This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa
File:                     31592171-b7c5-351e-9e88-b38ea9311cea.roa (raw, json)
Hash identifier:          PAWXR/Gfqwjf4IghuDHY9H/+Q9gV4XVcs41J1oyIueI=
Subject key identifier:   0B:AA:4B:11:01:24:94:B9:E9:92:36:D1:08:12:8E:4C:7E:25:DE:83
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C470BB19C2C1C5833CC0F3840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa
Signing time:             Tue 23 Dec 2025 02:00:31 +0000
ROA not before:           Tue 23 Dec 2025 02:00:31 +0000
ROA not after:            Mon 23 Mar 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        173.21.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:0b:b1:9c:2c:1c:58:33:cc:0f:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec 23 02:00:31 2025 GMT
            Not After : Mar 23 01:00:31 2026 GMT
        Subject: CN=be76c9ec-196a-408b-9db0-c47cd3c761b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:3c:8d:03:6a:a6:c3:96:58:f2:17:01:af:
                    36:ee:64:66:d8:5c:68:b1:ed:63:0d:13:b2:5e:70:
                    fc:5d:96:f4:7a:3c:f8:b3:df:91:30:6d:e7:97:6b:
                    84:6e:b8:41:1d:0a:c2:cf:c4:2d:8b:8e:00:26:00:
                    2e:66:95:4c:56:58:5a:a2:47:f4:69:e8:11:5c:a8:
                    48:2b:f2:43:b2:c5:7b:d7:f9:7c:16:06:e7:72:ff:
                    c7:9b:9c:64:d5:ce:9d:97:67:3f:34:db:c9:8d:98:
                    6b:ed:15:a9:57:3c:ed:a6:a7:be:c8:84:ca:d5:6f:
                    96:1b:a4:b5:6f:c6:d1:67:ce:39:b2:15:ff:21:4e:
                    58:53:bb:1d:f5:b2:d0:ab:69:f3:a0:50:91:b9:10:
                    a4:3d:5b:51:b8:8f:9a:fd:75:86:d3:2d:93:02:d9:
                    17:48:3b:62:fe:c4:49:e7:6b:53:b9:72:e8:0f:7e:
                    e9:ce:32:37:2d:1b:cf:e8:0d:60:53:9a:a2:6c:f6:
                    c4:70:ec:02:d0:34:70:3b:7c:ac:73:39:90:3d:9b:
                    50:6e:6c:af:03:c9:e6:1f:fe:24:b7:53:f8:3c:87:
                    8b:59:a3:4a:7e:71:a4:a2:60:ca:32:fc:7b:0a:da:
                    12:b8:08:d3:a8:57:8d:05:ce:f1:a1:c4:65:81:0b:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:4B:11:01:24:94:B9:E9:92:36:D1:08:12:8E:4C:7E:25:DE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:dd:2e:97:27:c4:cf:84:05:ad:44:b9:ec:a6:91:7f:19:
         6a:19:a0:ae:3d:84:12:f6:af:96:bb:28:9f:48:f9:9a:7a:fc:
         f5:bb:6c:52:b6:9b:77:a0:91:5a:76:33:5c:ac:64:e5:0c:d5:
         ba:b6:63:1a:e6:e1:44:e1:2b:3c:ba:06:e7:74:74:4f:db:34:
         ae:a2:57:61:3a:ec:db:ab:9e:14:6b:cf:04:a2:01:a6:01:f5:
         e4:9f:4b:42:c0:7c:a5:29:27:54:10:d9:63:7d:93:c8:e6:f3:
         b8:4d:7a:f9:34:9b:bd:3e:36:ff:e2:cd:1e:10:25:9a:78:82:
         9f:6f:ec:55:1d:46:6e:cd:40:31:a4:11:8b:5b:47:66:12:cc:
         58:4d:0d:29:b9:e5:93:c9:1c:cc:34:23:1a:af:bd:e5:ec:dc:
         e3:5b:5f:ba:34:a5:16:88:a3:74:3d:f3:dc:5e:3a:20:35:09:
         35:76:f5:19:02:29:5d:5a:b3:af:0d:6e:f8:50:ce:cf:d2:48:
         b7:18:8e:c2:1f:19:ee:07:10:1b:27:80:af:f9:ba:73:88:a0:
         d0:fd:fe:79:8f:8c:8c:d8:55:f4:25:98:1a:42:a7:ed:4d:3c:
         84:d1:8a:fa:1d:f7:b2:72:ef:7e:68:81:72:02:a5:49:ec:23:
         6b:b0:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:33:00 2025 by rpki-client