This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa
File:                     aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa (raw, json)
Hash identifier:          SA2FyYxtVCuhlDcGNwYh22yRJfyHpWYP229esc8lDzM=
Subject key identifier:   D5:A7:F9:D6:98:1B:40:43:9F:8B:74:55:36:90:39:26:05:65:67:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C1E92905BF6833BB4337EEA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa
Signing time:             Mon 08 Dec 2025 14:00:38 +0000
ROA not before:           Mon 08 Dec 2025 14:00:38 +0000
ROA not after:            Sun 08 Mar 2026 13:00:38 +0000
asID:                     22909
IP address blocks:        71.228.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1e:92:90:5b:f6:83:3b:b4:33:7e:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  8 14:00:38 2025 GMT
            Not After : Mar  8 13:00:38 2026 GMT
        Subject: CN=57e52df3-b932-4e21-bedc-e107e7a5780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:54:39:69:54:3d:a0:1e:0f:2d:1a:41:c9:0d:
                    ee:03:d7:87:d9:8a:3c:5e:99:79:e3:56:36:27:ee:
                    fa:0d:78:17:fc:3b:a6:8a:f1:e0:67:bf:75:30:fe:
                    3a:e5:f0:63:0d:cb:99:8d:dc:e3:6d:67:67:fd:35:
                    d6:84:51:ea:a6:a0:bb:51:9c:b9:48:e2:cd:88:1f:
                    65:ed:6c:05:2b:78:1f:24:8c:47:37:68:26:17:f2:
                    a6:00:bb:56:8d:b1:96:45:d6:a7:35:fc:d8:f4:9c:
                    b6:a4:0e:57:48:33:11:04:76:36:ee:ae:ef:55:25:
                    b7:4a:d1:9b:3b:2f:62:aa:2e:9d:0d:b1:ea:d7:b8:
                    aa:b1:91:6b:3d:24:23:b9:70:db:97:86:3d:29:5f:
                    e2:ed:21:ff:4f:de:42:2f:46:f4:a7:a2:30:b0:e7:
                    5a:79:a6:5a:d5:e4:65:15:da:d0:73:fd:b6:20:80:
                    b0:7f:fa:a9:a1:92:85:f5:d8:97:6a:43:71:be:a6:
                    41:48:a3:78:74:c1:ad:51:16:3d:c5:f2:7c:b2:08:
                    08:23:00:b3:78:a1:9b:ce:71:30:ce:85:d5:fd:fe:
                    bd:d7:16:04:19:53:00:8b:8c:fb:1e:e2:c8:cf:ba:
                    2e:56:e4:93:52:80:40:ee:48:27:a2:ab:c0:17:ac:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A7:F9:D6:98:1B:40:43:9F:8B:74:55:36:90:39:26:05:65:67:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:9a:bd:f5:38:5e:07:63:78:eb:97:25:0d:b6:1d:58:21:54:
         0a:bc:12:6e:45:7b:05:35:b4:93:a3:f9:71:5e:01:50:47:9f:
         29:d3:3d:78:4b:e4:5e:79:75:8f:05:20:42:91:a6:ca:59:82:
         b1:8b:85:7e:cd:d4:7b:b7:e1:e0:87:a2:21:3f:60:ae:f8:0a:
         b0:d8:81:0a:97:99:32:79:6f:ea:ed:4d:9d:4a:36:6c:92:b1:
         10:71:2e:43:28:f9:9c:e6:d8:38:1a:8e:c8:6c:2e:b7:59:9c:
         c3:96:b9:3e:58:9f:cf:ec:81:37:e3:b3:b1:31:d9:18:32:b6:
         bc:73:52:65:b5:b2:9f:ba:60:bc:f2:0c:27:cd:14:19:e7:89:
         d9:e2:62:94:e1:cf:d9:aa:69:6e:81:b6:87:ba:f8:f1:fd:5a:
         8a:9e:64:d5:15:48:3c:47:8b:d4:37:fd:34:22:03:1f:c1:84:
         2f:bf:88:9f:73:a9:9c:f5:2b:22:3d:45:4e:ba:55:91:94:96:
         61:6f:37:5e:85:91:12:84:a2:3b:e3:5e:88:c1:bc:f6:84:70:
         50:90:52:d2:b0:8f:6e:f4:e7:fb:71:5d:89:65:ad:4f:56:47:
         72:64:d3:e1:b0:b5:43:a0:91:eb:f0:ce:f4:3a:13:0f:1a:1b:
         59:52:21:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:24:44 2025 by rpki-client