:20:a5:e2:
                    2f:49:4a:d7:10:d5:ac:4d:66:a2:3e:ab:f8:fb:f1:
                    83:de:32:0b:d9:90:51:c2:a4:c8:df:aa:1c:c3:ae:
                    0b:8e:bc:89:9c:c5:0b:58:8e:06:9f:0d:3c:fc:18:
                    88:9a:2d:c3:5a:0b:e7:1d:12:ab:3a:3b:4c:13:45:
                    f5:62:15:85:0d:a3:16:9f:d6:9a:b2:9c:53:bf:09:
                    1a:62:a5:d8:8b:01:64:f2:bd:ac:00:d7:e8:3e:85:
                    98:8d:19:c9:67:13:51:5d:e5:07:3d:13:74:72:6e:
                    80:c9:a4:0c:e5:4c:68:8b:d3:22:8e:b0:a1:e2:c1:
                    a6:77:d2:07:2d:5c:35:87:8e:5e:32:18:fc:21:5c:
                    44:b8:01:87:fb:0c:6f:52:3d:c1:55:8e:d9:51:ae:
                    b9:58:53:10:f5:aa:53:8f:4c:44:72:0b:ac:7d:40:
                    89:26:e1:eb:0f:14:f1:b0:01:54:56:f2:1e:fa:c7:
                    90:f2:35:12:14:f0:5f:4c:be:86:c5:f9:bc:e3:43:
                    a0:92:2f:c0:2d:d3:b0:1f:f1:8a:e6:7c:5e:01:27:
                    00:f0:30:d4:ff:82:35:35:8b:8b:e9:38:14:c8:73:
                    d3:c7:a4:42:aa:59:58:13:1d:74:0e:1a:28:61:e8:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:FE:27:3C:45:E9:CA:08:63:5B:13:31:17:94:6B:95:FB:85:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.137.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:ec:73:90:5e:db:8c:87:6e:73:5a:37:e0:24:5a:98:ec:
         3e:8e:87:87:38:97:6d:df:5b:0c:59:7c:51:29:ec:36:b4:cd:
         93:e0:38:65:11:65:02:5a:d3:8c:a9:64:ba:0a:f3:54:9e:ae:
         85:1e:51:27:d8:a9:c9:ed:47:38:43:a5:cc:c4:ee:be:1d:31:
         9e:8e:32:7a:f8:f8:b3:96:e2:8b:bd:b3:66:83:eb:c1:a2:62:
         f2:81:cf:55:98:c9:94:00:60:78:7c:60:6c:16:69:96:dd:58:
         da:49:ad:7b:3f:e1:6e:cf:e3:e7:19:6d:21:e0:b7:c3:ef:77:
         d4:3e:f8:cb:f1:5f:52:9c:21:ac:70:b9:84:8d:0a:cc:e9:af:
         85:99:90:9d:ea:db:59:bd:2b:3f:d2:64:46:8c:81:e0:e8:b7:
         c0:c9:ac:78:15:a7:28:a2:32:0e:44:0f:7f:01:ba:f4:1a:66:
         d5:ac:6a:3f:e1:eb:41:08:1e:c9:6a:06:ad:a8:c5:fa:24:29:
         91:e4:7d:73:39:37:02:84:d7:b7:25:cc:64:87:80:eb:4e:ed:
         57:51:65:09:68:b0:28:0b:94:fd:d7:db:56:c9:15:67:d1:a8:
         de:c2:c2:63:b4:e3:9b:73:ce:12:59:25:31:38:ca:7e:9d:ac:
         0a:24:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:26:25 2025 by rpki-client