This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/63b3751d-28a6-3690-ba92-b64284a64a6d.roa
File:                     63b3751d-28a6-3690-ba92-b64284a64a6d.roa (raw, json)
Hash identifier:          Qh35YTHuRIAMSajBw3I1FvYE/MkxWDDOA0u7r4RTLS8=
Subject key identifier:   6C:E7:05:FC:1A:62:F1:D5:9A:A1:90:CF:E9:1A:6C:C7:8D:3D:9D:A4
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584C0140F9748D0913506C13C500
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/63b3751d-28a6-3690-ba92-b64284a64a6d.roa
Signing time:             Fri 28 Nov 2025 02:00:30 +0000
ROA not before:           Fri 28 Nov 2025 02:00:30 +0000
ROA not after:            Thu 26 Feb 2026 02:00:30 +0000
asID:                     2914
IP address blocks:        65.87.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:01:40:f9:74:8d:09:13:50:6c:13:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Nov 28 02:00:30 2025 GMT
            Not After : Feb 26 02:00:30 2026 GMT
        Subject: CN=c7f9c6ef-4e42-4838-8b31-78046fa040b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:f2:ad:66:63:88:fa:d8:8b:89:03:dc:97:
                    5b:69:f8:62:c5:c9:c3:99:d9:d9:32:c5:98:ce:68:
                    4c:66:9d:66:48:8c:27:e6:29:1f:04:d9:c7:17:ef:
                    5c:37:01:55:67:91:00:d0:3b:91:8f:54:22:e1:ec:
                    49:21:39:08:c2:53:01:ce:91:f9:73:d3:e9:21:b5:
                    c0:79:46:63:1e:7b:db:83:36:c9:34:6a:92:45:bf:
                    97:a6:e3:05:22:4b:44:1a:29:8c:a1:f0:d3:e1:0e:
                    e1:a3:5c:fa:eb:30:9b:81:60:be:9f:5e:de:ab:92:
                    1a:42:88:bf:c7:bf:55:d4:a9:05:e1:d3:ec:62:52:
                    0e:72:d3:af:af:43:2f:34:29:4c:6d:53:66:82:09:
                    ea:7a:6d:b6:69:b5:04:ec:22:bc:bc:5e:30:ca:0d:
                    10:c0:8e:e5:19:02:7c:72:38:05:f2:ab:a3:ae:fe:
                    8e:d4:37:51:a8:1a:9d:37:e2:31:8c:9f:9f:81:86:
                    7f:44:81:c1:5a:06:88:40:14:dd:0a:44:6d:c1:83:
                    6e:c4:89:5c:dc:93:7f:39:91:e9:78:48:28:47:b0:
                    aa:e0:43:a8:eb:39:d0:56:6c:02:e5:fd:d9:7f:9a:
                    3b:e1:83:01:0a:f8:f0:40:7e:62:ba:fe:5d:18:27:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E7:05:FC:1A:62:F1:D5:9A:A1:90:CF:E9:1A:6C:C7:8D:3D:9D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/63b3751d-28a6-3690-ba92-b64284a64a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:45:ff:3b:16:ee:c2:10:34:be:71:ac:56:cd:1e:1f:7c:28:
         1b:10:78:0f:67:3d:30:10:8f:0d:ed:7b:50:f4:df:e9:15:c4:
         e9:e7:5c:a8:82:4b:da:48:46:1d:bb:87:98:ff:f5:3e:ee:89:
         83:11:bd:3a:e3:f0:5b:e5:41:18:01:38:f4:57:a4:a1:71:50:
         b7:50:3a:5a:f0:0f:4e:e0:af:c9:ab:a8:7b:a2:dd:d8:e2:ee:
         0a:89:c8:cb:8f:c4:b2:df:54:65:60:6b:5c:60:06:94:51:38:
         63:ff:31:98:99:3a:81:31:60:d4:7d:00:e8:30:46:ae:d0:42:
         86:49:8c:3e:1c:01:df:a7:88:09:71:e4:99:ce:c3:fd:a7:85:
         95:40:9b:1a:9b:02:d3:2e:1e:ac:9c:32:fa:b6:35:32:20:d6:
         74:a1:ac:93:b2:20:70:ba:2f:24:82:c7:06:19:de:a4:d0:17:
         87:19:b4:6b:2b:34:58:97:12:ae:a5:de:a9:7d:6f:9a:b3:a6:
         dc:ab:23:a9:93:6b:6a:e7:61:b4:df:c9:e6:fb:28:32:5e:b3:
         94:ce:8e:fd:88:ea:c3:cc:9e:45:d0:d4:ba:3c:39:05:db:bf:
         f9:92:ee:55:2e:58:30:15:de:98:55:ee:31:9c:0c:18:0e:31:
         53:51:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:55 2025 by rpki-client