This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa
File:                     3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa (raw, json)
Hash identifier:          XIX7mKtqyPVayPKiHdUbPCdgw5s/XCKHVwwDduFY5ZY=
Subject key identifier:   CF:C3:16:8B:70:BB:AF:AA:63:78:F5:EE:C9:9F:D4:55:C0:CE:46:D2
Certificate issuer:       /CN=0eb0be5e-7cff-4077-992b-f867365a59c5
Certificate serial:       010D0C9F4328584C2F50F337C405BC719D703140
Authority key identifier: 29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa
Signing time:             Sun 14 Dec 2025 14:00:39 +0000
ROA not before:           Sun 14 Dec 2025 14:00:39 +0000
ROA not after:            Sat 14 Mar 2026 13:00:39 +0000
asID:                     15753
IP address blocks:        129.230.252.0/23 maxlen: 24
                          129.230.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2f:50:f3:37:c4:05:bc:71:9d:70:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb0be5e-7cff-4077-992b-f867365a59c5
        Validity
            Not Before: Dec 14 14:00:39 2025 GMT
            Not After : Mar 14 13:00:39 2026 GMT
        Subject: CN=40c46195-b4d2-4ac2-8f15-115ffc71596f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:3a:aa:ac:60:39:dc:c2:08:5a:1c:f1:83:
                    e3:cc:e2:8b:62:ad:bb:61:e1:c6:64:00:e2:07:4e:
                    d4:47:3d:92:da:be:4f:71:af:5c:0a:e2:69:ab:77:
                    e6:29:d6:eb:67:12:7d:6a:7b:44:48:81:74:bd:67:
                    72:a9:40:ce:93:d3:13:e7:99:31:f4:57:b6:e4:1d:
                    0b:65:c9:05:04:f1:64:68:63:85:a5:59:82:a2:71:
                    15:81:ce:18:be:fa:79:dd:e4:33:a1:ec:4e:5c:c8:
                    00:3a:23:e4:b4:be:ae:4d:54:1e:c4:7c:87:d2:19:
                    be:b5:af:d4:7b:72:67:0a:34:1c:94:60:cb:c3:ac:
                    4e:ea:2a:0c:fc:0d:f8:a4:d1:f5:5f:39:6d:7c:f5:
                    5d:fe:a4:63:59:b0:a4:db:bf:12:6a:02:41:13:6a:
                    58:7d:58:63:2e:fc:2e:3c:8b:d9:fb:84:68:f2:5a:
                    8f:23:a7:15:74:95:57:97:19:72:61:e3:f8:9e:04:
                    c7:aa:45:29:56:fd:29:d9:aa:ca:95:06:39:9d:ff:
                    8b:a9:e4:a3:71:9d:ec:6d:ae:c7:ce:57:bf:0f:23:
                    14:c7:3d:71:7d:36:8c:90:36:47:36:c7:f0:cf:67:
                    12:d8:ef:1a:6b:8a:cc:24:40:15:4e:a1:8a:63:82:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C3:16:8B:70:BB:AF:AA:63:78:F5:EE:C9:9F:D4:55:C0:CE:46:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.230.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:ab:d3:fa:42:3b:93:b4:3d:13:5a:6b:1b:6b:16:b1:e5:
         a4:6f:cb:d5:43:9f:6c:b4:15:b2:e1:c7:4c:a2:4b:8f:4d:cb:
         51:c2:c7:04:cd:fd:39:af:e7:32:5d:91:d4:55:a8:9c:a9:66:
         dc:c7:ab:74:b5:d2:82:4a:34:11:1f:fd:b3:ab:df:cc:90:a7:
         80:e9:69:09:0d:52:d5:c4:15:02:0b:c9:3b:59:c5:1f:e8:f5:
         03:90:9c:15:d8:a0:19:41:fc:4f:0c:e1:50:96:54:ab:f5:bb:
         fe:33:56:7d:80:0b:16:bf:ab:bb:b6:93:71:df:39:cd:a4:18:
         0c:29:41:ec:02:85:02:37:2e:3d:d2:7a:99:d0:d6:8d:be:44:
         4a:5d:83:6b:c3:a2:99:de:9e:28:6b:14:e2:10:9b:57:b7:80:
         33:59:08:3f:e1:da:9a:c3:00:8d:3b:65:98:12:a9:19:ff:41:
         ce:2e:47:14:be:98:e6:a0:40:af:fd:0b:75:5b:20:28:48:f8:
         4f:5d:a3:17:16:4b:31:5b:99:c8:c1:79:40:9d:c6:5c:bc:3a:
         4a:ed:cd:59:f2:f7:95:62:21:f5:c0:f9:22:a6:06:6e:14:a3:
         0b:63:45:d9:c4:34:6c:e6:11:d5:8a:6c:fe:d5:7f:16:33:60:
         d6:b1:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:15:04 2025 by rpki-client