This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa368f63-d10b-3680-b068-74158cb86071.roa
File:                     aa368f63-d10b-3680-b068-74158cb86071.roa (raw, json)
Hash identifier:          nBhhgLNNOBqE+ubhVA7TtQN0LTCEvekkxIBFw+jqCW8=
Subject key identifier:   02:2A:A4:2D:94:D4:90:46:97:56:16:9C:FD:0B:18:90:4A:ED:1D:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C1E9291BCDCE593CDD1077F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa368f63-d10b-3680-b068-74158cb86071.roa
Signing time:             Mon 08 Dec 2025 14:00:38 +0000
ROA not before:           Mon 08 Dec 2025 14:00:38 +0000
ROA not after:            Sun 08 Mar 2026 13:00:38 +0000
asID:                     22909
IP address blocks:        71.228.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1e:92:91:bc:dc:e5:93:cd:d1:07:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  8 14:00:38 2025 GMT
            Not After : Mar  8 13:00:38 2026 GMT
        Subject: CN=5b71c281-efec-4366-a55d-86406fc94e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:67:e2:ac:b9:dc:36:2e:91:83:d3:26:42:
                    4a:47:e3:f5:72:71:47:30:11:c6:f3:79:b3:4b:ac:
                    f9:17:17:a2:34:c2:1e:c0:11:24:85:5f:88:aa:74:
                    25:ff:71:f3:5d:b7:47:08:a0:49:44:10:f2:39:57:
                    f4:24:0c:06:c4:60:61:56:20:46:20:3a:d9:d9:26:
                    d8:47:71:5d:39:33:a1:dc:0c:10:a5:6a:70:1a:11:
                    47:d0:18:5f:bf:16:e9:93:49:21:fd:0d:b2:39:5d:
                    f8:28:ff:12:4f:86:e6:ef:16:1d:8d:e8:fd:af:df:
                    2e:2f:af:47:00:85:72:70:03:81:e0:52:3e:a4:3f:
                    1e:7a:dd:2d:3e:14:63:f8:25:0f:f1:47:41:80:44:
                    0a:0d:01:82:eb:fe:85:03:3d:15:50:d2:46:ef:27:
                    84:3a:e3:32:eb:35:19:06:b6:65:6a:73:c7:d9:c7:
                    d8:c5:f1:38:3c:bf:33:2c:22:e5:fb:f4:6e:d2:97:
                    e2:c1:89:a5:24:2c:85:7f:f5:d5:6c:dc:b4:32:d1:
                    67:94:1e:98:39:2a:92:e4:43:12:46:1b:91:77:0b:
                    f6:5c:9c:44:e8:4c:55:26:c2:95:9d:fa:21:22:9a:
                    9b:65:59:0a:19:50:c7:2a:3b:3b:3b:77:35:90:01:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2A:A4:2D:94:D4:90:46:97:56:16:9C:FD:0B:18:90:4A:ED:1D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa368f63-d10b-3680-b068-74158cb86071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:18:5a:ef:97:2c:17:af:8f:67:f1:54:2b:7b:dd:a2:eb:26:
         d9:e2:e5:91:30:12:3e:96:ce:f6:57:e9:eb:a2:a4:a6:2d:ad:
         7a:98:00:f6:9a:49:d5:97:c5:2c:99:bd:64:1e:36:20:5b:65:
         8c:4c:b2:60:58:23:63:d7:44:0c:c5:a6:6f:18:55:ea:85:ec:
         3c:4f:86:af:3a:1c:5e:c2:a0:3f:bb:06:e9:f2:43:22:a6:37:
         6a:c6:24:b5:fc:8d:76:03:71:7d:b4:20:3e:00:49:6f:6e:13:
         ee:ab:d6:fd:37:5f:66:5f:68:d9:8e:95:88:36:ef:10:16:f9:
         d4:63:92:77:fb:c9:f4:3c:e9:85:4d:72:7a:b3:61:fa:b9:2e:
         92:8d:53:55:1d:f7:9a:61:1e:55:b6:46:81:90:28:29:e1:44:
         07:4f:2e:73:ad:78:b0:31:59:21:8c:37:9e:50:81:bf:96:c3:
         bd:1c:30:db:42:20:d6:53:0e:2e:9b:b9:f4:59:e4:9c:97:85:
         f6:14:b1:2a:76:1b:6a:dd:2f:33:f8:18:27:38:bc:b9:0f:e2:
         6d:68:57:91:49:bf:dc:2c:05:5c:5b:9f:5a:53:55:74:05:4b:
         be:6f:ee:14:2f:0e:43:6f:fb:8d:ca:79:31:c9:0c:e5:46:2e:
         e2:e0:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:53:40 2025 by rpki-client