This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa
File:                     8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa (raw, json)
Hash identifier:          TSZLJbIBS18H0aT3CDCZfLCpOxc8Xab32gvavQmG+7I=
Subject key identifier:   B2:03:8C:80:D3:3D:D9:12:9B:68:E2:12:C9:04:31:20:BC:6F:BE:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584C45A70436DDC33642178AB880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     7155
IP address blocks:        172.242.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a7:04:36:dd:c3:36:42:17:8a:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=f0517c70-f264-4077-8110-e5da892950a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:74:c7:ad:6b:d5:98:3c:0d:3b:6f:1c:e6:
                    68:e8:49:49:35:90:cb:98:77:55:59:a5:83:f9:82:
                    40:49:42:8c:f5:92:6c:4e:87:c7:97:b8:5c:44:1a:
                    bf:3f:2c:48:de:6c:4d:2c:34:d9:f4:98:4e:04:bb:
                    b2:b8:1e:ba:6c:c0:84:8a:b3:08:cb:1f:50:ef:ac:
                    b9:ef:bd:79:f6:06:8a:04:3f:14:8d:74:3f:8b:11:
                    62:40:75:aa:34:e5:8d:60:ae:ff:89:63:f7:0a:a1:
                    bc:7e:a5:9a:c6:a4:be:cd:c3:20:d5:a6:13:cb:31:
                    8d:68:08:99:61:f1:7d:42:d9:14:31:50:2a:2c:e1:
                    d9:9e:10:36:bf:c6:2e:7d:62:36:ff:7a:5b:7e:a9:
                    dc:c0:8a:b8:d7:7a:24:ca:23:7f:96:f4:5f:f5:dd:
                    3b:db:83:9b:ac:cb:36:15:ae:2c:4f:77:17:42:6d:
                    af:d0:cc:83:f4:f1:f2:6d:e9:f0:ad:56:70:eb:9a:
                    fc:5d:61:51:22:11:96:b5:2d:bf:21:77:4c:8c:b1:
                    7e:54:d5:a0:f1:9f:0b:93:03:15:75:46:9a:ac:66:
                    a2:03:11:74:4b:ea:d5:89:96:dd:f7:7c:f0:48:fd:
                    9f:b5:5f:16:b1:e0:ac:55:63:89:56:e4:02:c0:61:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:03:8C:80:D3:3D:D9:12:9B:68:E2:12:C9:04:31:20:BC:6F:BE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:09:b4:78:52:d6:ec:ab:19:33:10:30:8f:94:f7:d9:89:
         9e:e2:21:14:11:b4:fb:8a:a0:cb:d1:be:e2:ae:65:c5:c1:1d:
         1c:bf:67:28:b4:21:ea:9e:15:e7:b8:80:15:b3:7a:57:c8:37:
         95:33:49:49:8c:f8:2a:8b:ae:e1:ac:36:9f:db:5f:f3:47:c6:
         51:03:93:90:0a:da:1f:06:91:3a:98:42:fe:09:67:57:b2:b3:
         75:42:75:5c:f2:22:6f:24:e7:d3:a6:32:1e:3f:00:c8:7c:62:
         af:66:4a:62:27:72:55:eb:fa:be:fe:53:8a:1a:aa:2e:01:f7:
         98:2d:3f:7b:32:6e:c3:29:ba:8e:31:36:2d:06:3b:d1:07:8f:
         51:07:17:57:16:84:ae:06:b7:db:8e:ce:15:5e:83:34:44:7a:
         91:6c:a3:7f:25:6b:99:4b:f9:a4:22:f7:2c:e8:a9:ac:89:a9:
         8c:97:3a:28:01:d5:d3:ac:91:07:ab:a1:e9:e3:0a:2d:7e:9c:
         37:03:b0:29:43:1a:69:9d:81:7f:9d:66:79:ce:6b:02:87:f1:
         7e:0e:79:10:04:67:25:b1:58:4b:6d:9d:e9:d1:df:d5:fd:4a:
         f5:8c:db:72:df:09:85:ca:9c:af:13:c8:64:6c:83:c4:ee:cd:
         db:64:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:07:48 2025 by rpki-client