This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa
File:                     76b9fae5-463a-3488-ad50-00b232211f44.roa (raw, json)
Hash identifier:          BJxK67lNsAcWYJrJfJusdxhC4alxnNRHfn2gsTF42Ek=
Subject key identifier:   64:AF:BF:52:DF:24:EC:C1:21:BF:10:50:4A:5A:1B:0D:3C:C2:C4:91
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C45A6678AF26D27D6915F4540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        173.28.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a6:67:8a:f2:6d:27:d6:91:5f:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=578c627a-dcd5-4632-81f1-526333ff14a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:12:30:74:41:87:74:04:7f:03:e8:c0:8d:
                    a7:57:6a:39:3a:92:ca:9a:ce:1c:2e:aa:81:cd:ba:
                    55:c3:78:d4:19:b3:34:7a:cb:dc:52:f8:14:a3:8e:
                    86:4c:b9:c6:30:ec:4a:a5:42:15:09:5f:b5:b7:cb:
                    3e:e2:66:d1:0b:ff:6a:b4:ab:ec:4b:97:e4:14:86:
                    b8:47:de:6b:f4:73:9b:c9:70:48:94:de:5c:cc:f2:
                    72:06:1b:04:a7:39:00:25:10:fa:9b:12:6b:e1:86:
                    49:56:14:c6:3a:f7:d2:57:2b:ee:55:1b:0c:7b:41:
                    ed:95:95:db:6a:6d:7a:90:8b:13:44:b8:b7:bb:b7:
                    28:82:56:f6:b6:24:2b:46:42:96:7f:36:ca:f5:20:
                    e3:2e:32:2e:79:21:25:f3:33:f4:17:af:61:d6:10:
                    20:e8:a1:30:6c:6f:29:b9:38:eb:39:48:3e:8c:d2:
                    33:ab:db:98:99:fe:a5:f7:10:f4:89:f4:e1:7e:38:
                    40:ab:cc:58:92:df:11:5a:3f:35:9b:f9:25:77:b1:
                    08:0c:08:26:43:f1:68:1a:46:e8:55:90:48:85:15:
                    4c:ca:a4:25:c1:4a:85:c6:a1:d5:c3:72:12:9b:2e:
                    a1:88:f1:35:41:82:a3:b2:ca:5f:0c:73:2e:b9:99:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AF:BF:52:DF:24:EC:C1:21:BF:10:50:4A:5A:1B:0D:3C:C2:C4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:ce:15:6d:fe:95:3f:66:f1:d5:f7:42:30:27:15:75:a7:
         a6:ac:88:a3:7f:fa:88:64:2a:14:a4:e7:9c:1a:92:90:c0:5c:
         59:6b:db:ae:9b:e0:01:10:02:f9:85:2c:64:dd:f8:08:53:f9:
         61:d2:7a:4a:29:ec:fe:fa:d0:03:03:0b:83:a6:9b:81:d1:23:
         ca:07:79:8f:ce:08:16:cd:ee:a2:0c:00:7d:18:0e:dd:c0:8e:
         6c:f5:f3:79:10:29:c9:47:78:f3:4b:2d:56:90:92:65:b5:04:
         ab:27:8a:b3:fd:aa:64:59:a4:e2:1a:2e:88:79:34:8c:a6:8f:
         80:5a:3d:b9:86:67:90:6d:fe:52:a9:f8:be:97:17:7d:8f:c6:
         a1:81:88:93:06:08:00:12:f5:42:b5:f8:21:d5:35:42:71:00:
         34:22:d3:3c:d0:68:c1:16:7b:06:81:f6:63:88:49:a4:56:d0:
         7d:20:7f:07:db:46:40:27:b0:57:81:4f:8c:b9:d2:8b:aa:0f:
         64:ae:12:d8:f7:6b:29:6f:04:41:22:4b:ac:de:07:60:8e:00:
         61:21:79:1a:00:40:8f:ff:74:e5:06:44:ce:a3:2e:06:fa:7a:
         94:5d:e1:80:a4:f0:49:16:fc:92:7d:2a:ec:09:fe:3f:f9:fc:
         83:14:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:50:24 2025 by rpki-client