This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa
File:                     db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json)
Hash identifier:          Crfnww3jn5hII87xb4Cn21p14OCY1/pk1whHOsNoOKU=
Subject key identifier:   3F:02:A3:6D:A1:49:EC:06:03:80:71:3D:6C:01:29:07:E6:61:1D:05
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584BE555BAE6779C58EE06614EC0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa
Signing time:             Tue 18 Nov 2025 02:00:30 +0000
ROA not before:           Tue 18 Nov 2025 02:00:30 +0000
ROA not after:            Mon 16 Feb 2026 02:00:30 +0000
asID:                     22808
IP address blocks:        66.112.128.8/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e5:55:ba:e6:77:9c:58:ee:06:61:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Nov 18 02:00:30 2025 GMT
            Not After : Feb 16 02:00:30 2026 GMT
        Subject: CN=8a49bfd3-8c9b-4662-beae-092b0146c4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:b6:8a:9e:c2:54:4b:0d:1d:fc:bb:60:48:
                    d8:a5:fe:30:fd:4f:dc:eb:99:81:03:93:ab:4e:1e:
                    a0:c4:6d:5c:90:57:c6:83:55:ae:3f:bd:c4:f3:60:
                    d3:51:e6:fc:c0:9d:24:e7:d6:b9:63:b8:3d:cf:e3:
                    4a:2a:a1:4f:a4:a5:28:78:78:90:6f:03:1c:1a:5a:
                    71:a0:bd:a0:64:d7:b8:70:e8:ba:91:31:d8:fa:91:
                    fc:c9:ba:c0:5e:ca:20:8c:32:68:ab:19:b6:58:0b:
                    25:f9:3d:c6:ae:9f:54:81:bc:f2:0c:51:80:68:e7:
                    cb:d2:b5:0b:2d:7f:e8:76:cc:51:6e:3a:67:27:57:
                    a3:bf:76:1f:3f:da:dc:8d:5c:78:20:e8:10:ab:f8:
                    b5:a8:2e:61:14:c4:8b:71:69:89:30:12:95:b6:54:
                    d6:9e:e7:74:2d:f3:90:36:9f:4b:29:de:56:38:2e:
                    63:14:bf:58:a3:d0:f8:15:08:b3:00:47:b9:44:93:
                    15:1b:e3:2c:89:e0:ec:9e:ca:92:b6:6c:8b:00:62:
                    17:51:2f:ef:d8:72:35:6d:32:ce:53:0e:98:bd:09:
                    14:e1:bc:eb:4a:b2:0f:66:4e:56:cb:a9:7e:72:4e:
                    99:5f:15:79:09:73:c6:80:90:0b:01:7c:b0:8e:44:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:02:A3:6D:A1:49:EC:06:03:80:71:3D:6C:01:29:07:E6:61:1D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.128.8/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:74:e4:a7:41:08:f2:95:d8:c8:f8:91:0b:bc:30:fb:02:
         1d:32:72:8c:7c:95:a7:be:cd:03:5d:da:db:fa:66:d1:a4:66:
         a7:fe:ba:9d:97:bc:5a:bb:21:cd:4f:3a:f2:e2:23:c0:01:e7:
         67:97:1c:5b:38:a6:26:96:56:8d:79:8d:e2:1b:f1:9e:ba:bb:
         09:92:24:31:2f:a4:aa:48:9d:dd:2b:76:72:6c:82:26:eb:d3:
         ce:00:45:5b:84:f8:98:49:a5:37:25:b1:0c:12:2d:2d:77:9c:
         1a:4c:4c:49:b4:58:16:57:96:41:a4:5a:fa:26:58:63:b8:0f:
         34:eb:29:0a:a9:40:ab:90:a6:d8:44:6e:e7:49:1a:52:8b:3b:
         e0:c0:cb:d5:b6:e7:c1:db:5b:21:67:75:a0:ab:30:0a:87:36:
         fc:48:bc:ef:4d:bc:f0:34:7f:fe:d5:38:66:50:c6:36:f9:cf:
         a0:df:ed:64:77:39:a5:4a:e9:38:48:1f:9c:5d:eb:6c:b3:6f:
         65:16:d8:7d:77:3d:07:bc:3a:a3:4a:9a:13:45:f0:73:5d:aa:
         31:a8:da:c2:fc:09:70:4c:19:55:37:69:62:58:05:0f:b7:e4:
         1e:07:6c:05:ad:c6:45:32:84:b2:a0:3f:34:d1:ef:85:de:0e:
         6e:26:52:05
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvlVbrmd5xY7gZhTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk
OGE0OWJmZDMtOGM5Yi00NjYyLWJlYWUtMDkyYjAxNDZjNGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmji2ip7CVEsNHfy7YEjYpf4w/U/c65mBA5Or
Th6gxG1ckFfGg1WuP73E82DTUeb8wJ0k59a5Y7g9z+NKKqFPpKUoeHiQbwMcGlpx
oL2gZNe4cOi6kTHY+pH8ybrAXsogjDJoqxm2WAsl+T3Grp9UgbzyDFGAaOfL0rUL
LX/odsxRbjpnJ1ejv3YfP9rcjVx4IOgQq/i1qC5hFMSLcWmJMBKVtlTWnud0LfOQ
Np9LKd5WOC5jFL9Yo9D4FQizAEe5RJMVG+MsieDsnsqStmyLAGIXUS/v2HI1bTLO
Uw6YvQkU4bzrSrIPZk5Wy6l+ck6ZXxV5CXPGgJALAXywjkS+yQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD8Co22hSewGA4BxPWwBKQfmYR0FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZGIwYmUzNmMtZGJiYi0z
NWIyLWFhODEtZTg0MjE2M2EyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCACDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBxpHTkp0EI8pXYyPiRC7ww+wIdMnKMfJWnvs0DXdrb+mbRpGan/rqd
l7xauyHNTzry4iPAAednlxxbOKYmllaNeY3iG/GeursJkiQxL6SqSJ3dK3ZybIIm
69POAEVbhPiYSaU3JbEMEi0td5waTExJtFgWV5ZBpFr6JlhjuA806ykKqUCrkKbY
RG7nSRpSizvgwMvVtufB21shZ3WgqzAKhzb8SLzvTbzwNH/+1ThmUMY2+c+g3+1k
dzmlSuk4SB+cXetss29lFth9dz0HvDqjSpoTRfBzXaoxqNrC/AlwTBlVN2liWAUP
t+QeB2wFrcZFMoSyoD800e+F3g5uJlIF
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:21:44 2025 by rpki-client