This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc9258f8-7356-3970-aa18-92c6e90e7374.roa
File:                     bc9258f8-7356-3970-aa18-92c6e90e7374.roa (raw, json)
Hash identifier:          ac6F1milOuFn+0sk14FxW/A1tsngC2uyVg7HNITbDZY=
Subject key identifier:   1C:82:0D:F4:47:7C:00:11:99:67:2D:C3:94:25:CF:70:C3:9B:8E:5F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584BDA2B2CFDB03224840A0C1180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc9258f8-7356-3970-aa18-92c6e90e7374.roa
Signing time:             Fri 14 Nov 2025 02:00:30 +0000
ROA not before:           Fri 14 Nov 2025 02:00:30 +0000
ROA not after:            Thu 12 Feb 2026 02:00:30 +0000
asID:                     31898
IP address blocks:        131.186.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:da:2b:2c:fd:b0:32:24:84:0a:0c:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Nov 14 02:00:30 2025 GMT
            Not After : Feb 12 02:00:30 2026 GMT
        Subject: CN=36a029be-efb5-45cd-a0db-a0f1807c466a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:74:6b:6f:10:fd:eb:f6:71:19:1d:a0:c5:
                    cf:2f:ca:ab:6a:16:79:31:be:1b:f1:17:80:4d:5e:
                    3b:1d:41:26:f1:b3:22:81:e6:86:14:20:96:24:81:
                    a3:b8:4c:d2:28:04:0d:b0:58:91:4d:3d:93:f9:ec:
                    6d:6b:c8:00:d1:db:57:24:6c:b8:b7:21:5a:85:ab:
                    d0:12:65:a6:7d:0c:1b:43:a2:74:d6:96:6d:4a:71:
                    c0:ad:32:18:9c:ef:03:58:73:27:10:3c:26:65:47:
                    2f:24:24:80:92:f1:ea:ff:37:c4:12:67:ab:7b:20:
                    b2:40:ce:4a:5f:dc:a8:25:23:07:46:28:fa:5d:02:
                    62:0a:1a:9a:7e:0e:70:7f:a0:3e:85:d3:2d:45:e2:
                    71:d3:16:a3:86:d1:00:cd:9b:13:b7:56:77:5a:21:
                    65:fb:13:de:92:9e:08:f7:4f:b2:2b:98:03:96:d7:
                    dc:d9:bf:ab:e7:c7:84:84:7e:89:ed:40:ca:c8:6b:
                    ba:e7:4e:d1:49:4c:a1:f3:31:a7:67:60:41:97:88:
                    06:65:6d:8a:19:ab:8b:6e:e3:96:62:ab:9c:cd:e6:
                    d1:be:63:d2:bd:88:9c:61:64:29:0e:79:89:b1:29:
                    3c:82:92:ad:42:b1:14:49:02:4a:de:12:f5:28:26:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:82:0D:F4:47:7C:00:11:99:67:2D:C3:94:25:CF:70:C3:9B:8E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc9258f8-7356-3970-aa18-92c6e90e7374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.186.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:86:58:14:b9:2f:7a:f1:ad:73:6a:2e:f9:da:1c:2d:94:
         f0:b5:2e:69:5b:2c:ff:7e:ad:1d:c1:8c:e1:3b:fb:30:21:b7:
         bd:e1:cf:f3:44:16:2a:5b:72:5d:d4:20:56:94:11:1d:10:c8:
         8f:59:a6:71:f8:d5:01:ba:b6:75:a9:bb:b1:4c:7b:0e:36:b0:
         f4:23:9c:ec:5d:c2:5b:03:9e:21:b9:85:82:d9:67:bf:34:bc:
         0d:d2:3e:2f:62:dd:3b:4c:e1:d9:c2:e2:dd:20:73:24:a5:f9:
         07:af:67:6b:cd:ea:1c:80:d0:aa:fa:97:91:32:76:37:4e:40:
         3a:50:94:73:c9:a8:ba:13:37:fa:ed:4d:b7:85:df:3f:1e:e0:
         93:31:4e:b0:87:a1:04:23:a6:ed:63:86:a1:11:42:e3:d0:b3:
         9a:18:c4:ab:9a:89:f4:b9:71:7a:35:ad:e8:cc:37:d5:cf:a5:
         e4:7a:24:4b:a7:a9:b0:cd:54:81:c6:76:e7:f7:c3:af:9d:8e:
         b6:f2:2c:f7:a1:0c:e0:a2:74:b0:83:3a:16:d4:12:e3:09:f1:
         de:3e:e1:51:bd:eb:c9:49:90:ab:dd:52:72:34:1d:14:59:69:
         5d:4c:3f:92:f0:97:8f:aa:b9:57:e9:63:82:4f:19:36:9d:30:
         d0:fd:2c:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKyz9sDIkhAoMEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk
MzZhMDI5YmUtZWZiNS00NWNkLWEwZGItYTBmMTgwN2M0NjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyZ0a28Q/ev2cRkdoMXPL8qrahZ5Mb4b8ReA
TV47HUEm8bMigeaGFCCWJIGjuEzSKAQNsFiRTT2T+exta8gA0dtXJGy4tyFahavQ
EmWmfQwbQ6J01pZtSnHArTIYnO8DWHMnEDwmZUcvJCSAkvHq/zfEEmereyCyQM5K
X9yoJSMHRij6XQJiChqafg5wf6A+hdMtReJx0xajhtEAzZsTt1Z3WiFl+xPekp4I
90+yK5gDltfc2b+r58eEhH6J7UDKyGu6507RSUyh8zGnZ2BBl4gGZW2KGauLbuOW
YquczebRvmPSvYicYWQpDnmJsSk8gpKtQrEUSQJK3hL1KCZaJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFByCDfRHfAARmWctw5Qlz3DDm45fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmM5MjU4ZjgtNzM1Ni0z
OTcwLWFhMTgtOTJjNmU5MGU3Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg7oAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIinhlgUuS968a1zai752hwtlPC1LmlbLP9+rR3BjOE7+zAht73hz/NE
Fipbcl3UIFaUER0QyI9ZpnH41QG6tnWpu7FMew42sPQjnOxdwlsDniG5hYLZZ780
vA3SPi9i3TtM4dnC4t0gcySl+QevZ2vN6hyA0Kr6l5EydjdOQDpQlHPJqLoTN/rt
TbeF3z8e4JMxTrCHoQQjpu1jhqERQuPQs5oYxKuaifS5cXo1rejMN9XPpeR6JEun
qbDNVIHGduf3w6+djrbyLPehDOCidLCDOhbUEuMJ8d4+4VG968lJkKvdUnI0HRRZ
aV1MP5Lwl4+quVfpY4JPGTadMND9LOc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:39:45 2025 by rpki-client