This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/08aa52b2-1038-3996-b48b-5440fcfa0d61.roa
File:                     08aa52b2-1038-3996-b48b-5440fcfa0d61.roa (raw, json)
Hash identifier:          euEWkLjRftyoq5wj1OC87n9Gp68/vuqf9ZSotLXNbMw=
Subject key identifier:   9A:2E:3F:ED:19:E6:2D:E7:B4:ED:63:E8:0A:A3:65:FF:94:8B:1F:23
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584BE1A064C395CBDFA8391B1280
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/08aa52b2-1038-3996-b48b-5440fcfa0d61.roa
Signing time:             Sun 16 Nov 2025 18:07:45 +0000
ROA not before:           Sun 16 Nov 2025 18:07:45 +0000
ROA not after:            Sat 14 Feb 2026 18:07:45 +0000
asID:                     205886
IP address blocks:        66.249.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e1:a0:64:c3:95:cb:df:a8:39:1b:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Nov 16 18:07:45 2025 GMT
            Not After : Feb 14 18:07:45 2026 GMT
        Subject: CN=162127a8-ad57-470f-86fd-b186850a0924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:0d:58:52:33:01:89:b9:b6:0f:94:28:64:
                    35:31:f2:a6:d6:29:18:a6:55:dc:8b:fd:eb:54:14:
                    e9:aa:9c:26:ad:93:0a:6b:93:4c:ac:18:81:6b:c0:
                    5c:64:b2:c4:b7:a9:71:27:fe:e6:3a:69:6b:57:c3:
                    11:b3:b4:2a:5f:53:c0:75:37:ee:0a:41:48:e1:cf:
                    fe:1a:47:67:4b:61:7b:1c:b2:f6:26:ef:a0:50:fb:
                    92:85:3f:6b:8c:86:22:b0:57:65:88:71:8c:da:98:
                    fa:3e:d7:26:2e:81:42:14:b9:f4:b9:7b:74:d8:63:
                    b3:30:17:8a:94:de:1a:87:cc:17:9a:85:f2:17:97:
                    f5:1c:f8:21:e0:de:9c:5f:07:5b:37:74:28:a8:fe:
                    1b:f7:e9:d6:67:5c:9c:24:3d:7f:6d:14:15:2b:ff:
                    ab:25:71:56:73:5e:b6:c8:32:d3:a8:38:10:bf:ce:
                    d3:e9:75:0b:5b:ba:80:30:b9:62:6c:cd:43:e7:5b:
                    b2:9e:b5:01:c0:cb:a6:95:0d:c8:14:da:f4:19:20:
                    3a:90:e3:81:c1:9a:54:27:99:48:fe:04:e2:82:2d:
                    ea:45:0f:8b:4f:53:ce:63:dc:3e:e1:5c:bd:3f:fb:
                    5a:b0:24:50:93:91:02:ac:95:2e:84:ce:0e:f6:fd:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2E:3F:ED:19:E6:2D:E7:B4:ED:63:E8:0A:A3:65:FF:94:8B:1F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/08aa52b2-1038-3996-b48b-5440fcfa0d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:3b:ba:ce:14:41:91:14:f8:d1:c0:51:90:a2:4c:ba:0f:
         55:fa:6d:a3:45:03:21:95:4d:fa:01:71:fa:fd:f2:16:f0:9a:
         a8:71:b8:55:4a:a6:db:22:e1:68:df:5a:50:db:3e:66:52:06:
         63:59:1a:76:e4:24:39:45:da:8c:30:57:68:53:17:a6:44:17:
         01:61:56:f7:d2:39:0a:b3:a1:d7:c0:31:ff:c7:c9:5e:3a:f1:
         32:da:b2:64:09:13:69:ee:c1:96:6d:18:45:d8:32:bd:1f:4c:
         b3:cd:e0:35:45:0b:6c:ae:0d:8f:31:08:17:d1:cb:12:11:4a:
         ec:21:4e:90:ed:06:da:64:c6:c3:08:37:38:da:5a:6e:16:1f:
         d3:01:d6:96:b2:59:6d:72:ad:79:6d:7e:0a:46:6a:ac:10:a3:
         f7:7b:54:4b:32:22:fa:fb:08:4c:12:97:a2:67:0f:8d:44:b2:
         2f:56:79:1f:7d:58:c1:0d:ea:5c:d1:74:23:b6:b3:79:ac:de:
         a0:4b:9f:1f:25:dc:94:fa:3f:53:3a:8f:26:ba:13:4c:6e:18:
         cd:96:d3:93:98:b2:88:47:ab:9f:f3:a4:71:00:e2:5b:60:46:
         8e:4a:f1:e7:31:ec:6b:39:57:74:31:6b:13:b9:75:24:00:e2:
         f6:39:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:38:40 2025 by rpki-client