This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa
File:                     3e6eca20-984c-38bb-912e-539ca9ab80f4.roa (raw, json)
Hash identifier:          DuwWmMN7hxPc9XP7H+Dk48XFljReFT9KHCSZBvrLU3Y=
Subject key identifier:   6F:F8:FA:5A:8D:ED:95:27:84:A7:0D:D1:1C:19:D0:17:5E:FC:47:10
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584C109B735D3CBFF25EDEB90400
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa
Signing time:             Wed 03 Dec 2025 14:00:38 +0000
ROA not before:           Wed 03 Dec 2025 14:00:38 +0000
ROA not after:            Tue 03 Mar 2026 14:00:38 +0000
asID:                     6621
IP address blocks:        72.168.0.0/19 maxlen: 19
                          72.168.80.0/21 maxlen: 21
                          72.168.87.0/24 maxlen: 24
                          72.168.88.0/21 maxlen: 21
                          72.168.94.0/24 maxlen: 24
                          72.168.95.0/24 maxlen: 24
                          72.168.96.0/19 maxlen: 19
                          72.168.96.0/21 maxlen: 21
                          72.168.128.0/22 maxlen: 22
                          72.168.132.0/22 maxlen: 22
                          72.168.136.0/22 maxlen: 22
                          72.168.140.0/22 maxlen: 22
                          72.168.142.0/23 maxlen: 23
                          72.168.144.0/22 maxlen: 22
                          72.168.148.0/22 maxlen: 22
                          72.168.152.0/22 maxlen: 22
                          72.168.156.0/22 maxlen: 22
                          72.168.160.0/22 maxlen: 22
                          72.168.164.0/22 maxlen: 22
                          72.168.168.0/22 maxlen: 22
                          72.168.172.0/22 maxlen: 22
                          72.168.176.0/22 maxlen: 22
                          72.168.180.0/22 maxlen: 22
                          72.168.184.0/22 maxlen: 22
                          72.168.188.0/22 maxlen: 22
                          72.168.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:10:9b:73:5d:3c:bf:f2:5e:de:b9:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Dec  3 14:00:38 2025 GMT
            Not After : Mar  3 14:00:38 2026 GMT
        Subject: CN=caa542f9-c2b8-4614-9749-f248db37b94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:ad:b8:13:51:7f:a6:e8:22:53:99:13:61:
                    23:67:c8:2b:7d:d1:39:ba:22:f2:82:a0:4b:6a:4c:
                    08:12:6d:fd:bc:dc:3b:fa:41:8d:05:44:c2:f3:9e:
                    ad:90:16:30:4a:85:37:45:8a:fa:b2:45:2d:bb:02:
                    8b:60:4e:82:75:67:e1:72:b3:2c:3f:c9:2d:82:f3:
                    a5:36:e2:80:1d:c3:a3:1e:16:fa:51:a8:cc:ae:67:
                    bf:96:e0:68:6b:0b:be:24:c9:26:06:b9:92:b3:ea:
                    6e:52:59:ba:21:45:4a:31:72:e7:02:e4:53:69:d0:
                    25:20:23:29:cc:37:56:9f:a0:26:d9:bd:da:1d:1c:
                    3d:71:73:df:6c:5c:50:e5:06:c6:a3:ef:53:a7:45:
                    a5:63:41:4e:04:33:4c:82:75:e6:02:34:54:a9:ac:
                    d1:f9:3b:69:49:fa:72:75:30:b5:e1:db:35:4f:9f:
                    97:68:8d:b3:53:e6:1c:76:38:3b:ca:c9:76:ae:fd:
                    07:7f:a9:9d:9c:ec:86:eb:46:54:4d:ca:8a:9f:f6:
                    c3:16:12:c8:27:b1:02:e0:c7:41:50:c3:28:86:a5:
                    3b:03:34:22:26:41:ff:04:59:8f:97:d2:59:2e:6b:
                    82:f4:59:a6:e3:37:96:4d:25:5b:50:5c:a9:a2:c0:
                    62:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F8:FA:5A:8D:ED:95:27:84:A7:0D:D1:1C:19:D0:17:5E:FC:47:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.168.0.0/19
                  72.168.80.0-72.168.191.255
                  72.168.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b7:cf:d0:9b:4c:c4:44:83:d4:89:ec:1c:85:12:d3:69:26:
         18:29:3c:20:28:1a:0e:fc:28:1f:4d:7c:2c:bf:bd:1a:20:cd:
         56:b9:74:65:41:57:05:e1:8e:08:27:ee:c3:53:b2:f0:5e:3c:
         2f:f4:ee:c5:61:e3:e3:4e:4b:2d:64:69:35:91:0a:5f:50:6a:
         a7:79:bb:e8:21:a8:58:58:ee:ee:cc:24:06:b1:e3:db:06:43:
         05:4e:83:e1:86:5f:f9:2d:b4:73:f8:b6:31:72:7a:46:bd:c4:
         50:dd:88:73:fc:af:83:61:49:21:78:9c:e4:1d:b5:b5:6f:6f:
         20:5d:17:8f:03:bd:e9:f6:7f:cf:94:99:a0:a4:1d:70:3c:54:
         ec:88:1c:29:3b:a1:f3:ab:b3:9d:be:72:d2:16:2f:18:1f:07:
         f4:22:29:cf:53:ad:d0:7f:4a:77:56:eb:0d:72:02:4a:07:1b:
         0a:db:13:82:65:43:a3:ad:20:9a:6e:c5:5b:8c:d3:5f:15:7c:
         d2:a7:e3:02:ec:37:07:20:7a:ec:68:e3:cb:b1:e4:d5:50:3a:
         7f:35:17:da:f8:4f:dc:e5:16:9f:71:f1:d4:fe:5e:30:68:56:
         22:3b:55:8a:93:1d:10:97:2f:be:99:7b:65:e6:6f:cd:09:e9:
         10:c1:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:36 2025 by rpki-client