This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/f1ad3055-0a9c-3cea-b635-57d81610d08e.roa
File:                     f1ad3055-0a9c-3cea-b635-57d81610d08e.roa (raw, json)
Hash identifier:          woF2ydznYUFREPZO4Q/rR1kwIJECrIMCmCScJie27BM=
Subject key identifier:   B7:A2:5F:9C:4C:53:F1:53:11:47:85:66:EC:2A:06:E4:D1:FF:FE:DD
Certificate issuer:       /CN=1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4
Certificate serial:       010D0C9F4328584BE7721C05CFA9CBF0D3381800
Authority key identifier: 2D:EB:37:DF:99:28:BA:A0:94:DE:39:2A:33:A6:41:B0:38:D8:6D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/f1ad3055-0a9c-3cea-b635-57d81610d08e.roa
Signing time:             Tue 18 Nov 2025 20:09:21 +0000
ROA not before:           Tue 18 Nov 2025 20:09:21 +0000
ROA not after:            Mon 16 Feb 2026 20:09:21 +0000
asID:                     26185
IP address blocks:        208.67.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e7:72:1c:05:cf:a9:cb:f0:d3:38:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4
        Validity
            Not Before: Nov 18 20:09:21 2025 GMT
            Not After : Feb 16 20:09:21 2026 GMT
        Subject: CN=6884dd11-3ea3-4f54-acec-0ffc44299e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:63:f3:06:98:34:2b:9d:ad:cd:53:98:c5:
                    97:cb:e5:ff:83:84:5b:33:73:d3:ef:a7:44:bc:e5:
                    d9:49:92:ee:77:63:fd:59:c5:d7:15:c0:da:a5:80:
                    81:e1:83:2b:10:ed:89:f3:18:85:c9:46:17:66:59:
                    58:7a:0b:4a:04:c3:6c:8e:86:cc:f5:37:4f:ba:58:
                    35:d6:73:8e:fb:02:39:39:06:19:f2:1f:7c:4a:35:
                    0d:7d:a4:cc:23:c2:7e:a8:7e:1d:28:d2:18:45:56:
                    a2:21:36:b5:ef:76:90:9a:b1:02:08:25:05:72:46:
                    65:6f:52:24:a0:bd:23:de:f3:72:88:b7:25:1e:a3:
                    93:2b:01:4c:ae:87:43:1a:81:6e:4a:2e:43:4e:14:
                    39:d8:95:d3:d5:c8:c2:6a:58:65:d7:58:a4:5a:e1:
                    c2:e8:85:18:b2:a0:83:77:b2:16:95:05:21:c6:a3:
                    31:9e:12:f4:17:61:de:ac:d8:38:37:b7:47:af:6e:
                    52:bc:7f:74:13:87:89:d0:41:33:ef:18:b1:cd:10:
                    85:f7:53:3a:b5:e8:93:31:6c:89:a1:2a:0d:36:3b:
                    78:9e:4b:eb:e9:c9:fc:e5:eb:d1:fd:a8:78:1f:8e:
                    ac:4f:fe:db:0c:06:5f:fe:60:e6:be:94:15:bb:68:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:5F:9C:4C:53:F1:53:11:47:85:66:EC:2A:06:E4:D1:FF:FE:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/f1ad3055-0a9c-3cea-b635-57d81610d08e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.crl

            X509v3 Authority Key Identifier:
