This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa
File:                     998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa (raw, json)
Hash identifier:          TUJ676mmktggFYlt2DHh1IU+n5Txkv+eZBKKbB8ao7Y=
Subject key identifier:   95:A5:AB:F5:16:93:8B:9C:15:D2:97:FE:A0:FA:5F:59:FA:C7:A6:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C215B8AE07ACDB6C2561B4B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa
Signing time:             Tue 09 Dec 2025 14:00:38 +0000
ROA not before:           Tue 09 Dec 2025 14:00:38 +0000
ROA not after:            Mon 09 Mar 2026 13:00:38 +0000
asID:                     0
IP address blocks:        143.42.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:21:5b:8a:e0:7a:cd:b6:c2:56:1b:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  9 14:00:38 2025 GMT
            Not After : Mar  9 13:00:38 2026 GMT
        Subject: CN=b4b3b1ab-4c6a-449c-ab82-004a867c584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:67:ce:fa:6e:64:66:29:52:96:f3:dc:6a:
                    27:e8:ef:12:e6:4d:02:a5:10:59:fc:a4:01:67:52:
                    36:0c:0a:85:2b:44:06:86:ec:e1:fa:d0:ba:07:d0:
                    32:e4:29:ac:05:bd:da:d6:89:8a:42:45:2b:32:b1:
                    7f:e4:0c:3f:31:69:bc:86:dc:0a:48:52:ec:19:83:
                    33:db:c7:9d:54:db:1f:c4:61:54:1a:8f:cc:5f:69:
                    69:52:46:48:c3:6e:30:b6:0e:7b:94:71:f4:cf:2e:
                    a4:8f:36:83:94:f4:cb:01:50:b7:d2:ef:08:51:c2:
                    5d:8e:36:d4:83:59:38:6f:72:82:f2:f5:86:57:63:
                    c0:2c:9b:dc:3a:08:ad:8a:e6:f5:07:f0:9e:2f:0f:
                    31:b2:2f:ec:91:c5:66:13:92:32:76:8d:cb:53:7b:
                    79:89:fb:38:94:e8:08:5d:f0:9e:40:d6:2c:75:b4:
                    32:ae:70:c5:fb:36:d1:16:d2:f3:17:78:2a:10:19:
                    7d:bc:a8:bb:c5:52:d7:ee:75:ca:42:5a:ee:a5:16:
                    d5:de:82:b6:66:e7:f9:11:ad:23:bf:b1:17:ae:c4:
                    4c:77:cf:d5:88:5c:04:3e:55:b5:34:76:4f:5e:33:
                    6a:0b:67:45:d1:c2:2a:90:81:00:9f:8d:84:5d:dc:
                    8c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A5:AB:F5:16:93:8B:9C:15:D2:97:FE:A0:FA:5F:59:FA:C7:A6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.42.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:ee:4a:a6:34:94:33:f5:c0:a9:61:63:43:15:f6:a6:2c:
         db:dc:85:1c:b4:fc:d7:24:dc:57:ef:1b:6d:f6:f6:19:f4:58:
         a7:3e:d1:fc:7c:ae:43:8d:a6:61:98:4f:0c:23:33:7f:52:a6:
         08:99:8a:3d:ea:57:fb:4e:3e:8a:5f:c1:41:50:e0:f5:b3:84:
         8d:b1:3d:ad:aa:bf:7c:3e:7b:f7:42:b8:24:94:95:d7:ca:5e:
         aa:85:83:e6:e6:32:90:3a:c5:de:24:51:5e:95:24:62:15:c2:
         41:a4:ba:73:5b:e5:54:60:c6:71:9a:0d:7c:bf:30:f9:f8:34:
         fd:79:29:f7:23:4a:f0:85:81:5c:01:5e:55:7a:3c:89:a8:cc:
         36:bb:2d:92:a0:0d:c1:3d:4a:06:a4:5f:ab:b4:f3:83:66:d7:
         81:d6:d9:bd:13:63:93:e2:2b:7d:01:47:4c:71:50:ae:97:a7:
         cb:a3:93:e8:cd:70:6b:73:df:bf:6d:c1:f9:d9:b3:d6:4b:ba:
         a9:8b:62:59:5c:92:0e:24:bd:aa:3b:b8:2b:71:6d:6c:66:48:
         53:6f:49:c2:3c:e9:77:b8:1f:49:35:2b:b9:cb:5b:49:06:43:
         81:3b:9c:9a:13:66:2d:14:2f:44:b2:dc:1a:b9:9e:70:89:6b:
         6d:6f:d7:07
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEwhW4rges22wlYbSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk
YjRiM2IxYWItNGM2YS00NDljLWFiODItMDA0YTg2N2M1ODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYRnzvpuZGYpUpbz3Gon6O8S5k0CpRBZ/KQB
Z1I2DAqFK0QGhuzh+tC6B9Ay5CmsBb3a1omKQkUrMrF/5Aw/MWm8htwKSFLsGYMz
28edVNsfxGFUGo/MX2lpUkZIw24wtg57lHH0zy6kjzaDlPTLAVC30u8IUcJdjjbU
g1k4b3KC8vWGV2PALJvcOgitiub1B/CeLw8xsi/skcVmE5Iydo3LU3t5ifs4lOgI
XfCeQNYsdbQyrnDF+zbRFtLzF3gqEBl9vKi7xVLX7nXKQlrupRbV3oK2Zuf5Ea0j
v7EXrsRMd8/ViFwEPlW1NHZPXjNqC2dF0cIqkIEAn42EXdyMmQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJWlq/UWk4ucFdKX/qD6X1n6x6ZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk4YTljYWUtYWFjMy0z
NjQ5LWJhMDgtZmI5NGNkMmE0YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjyowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYPPuSqY0lDP1wKlhY0MV9qYs29yFHLT81yTcV+8bbfb2GfRYpz7R/Hyu
Q42mYZhPDCMzf1KmCJmKPepX+04+il/BQVDg9bOEjbE9raq/fD5790K4JJSV18pe
qoWD5uYykDrF3iRRXpUkYhXCQaS6c1vlVGDGcZoNfL8w+fg0/Xkp9yNK8IWBXAFe
VXo8iajMNrstkqANwT1KBqRfq7Tzg2bXgdbZvRNjk+IrfQFHTHFQrpeny6OT6M1w
a3Pfv23B+dmz1ku6qYtiWVySDiS9qju4K3FtbGZIU29Jwjzpd7gfSTUructbSQZD
gTucmhNmLRQvRLLcGrmecIlrbW/XBw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:09:09 2025 by rpki-client