This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa
File:                     8238436f-d3b9-38c8-99b7-34251e69ac0a.roa (raw, json)
Hash identifier:          eUtC5oU9d9k/3ba+kSZllzjhwSlw5+QCmQ9ShAew4/g=
Subject key identifier:   15:12:8F:3D:FF:AD:C1:7E:40:13:FC:B1:09:B4:5E:06:36:7C:64:20
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584C30B63DE5A90925FEE36D3700
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa
Signing time:             Mon 15 Dec 2025 02:00:31 +0000
ROA not before:           Mon 15 Dec 2025 02:00:31 +0000
ROA not after:            Sun 15 Mar 2026 01:00:31 +0000
asID:                     15164
IP address blocks:        199.200.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:30:b6:3d:e5:a9:09:25:fe:e3:6d:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Dec 15 02:00:31 2025 GMT
            Not After : Mar 15 01:00:31 2026 GMT
        Subject: CN=1e839ec7-2678-412a-966a-c83fa31c86f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:16:90:9c:46:bf:79:87:13:99:04:3c:94:
                    d3:7a:63:8b:67:da:94:10:54:79:cc:31:56:78:71:
                    4e:7f:31:4e:33:76:52:79:8c:61:59:be:0e:26:de:
                    c9:71:e3:c5:17:4d:ac:67:be:34:d6:54:c9:74:bf:
                    67:22:c6:f1:d2:62:4f:75:ee:fa:c3:01:92:89:7b:
                    b2:ed:cd:93:cc:85:7c:d7:12:e4:57:8e:bc:3a:3a:
                    b4:09:35:2b:33:bb:cd:59:3c:bb:68:73:a6:89:04:
                    ac:93:ae:67:db:01:44:4b:d0:4d:36:93:d7:88:da:
                    7b:56:5b:35:a5:be:b8:5d:94:27:63:af:6d:91:06:
                    55:61:aa:8c:c9:09:57:0a:57:90:2a:fd:c3:7f:0a:
                    37:9e:c7:57:38:76:9a:96:89:9b:cc:29:c0:92:e0:
                    eb:71:80:43:a8:d8:5e:41:bf:48:88:70:40:d2:6e:
                    60:29:56:b2:1e:59:54:37:46:c8:fb:87:f1:ef:f3:
                    1f:3d:a2:b0:df:d3:61:93:72:6e:d5:db:dd:c1:de:
                    40:bb:b5:69:dd:ef:03:4b:11:3e:39:ef:cd:68:e0:
                    65:3e:1f:db:4a:7e:aa:d1:d3:b3:1c:8d:2b:07:ed:
                    e0:c6:e8:d5:25:da:d6:48:a0:cd:30:f6:bd:43:5b:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:12:8F:3D:FF:AD:C1:7E:40:13:FC:B1:09:B4:5E:06:36:7C:64:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:f7:8c:ab:3d:ce:41:7f:ca:01:55:8f:3a:01:51:04:de:ef:
         34:16:5b:1a:cc:01:48:33:83:4f:d6:6f:c6:15:02:81:83:0e:
         5e:0a:1b:2c:5f:68:08:5f:75:bf:87:06:b1:9e:a0:30:13:fb:
         33:33:9d:0a:17:47:4a:d3:1c:ce:d5:fb:e0:db:ec:d2:68:ec:
         eb:9e:12:e0:f6:9c:42:a6:af:5f:28:2a:10:d0:29:6a:5e:9a:
         15:3b:2a:86:1e:60:7e:70:0d:86:3a:17:59:76:c8:4c:80:3a:
         49:8a:d5:86:77:ab:93:fc:b6:38:78:1b:29:2c:f1:f3:a8:4f:
         42:c4:44:64:e0:26:fb:dd:27:16:1f:b2:65:de:94:6f:32:c5:
         e4:a1:6f:78:74:74:52:ec:21:3f:b5:4b:9e:27:62:0f:80:49:
         a5:04:af:d8:3c:7b:97:d8:c6:b2:97:1f:65:d7:fe:5a:7a:9a:
         ce:92:2f:36:87:0e:e7:c4:85:ae:3d:dc:f4:96:45:ad:a8:76:
         8d:5b:6b:e0:72:b6:eb:a3:a7:5a:ea:13:3a:4a:63:91:d2:2e:
         72:54:57:10:b0:66:82:d4:b5:26:dd:ac:9d:7b:c1:ef:6c:af:
         70:53:19:45:58:82:b4:1e:98:ba:c1:3b:14:1e:9c:99:2e:57:
         fd:ff:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:47:30 2025 by rpki-client