This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa
File:                     443219a0-efe0-327e-b60e-0844a2070c85.roa (raw, json)
Hash identifier:          z4yWAszsVHVzSVSL3DlMA7moVLi6Xujia/Z50C8M4YQ=
Subject key identifier:   A4:4F:5A:45:DE:0C:B8:AB:6A:16:A7:6A:3F:DF:60:37:78:9D:BB:AF
Certificate issuer:       /CN=60853e5b-d7a9-4bc8-8250-635257ad49bd
Certificate serial:       010D0C9F4328584BC53AFF397409789C9C9E6800
Authority key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     11996
IP address blocks:        192.189.147.0/24 maxlen: 24
                          207.251.48.0/20 maxlen: 24
                          208.64.92.0/22 maxlen: 24
                          216.243.96.0/20 maxlen: 24
                          2605:6800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3a:ff:39:74:09:78:9c:9c:9e:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=52970491-334f-4481-9bca-00c8f36acc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:11:d1:74:8d:a4:ed:e8:f9:04:89:3c:f1:
                    22:53:99:77:bf:37:98:31:91:be:cd:0a:ab:99:13:
                    3e:ab:b4:14:3c:f0:1b:6b:6d:55:f4:ca:f0:c8:b4:
                    4a:74:47:e6:c6:81:3c:aa:8b:47:61:2a:0a:4e:df:
                    02:37:a6:1a:4e:52:9f:fd:9c:37:43:54:77:37:19:
                    82:12:a6:f2:b3:3e:47:eb:a7:b4:6e:cd:bd:cf:56:
                    95:7c:83:41:7e:f4:54:4a:da:bc:72:af:4e:78:ce:
                    06:21:25:13:d6:6b:1f:c3:f6:25:d3:7a:60:f0:87:
                    60:ba:e4:9c:d8:c0:00:4c:f3:e1:cb:8a:e3:fb:96:
                    e0:ac:97:f5:bc:4b:8e:3d:99:c9:e4:7a:96:1b:4e:
                    bc:d3:72:c5:5e:04:4e:5b:11:fa:94:54:d1:52:89:
                    2d:54:5c:de:5a:0d:b1:b2:55:de:59:39:e2:c4:6b:
                    90:d3:f3:9a:59:d8:25:62:1e:ce:a7:85:8c:94:a6:
                    e0:e0:96:40:c6:b4:3a:80:7c:de:03:0d:61:5e:0b:
                    93:eb:99:88:81:12:96:24:d7:4d:d3:89:45:d1:75:
                    f5:87:e4:82:3a:44:68:7d:6a:8b:80:22:8f:77:f0:
                    17:14:cd:9f:5a:72:fe:1d:d4:82:50:01:c2:67:fe:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4F:5A:45:DE:0C:B8:AB:6A:16:A7:6A:3F:DF:60:37:78:9D:BB:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.147.0/24
                  207.251.48.0/20
                  208.64.92.0/22
                  216.243.96.0/20
                IPv6:
                  2605:6800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:23:f7:27:1e:58:b5:cb:09:46:68:8a:73:1b:ee:03:86:
         2a:7f:06:01:7e:35:99:87:e8:7f:be:a2:ca:b7:fd:ee:bc:88:
         4d:b5:80:e0:2d:3d:b5:0d:0b:bb:4d:f4:6b:50:39:71:21:b5:
         d4:9e:a6:ae:88:27:f9:11:e9:72:40:34:7c:6e:42:95:00:45:
         12:1c:f4:9b:6f:66:96:d9:ce:59:07:42:c6:e9:e2:c4:6e:2c:
         04:2c:98:ac:f9:58:20:fd:30:68:5e:c6:8e:88:22:b5:82:54:
         7e:ee:b9:4b:49:17:34:62:f8:86:b6:99:57:65:25:53:62:30:
         67:33:27:9b:7a:3f:98:7c:a7:ee:e5:ec:11:9f:dd:1d:39:07:
         2b:05:54:c1:ee:78:83:97:86:ab:b8:92:6e:38:f3:5e:6c:fc:
         e4:5e:2b:49:0d:b1:4e:ec:33:77:d9:58:28:64:7b:b7:8a:20:
         77:1d:2a:69:1d:d7:2f:89:89:7a:81:ba:0d:75:81:b8:3f:a4:
         57:8f:8f:77:50:0d:17:77:c2:dc:b7:c7:26:0a:d7:19:34:fe:
         d8:4a:d4:ca:d5:6c:31:fd:ef:b4:fe:3a:d0:6c:ac:84:46:34:
         3f:4d:fa:c6:15:8b:76:38:18:fa:73:dd:97:48:41:2c:80:2e:
         b5:d6:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:14 2025 by rpki-client