This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
File:                     28f9e361-2a40-3533-ae86-3037006c7eda.roa (raw, json)
Hash identifier:          wtYxbZi/LsaeR6FXN1OdQP3GM+aobyUwoMbbJIdh730=
Subject key identifier:   C8:61:5A:80:BB:A1:08:11:E3:01:E2:41:B3:FA:2F:AC:32:8A:D7:13
Certificate issuer:       /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial:       010D0C9F4328584BD5FB22B98A3A7E2E61E4B200
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
Signing time:             Wed 12 Nov 2025 14:00:37 +0000
ROA not before:           Wed 12 Nov 2025 14:00:37 +0000
ROA not after:            Tue 10 Feb 2026 14:00:37 +0000
asID:                     25914
IP address blocks:        65.49.152.0/21 maxlen: 21
                          65.49.152.0/22 maxlen: 22
                          65.49.156.0/22 maxlen: 22
                          108.160.80.0/24 maxlen: 24
                          108.160.84.0/22 maxlen: 22
                          108.160.88.0/24 maxlen: 24
                          132.147.240.0/20 maxlen: 20
                          2607:2900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:fb:22:b9:8a:3a:7e:2e:61:e4:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
        Validity
            Not Before: Nov 12 14:00:37 2025 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=dbd7a4e7-a498-4588-832b-416d09cd6025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f8:d9:b2:4a:a5:5e:b7:06:e1:bb:9a:d7:35:
                    3d:ad:21:78:62:ec:5f:e2:95:e6:7a:e6:8b:bb:7b:
                    eb:b7:de:a9:f6:ab:4d:7c:03:5b:09:92:12:41:c2:
                    76:03:ab:c5:d2:41:60:7f:13:d2:df:7c:f4:28:86:
                    0f:60:07:75:94:d5:12:03:0c:83:32:90:b3:da:98:
                    a8:68:ab:9b:d4:de:8c:9a:d0:85:db:49:54:b0:08:
                    ba:a3:b3:1f:9e:83:31:76:73:d7:a1:d6:0a:43:5e:
                    bc:d3:28:54:23:65:5b:52:d5:c9:5c:d0:6d:3a:86:
                    75:69:1f:15:c3:c1:51:25:7f:b1:e5:b7:e9:6d:47:
                    c5:c9:6f:4b:43:ed:bd:c7:70:27:49:79:c9:44:54:
                    f5:a9:e2:2e:dc:f2:a2:28:67:d1:16:48:a5:cd:f3:
                    ce:d3:1b:d6:39:56:d9:9f:bc:96:a0:4b:59:38:48:
                    dd:b3:ac:28:2d:7a:90:bf:57:3c:66:e8:d9:12:4d:
                    bd:aa:7d:51:14:f2:2d:f3:d6:66:c8:0f:41:42:6c:
                    30:a8:6d:d2:2b:1a:1f:db:28:6d:f2:c3:7d:8a:3c:
                    ab:e4:6b:1e:39:2b:3f:d1:7d:69:28:c1:f6:59:d4:
                    ef:67:26:a2:b6:f1:48:b3:fe:81:6e:ca:49:7b:a1:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:5A:80:BB:A1:08:11:E3:01:E2:41:B3:FA:2F:AC:32:8A:D7:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.152.0/21
                  108.160.80.0/24
                  108.160.84.0-108.160.88.255
                  132.147.240.0/20
                IPv6:
                  2607:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:f4:47:a0:64:d5:0e:93:d5:94:88:f1:cf:78:da:1f:87:
         d7:b1:06:da:58:4f:22:a5:4a:39:4a:a2:ea:d3:89:97:06:c0:
         f4:0a:28:c8:c5:09:80:69:10:f1:7b:55:93:e2:55:ff:ec:16:
         ed:60:55:fa:53:71:fd:77:e9:b5:94:01:04:d7:1b:a5:2e:5b:
         cc:09:3c:31:14:d4:28:4a:54:48:5e:06:82:87:55:71:c1:cb:
         f8:6f:19:33:d0:06:6c:bb:2e:46:9d:6d:7d:71:95:30:6b:c8:
         f8:35:4a:9f:4d:fd:32:22:61:49:cc:a3:f1:ff:34:e3:63:e0:
         98:37:e2:48:15:61:b2:fc:f2:4a:a6:07:a0:b7:39:0c:92:50:
         6c:3b:6b:c7:78:45:c7:ec:84:58:20:68:67:48:a3:5f:46:8a:
         03:f2:ae:f0:8b:42:24:6b:99:aa:2b:cb:a4:d0:28:7e:ab:ef:
         55:fe:01:7f:ce:3d:8c:1f:6b:af:a9:b9:75:be:76:c6:1e:9d:
         f0:ce:15:d3:51:b3:c3:10:c6:72:a9:c8:f3:92:73:b2:b4:30:
         dc:b4:02:2a:98:8a:66:fb:7f:e7:ab:8b:77:ec:e9:3d:ca:7d:
         f3:43:38:93:a8:d8:2a:7e:5e:c1:da:8d:60:08:31:bc:cd:91:
         04:cb:a9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:38:12 2025 by rpki-client