This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa
File:                     ff45faf5-56ca-3c45-8e73-885c0701be83.roa (raw, json)
Hash identifier:          EClLSjd+G728lolfF5fgWOGTUhs2JxP/HQeQ1UKCXds=
Subject key identifier:   2B:C1:EF:E5:1B:CF:B4:27:09:A0:4A:DD:98:10:EE:28:98:87:45:70
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584C3BE141B728AF3CA7EB7D2E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa
Signing time:             Fri 19 Dec 2025 02:00:31 +0000
ROA not before:           Fri 19 Dec 2025 02:00:31 +0000
ROA not after:            Thu 19 Mar 2026 01:00:31 +0000
asID:                     397227
IP address blocks:        156.154.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3b:e1:41:b7:28:af:3c:a7:eb:7d:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 19 02:00:31 2025 GMT
            Not After : Mar 19 01:00:31 2026 GMT
        Subject: CN=6a3f937c-d689-4a74-811d-2c7d7c7ec96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:58:ae:00:d3:a2:de:0a:39:84:a3:a9:15:
                    f8:65:07:32:0d:5e:25:f6:ec:65:ce:1b:2f:f2:6f:
                    8a:a1:ee:80:58:56:6f:ac:02:0f:61:dd:db:8c:2f:
                    8f:72:60:b5:ee:fe:27:da:95:fa:f3:f0:a7:59:d5:
                    9d:a6:05:93:4b:93:c3:4d:ac:d7:af:8b:6a:c1:84:
                    b0:13:44:75:53:b4:89:f8:3c:a5:7c:e2:d4:cf:a2:
                    4f:db:90:68:c5:e7:23:6d:81:6f:01:12:99:af:69:
                    8f:a0:a7:6b:a4:bc:0c:04:73:8c:59:67:f5:7e:f8:
                    01:ec:d1:e1:93:89:dd:99:aa:68:cb:80:da:63:ba:
                    5a:51:bd:7b:ab:fa:81:fb:92:46:71:d6:2a:97:1d:
                    18:ab:ae:ad:b8:a6:f6:53:43:02:e2:b7:b0:fa:36:
                    52:7b:f8:2f:6e:af:d1:d7:0a:05:c3:80:36:38:1b:
                    ce:1a:68:2c:09:2f:f4:94:b3:bc:5f:07:39:13:73:
                    82:82:42:4f:fa:13:e0:f0:db:e6:f0:b6:72:47:3c:
                    f7:c6:d3:35:e4:95:1a:2e:77:2c:70:50:80:c0:c8:
                    02:5f:79:08:d6:69:89:8e:24:c4:b2:4f:9b:74:fa:
                    44:28:12:b1:37:2f:bc:a7:cd:ca:22:d7:39:55:84:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:EF:E5:1B:CF:B4:27:09:A0:4A:DD:98:10:EE:28:98:87:45:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a6:cf:24:80:c3:43:3f:a4:10:02:5f:72:ce:bf:10:36:3d:
         f0:27:aa:b9:e1:a4:ec:31:b8:56:61:84:38:3f:91:72:6b:8c:
         5f:ea:e9:e5:dc:c8:c0:ef:36:76:9c:de:8c:04:82:f8:47:dc:
         17:86:32:d6:a0:43:c2:b3:0d:b9:03:ca:29:ef:5d:8d:4d:51:
         6f:96:95:ca:d6:98:80:e2:af:b8:06:cc:4d:2b:f4:1e:4c:ba:
         70:01:37:31:e5:7f:bb:20:a4:92:eb:d8:47:74:e6:cb:41:39:
         29:43:80:5f:a2:92:0c:6f:4b:26:93:44:b0:e6:59:32:2c:94:
         9e:4d:d1:17:9d:eb:a1:af:47:65:b8:9b:a1:ca:0c:f0:dd:4e:
         36:e5:eb:b0:92:4b:e3:0e:ae:1f:25:e6:b0:4f:45:36:13:98:
         85:e4:26:c4:77:d6:c7:0a:58:32:5c:1a:ce:59:54:b4:e2:64:
         4b:d1:b7:56:0e:a8:0e:d4:7c:80:57:af:94:bb:90:ed:76:d9:
         d6:87:2a:77:eb:d2:a3:c5:3d:b0:4d:ff:17:49:19:64:d7:5f:
         95:62:ca:1f:b9:f0:ae:67:3f:1f:a0:aa:c8:b4:1f:27:41:43:
         38:24:2e:68:95:64:ec:0b:23:83:61:83:12:49:90:c1:da:3c:
         2b:a0:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:12:48 2025 by rpki-client