This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa
File:                     cf33a276-5802-3ecd-a59a-911aab6182e6.roa (raw, json)
Hash identifier:          que/mulQWRsaN7PamNBmsLH4NpkBNyJNpnhgYau64v4=
Subject key identifier:   D9:B5:05:72:C6:95:D0:ED:E2:3A:AC:54:5E:4E:C8:61:3D:7E:E8:55
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584C470BB91EFC553C8244C65480
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa
Signing time:             Tue 23 Dec 2025 02:00:31 +0000
ROA not before:           Tue 23 Dec 2025 02:00:31 +0000
ROA not after:            Mon 23 Mar 2026 01:00:31 +0000
asID:                     9009
IP address blocks:        198.145.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:0b:b9:1e:fc:55:3c:82:44:c6:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Dec 23 02:00:31 2025 GMT
            Not After : Mar 23 01:00:31 2026 GMT
        Subject: CN=ac0e8a2c-b7cb-403b-8bac-1674ac11238d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:ed:f7:8b:fe:7b:fa:6c:80:14:8b:26:0a:
                    67:9a:99:24:aa:67:91:a4:c6:4e:e1:a9:83:58:6e:
                    d2:55:57:60:0f:5c:73:ad:7b:d3:07:8f:b9:cd:be:
                    54:51:ce:e2:aa:26:b0:c8:d2:35:8e:d1:49:d0:49:
                    a9:c6:68:b6:4f:72:58:f2:f7:50:68:36:59:e8:33:
                    36:58:10:da:b3:cc:04:97:58:a3:e8:8b:f4:cc:10:
                    af:a6:64:67:09:be:51:02:e8:88:0f:bb:6d:f4:a4:
                    f1:85:8e:1a:88:2b:fa:4f:62:7e:ff:ce:2f:fb:32:
                    c4:e8:5b:32:89:9f:87:6d:4f:c1:fa:42:12:6f:fe:
                    99:d5:9f:fc:54:40:03:e8:ff:85:86:b9:61:ab:bb:
                    5a:1c:35:a2:d2:97:ec:f6:f2:a7:b1:cc:3a:38:05:
                    79:8c:63:01:78:14:6c:f5:1e:91:68:47:41:94:4f:
                    1f:46:fa:12:5c:3c:c4:ac:3e:b9:15:9f:b9:f7:5b:
                    ef:0f:fe:71:dc:db:3b:21:88:e1:a8:08:8f:10:a3:
                    7f:21:eb:57:f5:1d:f1:72:57:d1:4c:b3:51:34:9e:
                    e6:03:f6:da:de:c9:70:e8:fd:0d:8b:5b:c0:a5:82:
                    3a:a4:b4:7c:9a:aa:8d:22:ed:76:b2:96:d6:b4:70:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B5:05:72:C6:95:D0:ED:E2:3A:AC:54:5E:4E:C8:61:3D:7E:E8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/cf33a276-5802-3ecd-a59a-911aab6182e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:32:6b:85:43:a8:2e:8e:ec:e4:fc:5e:b5:84:40:f8:33:5f:
         d3:f6:1c:ad:f4:d8:44:ea:fa:98:c3:59:1b:0a:02:a2:1b:70:
         24:bb:d0:23:c0:65:ee:b6:7a:a9:a1:cd:ad:82:c3:11:ae:cc:
         9f:11:19:13:35:be:a3:a7:28:ca:a6:58:dc:54:99:8c:32:2f:
         9b:64:1a:3f:2d:ea:a1:ee:74:67:0e:1e:e8:44:ad:28:38:bb:
         51:e1:f5:7d:53:f5:44:65:87:23:df:ad:cf:e7:35:db:49:f2:
         57:0b:93:02:76:d0:3f:9d:f0:d5:60:4f:44:c3:25:8d:14:7a:
         a3:ae:81:15:32:f1:0e:86:c8:92:65:14:96:d1:af:ac:3f:63:
         a7:a6:d8:87:33:f6:5f:fa:cb:dc:f6:f2:39:ea:ad:86:b5:b9:
         cd:76:7b:1a:af:29:8d:09:46:c8:85:db:3b:92:a7:8d:22:ba:
         5f:77:ca:fa:8b:fa:af:22:b3:18:13:77:06:f3:90:53:d7:76:
         e0:e2:ab:63:3c:6e:4b:97:37:95:f8:7c:17:69:c8:27:de:83:
         f3:bc:d8:a5:2c:fc:9f:2e:9a:24:1f:e4:85:7d:dd:71:c5:15:
         1e:11:e7:c1:89:08:db:61:1b:5d:54:d7:60:63:b5:9b:ab:9d:
         69:09:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:39:20 2025 by rpki-client