                keyid:2D:EB:37:DF:99:28:BA:A0:94:DE:39:2A:33:A6:41:B0:38:D8:6D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a6:78:d6:ca:60:23:d4:b0:30:1f:1c:3f:db:5b:97:3b:9a:
         12:a9:f7:f7:1f:1e:c5:3e:55:ba:dc:a0:ff:db:b7:2d:52:d0:
         6e:b0:44:af:5f:5c:38:61:1f:74:da:29:db:94:2d:00:05:db:
         6f:4f:33:1e:bd:66:7f:35:d2:e5:f6:8d:20:87:4c:40:3a:eb:
         fd:31:5e:21:61:d5:a8:68:a4:52:08:49:8d:ff:d8:3b:d4:81:
         32:e1:61:60:55:a6:53:69:a6:73:62:0d:d8:6d:d5:dd:3d:d4:
         06:f7:82:88:6b:55:fe:ca:d2:9e:01:8d:71:af:9f:ea:fa:09:
         d3:76:6a:5b:bb:a4:ca:6c:84:55:17:9f:c3:3a:02:5a:ee:fe:
         a9:f3:bf:af:5e:e7:85:71:25:93:4b:e9:88:07:f4:e7:55:b2:
         6b:b2:c7:19:e5:e9:78:0a:43:70:2a:f1:cc:d2:05:ce:75:d0:
         da:d0:cb:96:c6:6e:c9:72:75:ab:2a:b8:90:21:8c:b1:c2:ca:
         ac:4d:78:4a:57:2c:dc:b5:1a:09:e7:3b:44:f1:51:02:3c:35:
         34:d4:3f:a1:82:aa:f9:8d:20:1a:76:0f:04:2b:36:29:2c:e6:
         19:04:e2:b2:67:f1:6d:ff:de:36:69:73:58:23:07:f8:9d:f5:
         0d:65:e1:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvnchwFz6nL8NM4GAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM5YTBhYjUtYzQxZi00NTA3LWI3ZWYtM2U5OGNlODM0
ZWI0MB4XDTI1MTExODIwMDkyMVoXDTI2MDIxNjIwMDkyMVowLzEtMCsGA1UEAxMk
Njg4NGRkMTEtM2VhMy00ZjU0LWFjZWMtMGZmYzQ0Mjk5ZTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Bj8waYNCudrc1TmMWXy+X/g4RbM3PT76dE
vOXZSZLud2P9WcXXFcDapYCB4YMrEO2J8xiFyUYXZllYegtKBMNsjobM9TdPulg1
1nOO+wI5OQYZ8h98SjUNfaTMI8J+qH4dKNIYRVaiITa173aQmrECCCUFckZlb1Ik
oL0j3vNyiLclHqOTKwFMrodDGoFuSi5DThQ52JXT1cjCalhl11ikWuHC6IUYsqCD
d7IWlQUhxqMxnhL0F2HerNg4N7dHr25SvH90E4eJ0EEz7xixzRCF91M6teiTMWyJ
oSoNNjt4nkvr6cn85evR/ah4H46sT/7bDAZf/mDmvpQVu2iZUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLeiX5xMU/FTEUeFZuwqBuTR//7dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYzlh
MGFiNS1jNDFmLTQ1MDctYjdlZi0zZTk4Y2U4MzRlYjQvZjFhZDMwNTUtMGE5Yy0z
Y2VhLWI2MzUtNTdkODE2MTBkMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWM5YTBhYjUtYzQxZi00NTA3LWI3
ZWYtM2U5OGNlODM0ZWI0LzFjOWEwYWI1LWM0MWYtNDUwNy1iN2VmLTNlOThjZTgz
NGViNC5jcmwwHwYDVR0jBBgwFoAULes335kouqCU3jkqM6ZBsDjYbeQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xYzlhMGFiNS1jNDFmLTQ1MDctYjdlZi0zZTk4
Y2U4MzRlYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EOjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWmeNbKYCPUsDAfHD/bW5c7mhKp9/cfHsU+VbrcoP/bty1S0G6wRK9f
XDhhH3TaKduULQAF229PMx69Zn810uX2jSCHTEA66/0xXiFh1ahopFIISY3/2DvU
gTLhYWBVplNppnNiDdht1d091Ab3gohrVf7K0p4BjXGvn+r6CdN2alu7pMpshFUX
n8M6Alru/qnzv69e54VxJZNL6YgH9OdVsmuyxxnl6XgKQ3Aq8czSBc510NrQy5bG
bslydasquJAhjLHCyqxNeEpXLNy1GgnnO0TxUQI8NTTUP6GCqvmNIBp2DwQrNiks
5hkE4rJn8W3/3jZpc1gjB/id9Q1l4TY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:35:13 2025 by rpki-client