This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa
File:                     9be939da-ddc1-31ed-811c-e2e734533c03.roa (raw, json)
Hash identifier:          U2TkhOijRWkninxx6vpQbPJ5bfg19+Zu3miVI1StAAc=
Subject key identifier:   51:A3:BC:AD:8C:5F:B9:C5:7A:AF:4C:71:5F:D2:86:26:95:EA:BE:87
Certificate issuer:       /CN=d2584a20-171d-406f-91e5-a70a19be13b8
Certificate serial:       010D0C9F4328584C1FF61EAFDDDCE78468D70780
Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa
Signing time:             Tue 09 Dec 2025 02:00:31 +0000
ROA not before:           Tue 09 Dec 2025 02:00:31 +0000
ROA not after:            Mon 09 Mar 2026 01:00:31 +0000
asID:                     18540
IP address blocks:        198.148.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1f:f6:1e:af:dd:dc:e7:84:68:d7:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8
        Validity
            Not Before: Dec  9 02:00:31 2025 GMT
            Not After : Mar  9 01:00:31 2026 GMT
        Subject: CN=5fb30dcc-717e-4962-a186-e3a4ffa2ebcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c3:6e:fa:18:51:1d:8b:32:db:cf:fe:86:10:
                    b1:33:5b:83:fe:f7:59:06:31:42:86:21:c0:41:f7:
                    d9:a0:ab:08:0b:00:6a:58:ea:bc:c4:32:b4:b9:0a:
                    be:c0:73:4e:40:f2:a7:70:ab:e9:80:4c:68:8f:ed:
                    16:4a:7e:b5:2e:63:72:55:7b:3d:cc:bb:e1:b0:dd:
                    a7:1b:24:df:4a:bd:b7:db:e5:4c:d0:80:ad:e3:0f:
                    1c:74:a5:48:6c:be:fa:d4:ec:97:ac:fd:21:e1:bb:
                    ef:22:b6:19:e4:ff:56:7c:37:d5:64:66:0d:bf:32:
                    67:f7:f0:70:5e:df:bc:aa:c2:75:23:89:55:28:0a:
                    45:b2:12:ca:72:ec:00:9a:6e:9b:1d:c8:6f:4d:a3:
                    16:91:65:6f:f8:31:bd:12:62:c8:56:01:9c:94:fc:
                    b0:c6:75:64:bd:fd:f1:80:21:13:11:dd:1f:c9:15:
                    7e:77:89:81:05:12:b3:71:15:79:f6:d1:64:f1:35:
                    8a:88:da:64:ce:09:26:c0:3f:5a:df:56:34:75:a8:
                    93:93:b6:dd:85:ce:21:c5:a3:6d:1b:cc:c3:81:bd:
                    c9:2c:4e:d5:92:d4:79:9f:98:42:65:dd:73:7c:ac:
                    b0:c1:1f:b5:d3:f1:a8:a6:c5:11:7f:42:2a:60:f8:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:BC:AD:8C:5F:B9:C5:7A:AF:4C:71:5F:D2:86:26:95:EA:BE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl

            X509v3 Authority Key Identifier:
                keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:33:7a:f7:61:cd:91:41:dd:4e:61:3c:e3:7f:f4:38:6f:
         7c:76:aa:e6:59:34:86:46:b3:8c:ba:5d:74:01:a8:ef:64:68:
         fe:80:b0:09:62:25:9d:2a:b6:b8:b4:9a:aa:86:45:04:bf:70:
         08:07:0e:15:34:67:82:3c:6d:40:f6:fb:6c:6e:b0:69:fc:23:
         5f:7b:a3:50:b0:8e:ee:f3:08:09:04:ee:be:aa:68:ac:72:dc:
         00:35:02:02:f4:bd:58:61:fd:bc:d5:3c:e3:cf:7c:40:ae:1d:
         91:0b:c2:7f:86:57:64:fe:08:70:5f:55:8e:43:40:ff:15:db:
         f6:ad:1d:ba:3b:41:31:1f:70:bb:f5:78:82:cc:79:ed:26:a1:
         a4:20:29:5d:54:01:34:75:28:31:9e:69:c2:3b:87:d6:62:c6:
         d9:b3:80:71:1e:43:3c:68:e2:c1:37:df:ed:4d:5b:77:c2:f1:
         94:c7:a4:9e:36:92:52:b0:bf:16:af:9f:d7:ff:11:13:f2:a7:
         4f:07:53:db:6a:34:66:3c:04:f1:8c:9a:a0:ae:fd:aa:66:ae:
         6d:a7:88:6c:e4:28:92:b6:bc:ec:3b:3d:4f:fd:7e:62:43:27:
         10:58:4c:68:a7:73:14:3b:88:b8:a5:75:2b:a0:8e:db:d1:ab:
         5d:47:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:22:43 2025 by rpki-client