This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa
File:                     a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa (raw, json)
Hash identifier:          /KL1Hi2lCfvTOKDB0U8PsMDYLbjftirovI3o/zyXvFU=
Subject key identifier:   35:F0:11:FD:E9:0D:73:5E:95:3A:A2:8C:28:03:84:CB:29:98:D8:B4
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584C364BAB9144D79A36167F7400
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa
Signing time:             Wed 17 Dec 2025 02:00:31 +0000
ROA not before:           Wed 17 Dec 2025 02:00:31 +0000
ROA not after:            Tue 17 Mar 2026 01:00:31 +0000
asID:                     63201
IP address blocks:        161.38.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:36:4b:ab:91:44:d7:9a:36:16:7f:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Dec 17 02:00:31 2025 GMT
            Not After : Mar 17 01:00:31 2026 GMT
        Subject: CN=96e0fa30-9770-4b01-8982-7f2057618ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:c6:91:c8:8f:b5:30:8d:93:0b:9b:27:ff:
                    e4:a2:7a:c5:f9:e6:45:a3:5a:ed:2d:41:0b:f1:84:
                    18:18:4d:1a:48:2d:a2:b3:20:32:84:57:19:c7:d6:
                    6e:90:e5:14:ff:04:89:2b:d9:6f:c2:53:3f:bf:79:
                    20:c6:b6:f2:39:fa:d5:be:3d:91:68:79:46:b3:00:
                    98:b7:5c:54:6a:09:32:5c:2b:c9:52:c1:ad:e0:5e:
                    7b:79:04:90:d2:75:0d:5f:87:66:37:4d:e4:6f:bf:
                    d9:37:e9:41:bd:ae:1e:a1:d9:65:95:6f:52:b5:b5:
                    64:90:19:f4:64:53:26:13:bb:70:24:50:43:11:2c:
                    96:3a:d0:0e:d1:dd:45:58:5a:dc:30:2c:8e:6a:0a:
                    af:3b:cc:29:6b:8f:8b:3c:70:25:be:66:05:bb:ff:
                    8e:c4:1c:b3:0a:9e:c3:c5:91:38:43:dd:75:9a:ac:
                    be:d0:5d:7c:b3:a9:8f:f7:83:c9:48:2e:06:b9:a7:
                    cf:54:22:36:03:85:cc:19:88:56:6f:3d:e4:5b:e7:
                    5b:40:6b:79:35:54:ed:83:12:8c:11:81:16:96:de:
                    2e:3d:06:9a:ea:cd:df:55:c2:e8:d8:a4:44:6e:86:
                    2d:42:03:f4:74:54:c1:c7:01:28:0a:ef:27:40:aa:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F0:11:FD:E9:0D:73:5E:95:3A:A2:8C:28:03:84:CB:29:98:D8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d2:6c:8a:b9:b9:80:70:48:a5:21:ac:49:d5:f9:47:fc:68:
         05:44:b2:1b:a4:4a:69:5f:2c:86:c9:5d:2e:93:1a:2d:05:f1:
         9b:0e:96:3f:9c:be:96:b4:78:65:11:a9:94:15:03:94:4f:f4:
         58:57:95:d2:47:dd:1e:af:32:db:af:b5:b0:64:a6:86:e5:2b:
         41:16:c5:0c:fd:1c:f6:5e:f7:37:c2:eb:10:3c:09:a4:f7:23:
         0c:c1:29:4c:36:98:7a:aa:90:1a:18:7a:46:8a:d1:b1:86:3f:
         88:fd:a1:ef:bc:66:47:bb:55:d0:45:cf:76:c2:c3:ec:e7:f0:
         97:99:68:40:76:5a:dc:84:28:8a:e3:84:87:05:72:1c:ad:35:
         5c:6b:c4:17:30:58:cf:6c:c2:a2:c2:2d:d3:10:77:d1:63:38:
         f3:57:62:fe:c5:e5:d8:d1:cf:8e:cd:26:44:3b:72:1b:e1:4f:
         f2:cf:42:68:d6:09:e6:01:de:f0:51:79:c3:86:7c:54:93:54:
         8c:90:96:d3:ff:88:b1:43:1d:bf:52:6f:7d:0e:4b:24:c9:f5:
         ff:f8:2f:bc:ce:fc:7e:ec:b3:25:af:e9:f9:ff:00:43:ce:90:
         c9:4a:ba:5e:7b:71:09:ee:78:14:6b:12:11:5d:eb:7b:c9:31:
         59:55:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:29:39 2025 by rpki-client