This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa
File:                     3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json)
Hash identifier:          ZzHPKH6UizJJs74DRSjHpEGThvwUI/iYtnZwE9JFaJE=
Subject key identifier:   54:CF:AE:27:0E:7E:1D:5B:D9:B8:10:64:CB:E1:58:5D:07:F5:8F:8B
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584C040B49F0F03A028A96032190
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa
Signing time:             Sat 29 Nov 2025 02:00:31 +0000
ROA not before:           Sat 29 Nov 2025 02:00:31 +0000
ROA not after:            Fri 27 Feb 2026 02:00:31 +0000
asID:                     202
IP address blocks:        20.132.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:04:0b:49:f0:f0:3a:02:8a:96:03:21:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Nov 29 02:00:31 2025 GMT
            Not After : Feb 27 02:00:31 2026 GMT
        Subject: CN=6e5afe29-fe48-4fa5-81c4-5702339872b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:40:37:70:f2:42:c1:6d:59:b4:97:03:c6:
                    3a:4b:c6:b5:a1:34:f7:06:41:da:7d:8c:80:e3:32:
                    ca:8e:94:d2:8e:a9:f7:37:22:ba:2e:c6:71:29:fa:
                    96:cc:bb:4a:ad:e7:da:0d:4c:d4:8f:f7:8f:11:4d:
                    d7:b6:be:25:34:e1:7e:79:01:29:59:74:16:7b:4b:
                    dd:87:0e:de:59:7a:af:db:f2:94:16:a6:a0:00:0f:
                    3e:93:92:6b:05:fc:5a:b5:06:af:b2:f0:fb:f4:1e:
                    da:d3:33:f7:51:ab:93:fa:f8:97:5e:23:97:f2:74:
                    37:9d:4f:bb:a8:21:d2:5d:e2:64:d7:b5:6e:10:ce:
                    97:87:4b:3a:4e:62:6e:12:2f:a2:03:a6:f1:f1:28:
                    d2:63:d4:65:11:af:6c:d1:ba:0b:80:ea:8f:32:a3:
                    ef:b3:bd:5a:12:aa:97:3f:e3:ea:49:68:4e:dc:14:
                    6a:6d:ee:ed:63:a0:fd:51:42:71:d3:5b:e6:bd:44:
                    92:ba:64:37:87:52:74:c2:4d:fd:7b:ac:5b:ab:99:
                    2b:9a:fc:9f:5d:d6:69:22:17:bc:c8:f2:9e:df:61:
                    71:56:00:bb:00:33:4e:26:7f:46:17:f6:27:90:66:
                    fe:8a:8c:a1:18:5d:a0:1c:51:99:22:f1:61:fc:09:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:AE:27:0E:7E:1D:5B:D9:B8:10:64:CB:E1:58:5D:07:F5:8F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.132.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ed:cc:6b:3c:16:b0:02:9a:ab:d3:e0:ce:c2:51:49:4d:40:
         14:22:0a:13:1d:0f:34:96:7f:a7:6f:e0:1b:be:b9:6e:43:57:
         76:f6:07:51:2e:0d:61:d6:b3:8b:65:22:48:2a:06:45:50:fd:
         44:c5:d1:ba:a6:f6:c2:ce:a0:64:06:c0:8c:bf:2a:73:da:b2:
         10:1c:98:4b:ab:4c:33:43:d0:78:53:b3:e0:fa:00:49:e5:f6:
         f1:21:90:47:9a:0f:25:ec:d3:12:0e:34:67:38:a7:f8:55:04:
         cd:b2:d7:31:3b:84:ef:88:a9:a9:6a:ee:4c:dd:e2:75:8b:d6:
         ee:20:58:55:d5:00:f9:c5:0d:9c:c6:62:57:8a:3c:44:d1:df:
         6a:4f:a8:ec:c3:db:33:d8:c5:0e:00:ce:01:5a:4e:22:d4:5c:
         30:f1:ae:04:0a:77:f5:5d:b3:d6:f7:e5:96:64:2a:ae:10:9e:
         04:5f:77:12:e6:e3:d1:bc:1e:82:3c:2b:40:70:23:a5:a5:37:
         fe:75:a7:0e:e8:e1:33:22:2d:51:d8:0a:c6:de:c7:29:aa:f8:
         23:48:19:a9:96:55:59:83:04:7c:fc:74:1e:02:36:36:2b:41:
         be:e4:0a:4a:97:6b:31:85:2c:f0:47:72:6d:11:8f:9b:23:ad:
         b9:63:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:31 2025 by rpki-client