This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f034a254-934f-3274-9970-4bf0cd601116.roa
File:                     f034a254-934f-3274-9970-4bf0cd601116.roa (raw, json)
Hash identifier:          XH5KQEdIqvSoNSj6Sd3BLvpvBye9yUHZLwqDka86yLk=
Subject key identifier:   9B:5B:F7:9D:40:BE:AF:14:B6:F3:C0:64:1F:12:A7:C5:68:BF:97:DA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584C45A6BAAAA15D05E4B61BC200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f034a254-934f-3274-9970-4bf0cd601116.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     7155
IP address blocks:        70.41.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a6:ba:aa:a1:5d:05:e4:b6:1b:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=47be3460-28fa-4b09-be9e-b46289428443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7e:ac:a6:47:5c:8c:6e:14:8c:a1:29:71:a3:
                    23:c7:7e:60:cf:8e:14:53:9c:5c:ab:dd:ae:02:fa:
                    e0:3a:29:4a:f6:21:ab:49:dd:27:ef:74:81:d4:f1:
                    7c:8a:e1:5c:10:55:8b:4c:7e:8c:c4:c7:d1:a7:d0:
                    f6:3f:49:e6:d3:c9:10:ad:2b:39:2f:f0:07:97:6a:
                    46:41:d4:bb:29:44:9a:67:3c:41:82:55:59:46:86:
                    3f:f6:a8:c3:d1:db:95:32:8b:50:8e:b2:04:05:76:
                    cd:07:93:c9:47:35:7b:5e:29:56:76:e3:5b:43:82:
                    bf:88:8a:73:37:dd:06:1b:20:29:d3:0d:b9:6e:63:
                    9b:c4:1c:07:3a:44:7a:e2:5a:1a:48:15:8b:1e:79:
                    48:3d:26:a9:c4:ae:5a:7a:bc:f5:8c:ae:07:da:54:
                    94:fd:4e:d9:01:ec:46:b3:9a:9e:69:a3:aa:5d:9b:
                    76:78:e1:96:e1:6a:0d:fa:c5:fb:58:1f:61:bf:75:
                    7f:b8:88:54:ce:a0:bb:86:15:9d:49:90:d3:1b:39:
                    a9:16:8a:9c:85:20:0d:ff:77:48:46:53:59:1a:e6:
                    05:8e:0f:30:f0:84:d5:85:ec:de:2a:1f:0d:6c:d4:
                    2a:89:35:80:32:31:c7:b6:13:53:24:15:44:22:e0:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5B:F7:9D:40:BE:AF:14:B6:F3:C0:64:1F:12:A7:C5:68:BF:97:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f034a254-934f-3274-9970-4bf0cd601116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:a5:43:bf:de:44:74:1f:be:61:4f:4c:2b:48:52:1b:9b:
         4a:c2:02:1e:5b:af:e9:7e:ce:c2:12:6e:a2:e9:98:55:89:68:
         b2:14:1a:df:d7:75:3e:81:0f:03:9a:67:3f:6a:9e:49:05:12:
         16:19:cf:a1:1a:4e:aa:5a:84:ef:74:41:ee:0e:90:2e:61:3a:
         02:05:5c:41:3c:b3:47:a2:d8:af:95:a1:bf:fb:e6:d6:0c:15:
         59:5a:a2:97:d4:71:de:e1:04:69:9e:90:bf:29:50:3e:68:91:
         27:80:20:bb:fa:d4:d4:d9:64:7b:5f:25:f0:81:92:46:18:db:
         a7:2a:dc:15:9e:10:b3:00:70:39:48:30:bf:6c:75:18:99:4b:
         99:90:8f:69:2b:28:59:20:9d:f9:a6:fe:11:dd:80:39:f3:c1:
         b2:e7:c9:cd:3b:f8:21:1b:d1:83:4f:f6:b5:d8:d6:9c:79:1f:
         c8:f1:2b:60:8f:ea:99:59:3b:ef:c8:12:18:4c:ba:51:c4:df:
         20:0c:a9:1f:c6:d2:b5:78:a1:7d:61:0a:59:18:61:f3:98:9b:
         e4:93:d7:87:f9:79:ab:84:83:cc:8b:86:d7:df:37:38:8d:2e:
         05:51:61:ef:11:2f:fa:0c:82:70:6d:66:a3:ca:b9:34:42:e6:
         22:c4:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:23:45 2025 by rpki-client