This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2219c2a3-ffae-3f25-b507-196d218742ba.roa
File:                     2219c2a3-ffae-3f25-b507-196d218742ba.roa (raw, json)
Hash identifier:          Y6vUNjikHpXQwFfP8JDmllcbasEI2sjfz2rrTlcaqXQ=
Subject key identifier:   AE:91:77:2D:8C:38:DC:30:B2:0B:71:21:4F:CC:80:4B:C6:5F:DC:5F
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584C109B972D38A5F1CF814D7760
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2219c2a3-ffae-3f25-b507-196d218742ba.roa
Signing time:             Wed 03 Dec 2025 14:00:38 +0000
ROA not before:           Wed 03 Dec 2025 14:00:38 +0000
ROA not after:            Tue 03 Mar 2026 14:00:38 +0000
asID:                     58212
IP address blocks:        65.87.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:10:9b:97:2d:38:a5:f1:cf:81:4d:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Dec  3 14:00:38 2025 GMT
            Not After : Mar  3 14:00:38 2026 GMT
        Subject: CN=68bacb52-5949-42e1-8b45-ac6f5f978320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:36:11:0b:3b:71:32:61:8f:c9:3a:67:6a:
                    a9:98:57:7b:b9:d9:75:ed:90:c3:68:00:9a:57:a9:
                    1a:0f:9b:fc:60:12:50:ff:8d:18:e0:80:cb:2b:e9:
                    5f:7f:78:e8:29:99:69:97:de:37:cc:f2:af:67:36:
                    a0:02:bd:15:41:70:1c:22:3a:22:e0:24:2f:32:d9:
                    be:b4:f5:85:5d:cb:89:1f:d9:c1:3e:45:92:cc:33:
                    be:5c:7f:f0:7a:8c:8c:b6:23:3f:fa:76:c9:e4:85:
                    fb:50:4f:36:79:07:b9:c9:53:89:90:a7:84:c7:cb:
                    6c:6b:60:d0:1c:c5:fb:b9:cf:15:fc:dc:8d:37:61:
                    10:b9:5f:93:2a:9a:ca:dd:a5:06:1b:d3:fe:e9:86:
                    4b:0f:fb:05:21:da:0b:b0:07:1b:b1:ad:ac:5c:a2:
                    c0:b7:9f:58:c3:92:ec:73:74:43:f6:eb:80:7b:fb:
                    ef:50:30:d0:ab:41:10:55:b8:70:04:61:ab:9f:82:
                    4f:83:7d:70:e4:c3:9c:9c:48:35:4f:34:d1:7d:78:
                    64:43:7b:b6:90:4e:c0:20:11:8d:bc:6e:5b:ec:e8:
                    db:d4:63:0b:cf:dd:34:80:35:90:bb:0a:72:00:ef:
                    8c:e3:2c:f2:ee:a6:20:2d:cb:30:1c:01:d3:bd:5c:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:91:77:2D:8C:38:DC:30:B2:0B:71:21:4F:CC:80:4B:C6:5F:DC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2219c2a3-ffae-3f25-b507-196d218742ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:6f:96:f8:6d:88:b6:86:bd:61:99:73:37:e0:79:bb:7c:
         81:35:34:d7:4e:97:85:2d:24:a8:fe:01:93:fc:35:45:cd:14:
         01:5e:72:3e:34:5b:0a:24:25:98:be:f3:9c:1e:ce:66:4d:78:
         c1:09:ae:d3:3f:4f:23:f8:3e:e1:85:26:bb:50:69:8f:c5:36:
         a5:28:1d:77:42:16:9b:4e:85:aa:d3:66:e5:6c:1f:5c:ca:4d:
         3a:58:ce:89:c0:75:33:82:f4:e4:c3:bd:78:ce:9c:ad:b8:bc:
         1a:b0:06:98:7a:ea:bd:79:13:1d:c7:2f:76:33:70:e1:1d:bf:
         79:dd:c2:94:5b:88:ae:27:f5:39:78:b9:4b:88:5d:ee:f0:47:
         55:0c:34:ab:41:95:a7:69:3c:18:29:19:fa:50:1d:f5:07:57:
         52:c1:25:77:67:36:06:8c:1e:5b:95:ac:f6:ee:23:0c:69:e4:
         b3:5a:78:b2:fd:af:04:9e:fa:55:e3:40:c3:65:03:6e:25:0e:
         87:c0:ed:1a:78:f1:9e:10:b0:9e:97:35:03:df:bc:8c:7b:4b:
         94:73:f7:ab:73:a6:0b:c1:4a:90:22:ac:05:00:6b:62:86:78:
         3d:1f:35:31:6f:8b:03:d1:3d:51:72:93:a5:96:87:b7:86:98:
         c7:a8:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:18:40 2025 by rpki-client