This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa
File:                     d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json)
Hash identifier:          zGl5SvmxHr+EyeR1Abl2jISvJS7L3dXAa+BN8narDR8=
Subject key identifier:   FD:C1:06:FC:F7:29:79:6A:EB:AC:D7:9F:9C:4B:D1:F8:CC:07:3F:40
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584BEC509DFFEAACA912E1FB8800
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa
Signing time:             Thu 20 Nov 2025 14:00:39 +0000
ROA not before:           Thu 20 Nov 2025 14:00:39 +0000
ROA not after:            Wed 18 Feb 2026 14:00:39 +0000
asID:                     23470
IP address blocks:        209.222.100.0/24 maxlen: 24
                          209.222.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ec:50:9d:ff:ea:ac:a9:12:e1:fb:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Nov 20 14:00:39 2025 GMT
            Not After : Feb 18 14:00:39 2026 GMT
        Subject: CN=25800312-7ebb-4f08-84a2-066e1ae8bad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:71:28:6f:5b:39:b7:73:0c:45:f4:bb:50:
                    ab:17:0d:65:9f:f1:4f:cf:0b:a1:97:7c:5d:e9:f5:
                    e2:53:f8:dc:98:5e:83:d5:81:1f:44:ef:53:f5:74:
                    73:9e:d0:d1:df:28:ec:97:38:35:8d:87:88:52:45:
                    e6:43:e4:08:96:17:c8:39:07:83:57:23:cb:ff:9a:
                    e4:b8:09:a3:b0:4e:43:06:79:3d:4a:e9:26:e3:e5:
                    44:85:9d:47:83:47:e9:98:20:60:a1:ae:14:3b:df:
                    78:6c:45:3c:19:70:1d:c8:25:76:4d:04:ba:81:db:
                    54:c2:17:da:df:4b:41:1f:e1:30:5d:da:07:bf:44:
                    d5:8e:02:38:4b:83:29:ce:89:49:78:56:1e:42:7d:
                    89:22:88:30:0b:19:62:f2:a0:2f:4a:37:26:78:b6:
                    cf:ec:53:cc:90:9a:a7:54:8f:b4:da:0d:1c:86:fa:
                    83:a8:0f:10:ef:e2:77:58:07:bd:27:ab:6e:9c:9c:
                    82:41:cb:62:42:73:a9:b5:8a:c1:15:f2:57:f6:bb:
                    24:5e:65:51:e6:9a:79:f7:7c:63:2c:a0:7f:9d:d1:
                    ab:d3:34:9b:7a:cb:dd:16:bf:de:7d:28:35:48:ae:
                    1b:4c:2a:74:73:6e:3d:6d:a3:59:38:4a:c9:a5:2c:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C1:06:FC:F7:29:79:6A:EB:AC:D7:9F:9C:4B:D1:F8:CC:07:3F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.100.0/24
                  209.222.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:a0:fa:74:56:4a:b3:0a:97:e6:54:fa:26:bf:79:9a:ef:
         74:68:f1:19:9d:78:d6:cc:65:8d:a8:3b:8d:a3:ea:87:64:4a:
         b4:b2:91:93:c7:49:1b:26:42:33:b3:bd:da:9b:f3:1a:73:5c:
         c4:db:2a:f2:2f:25:81:9e:4f:03:46:51:f6:e2:06:1c:cb:d7:
         f7:52:01:30:1b:8a:0c:cf:00:79:0c:02:1c:71:a9:4e:86:55:
         f8:85:d8:f8:b4:c8:5a:b8:7a:63:cb:3c:29:f3:9f:13:69:b8:
         b8:9f:8b:b8:05:ce:dd:25:a1:17:9e:0c:11:be:4e:ae:e5:53:
         40:22:da:a8:b8:f2:0b:08:6e:cb:57:6e:a5:00:a7:7e:ac:8c:
         59:e9:0c:e3:c8:a3:55:bd:45:e4:09:67:13:dc:0d:9f:62:92:
         73:28:12:41:e1:88:ca:97:7f:1e:7a:db:0e:e6:7a:9c:c1:70:
         f2:36:cc:71:55:8f:69:a2:6b:06:af:61:ce:4a:7c:70:17:d8:
         4a:da:17:30:c2:02:1b:3f:8b:be:4a:21:6b:72:99:65:9d:3b:
         9d:92:aa:36:f9:7d:4f:6d:fa:fb:4e:bf:2e:75:ad:93:6f:fc:
         15:e1:a1:41:df:ea:1c:66:35:37:18:97:7d:19:e3:fd:16:c6:
         fe:96:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:44:42 2025 by rpki-client