This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa
File:                     cfed3926-df38-31bc-9681-6042bfbb2859.roa (raw, json)
Hash identifier:          ECqXwrYzJsVrmmN2HpTUE1hMF5KQPpO38oRo6EmPAgY=
Subject key identifier:   CC:4A:3E:F8:CA:E2:0B:2A:64:E2:D1:D3:B7:FD:57:D3:23:05:7F:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584C4B3BC67D5703BA6D7EDB5FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa
Signing time:             Wed 24 Dec 2025 14:00:40 +0000
ROA not before:           Wed 24 Dec 2025 14:00:40 +0000
ROA not after:            Tue 24 Mar 2026 13:00:40 +0000
asID:                     396543
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4b:3b:c6:7d:57:03:ba:6d:7e:db:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 24 14:00:40 2025 GMT
            Not After : Mar 24 13:00:40 2026 GMT
        Subject: CN=ada2be57-52a2-4c4f-ace6-db81ab2c43ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:ea:55:e4:0c:fb:e0:f9:83:a6:e8:ea:ed:
                    4b:9a:4b:9d:d1:8d:9a:41:01:95:22:28:6f:86:20:
                    21:f8:4b:2c:b6:72:36:ee:0a:31:ec:d4:fd:88:e0:
                    16:57:c2:a4:c2:36:c3:e3:df:84:90:33:52:45:6a:
                    85:22:40:7f:2b:00:8c:a5:8d:98:66:6e:0c:03:df:
                    cf:d9:3c:08:b8:db:7c:18:f3:99:d2:fd:99:f8:60:
                    f4:35:2b:23:96:8c:1a:27:dd:07:1b:cf:a1:0b:81:
                    49:b9:ce:8a:47:2d:e6:8b:94:3a:2a:c5:fa:5a:ad:
                    be:c4:01:05:00:a1:8e:89:35:c2:df:4d:fe:b2:7d:
                    88:e1:3c:70:11:54:db:e2:75:6c:15:6a:9b:05:01:
                    5f:65:84:7e:c3:47:19:8c:ab:3f:e4:ac:b0:cb:9e:
                    b3:18:5b:ff:bd:a3:b3:62:c0:07:e4:e7:3a:4a:a2:
                    8e:62:7f:1e:d2:b4:21:c2:88:bb:03:7e:05:e2:28:
                    23:db:22:a4:24:e1:c9:2d:b6:c7:96:61:47:a2:66:
                    7b:ec:1c:6f:9d:7a:8c:4f:0c:8e:8f:a7:9b:94:59:
                    41:9f:09:81:97:7b:1e:93:99:f3:dc:53:0d:30:d4:
                    90:04:93:73:72:3e:f6:93:f0:cd:63:30:60:0d:62:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4A:3E:F8:CA:E2:0B:2A:64:E2:D1:D3:B7:FD:57:D3:23:05:7F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:af:8a:6c:2e:f7:32:f0:ce:0c:8f:a0:0a:b9:43:f4:c7:c0:
         51:b6:2c:cc:61:3a:1e:73:b2:94:d9:1c:7b:a8:b0:ca:ac:f0:
         17:2a:e5:a6:db:4e:ba:b9:dc:7f:77:d3:c5:90:ea:75:92:4e:
         7f:14:55:cf:49:51:b9:81:3d:0b:a5:a1:73:66:54:5b:0e:86:
         6b:a0:77:4c:4e:c8:0f:7a:40:05:ed:42:65:3c:5c:e6:63:4a:
         de:0e:4f:ba:5d:a5:04:d5:03:d0:84:e0:49:2c:06:d5:1a:23:
         df:ff:30:55:fc:77:2d:3d:66:12:f6:e7:31:4c:75:8e:cf:94:
         11:49:db:d6:1f:cf:87:5d:78:68:32:c9:e3:7e:9d:fe:cc:c1:
         11:fe:f6:4a:7d:85:50:46:98:ea:39:7f:02:bd:02:67:b6:9d:
         e7:fe:27:56:7e:13:a0:22:b4:e3:9f:cf:48:71:97:9f:e4:a1:
         46:69:a8:d4:c7:d4:e5:8f:63:4d:79:fa:99:19:9a:f6:7a:3b:
         fb:23:ee:f9:f5:5d:b5:9d:21:72:62:b2:af:7d:f3:d4:64:25:
         31:21:89:5b:bc:26:41:35:ad:76:48:b8:54:8b:02:c6:f7:a4:
         ad:4b:11:f8:05:62:d3:b3:22:b5:e8:29:2b:7d:bf:0e:2e:36:
         3a:e6:1d:e8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExLO8Z9VwO6bX7bX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk
YWRhMmJlNTctNTJhMi00YzRmLWFjZTYtZGI4MWFiMmM0M2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisjqVeQM++D5g6bo6u1Lmkud0Y2aQQGVIihv
hiAh+EsstnI27gox7NT9iOAWV8KkwjbD49+EkDNSRWqFIkB/KwCMpY2YZm4MA9/P
2TwIuNt8GPOZ0v2Z+GD0NSsjlowaJ90HG8+hC4FJuc6KRy3mi5Q6KsX6Wq2+xAEF
AKGOiTXC303+sn2I4TxwEVTb4nVsFWqbBQFfZYR+w0cZjKs/5Kywy56zGFv/vaOz
YsAH5Oc6SqKOYn8e0rQhwoi7A34F4igj2yKkJOHJLbbHlmFHomZ77BxvnXqMTwyO
j6eblFlBnwmBl3sek5nz3FMNMNSQBJNzcj72k/DNYzBgDWKEoQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMxKPvjK4gsqZOLR07f9V9MjBX/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZlZDM5MjYtZGYzOC0z
MWJjLTk2ODEtNjA0MmJmYmIyODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBRr4psLvcy8M4Mj6AKuUP0x8BRtizMYToec7KU2Rx7qLDKrPAXKuWm
2066udx/d9PFkOp1kk5/FFXPSVG5gT0LpaFzZlRbDoZroHdMTsgPekAF7UJlPFzm
Y0reDk+6XaUE1QPQhOBJLAbVGiPf/zBV/HctPWYS9ucxTHWOz5QRSdvWH8+HXXho
Msnjfp3+zMER/vZKfYVQRpjqOX8CvQJntp3n/idWfhOgIrTjn89IcZef5KFGaajU
x9Tlj2NNefqZGZr2ejv7I+759V21nSFyYrKvffPUZCUxIYlbvCZBNa12SLhUiwLG
96StSxH4BWLTsyK16Ckrfb8OLjY65h3o
-----END CERTIFICATE-----
Generated at Mon Dec 29 14:55:57 2025 by rpki-client