This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa
File:                     da1134b4-14a8-3573-ade1-c42f592a22ce.roa (raw, json)
Hash identifier:          WCwfbhzKsY2YwXTAACTRQn4PT4KL3+1LJ4f7Le7pZFY=
Subject key identifier:   B3:2D:C2:14:9A:19:42:12:F5:91:C1:8A:EC:B7:05:7D:3A:33:87:53
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584BEDB5C98432BB5F5CF799C080
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa
Signing time:             Fri 21 Nov 2025 02:00:30 +0000
ROA not before:           Fri 21 Nov 2025 02:00:30 +0000
ROA not after:            Thu 19 Feb 2026 02:00:30 +0000
asID:                     13414
IP address blocks:        209.237.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ed:b5:c9:84:32:bb:5f:5c:f7:99:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Nov 21 02:00:30 2025 GMT
            Not After : Feb 19 02:00:30 2026 GMT
        Subject: CN=a12c97d4-967c-48fb-b926-1f970e4c67bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:99:a0:60:15:09:a2:77:53:1e:81:bf:70:66:
                    cb:23:4c:61:75:d4:dc:63:c3:82:26:ff:12:38:67:
                    85:43:55:cd:5b:6e:ad:84:8b:c6:34:31:0b:d2:f8:
                    55:f7:ce:11:6f:01:51:1e:1d:85:ca:89:b5:33:5e:
                    a0:85:b0:37:a3:92:d5:83:5b:5d:d9:a6:0b:3c:2f:
                    7d:c0:53:fc:a7:6d:bf:f4:e1:f8:3e:82:24:b4:3f:
                    3c:53:45:81:25:17:38:72:d8:79:4d:39:46:63:57:
                    84:27:59:11:ae:a1:fd:da:0b:b7:42:79:37:e7:d5:
                    b5:fb:36:f8:ba:19:c1:0d:40:14:b2:9e:a5:da:3a:
                    f0:25:58:d8:eb:f3:80:83:83:f7:d1:69:aa:f5:5b:
                    9e:d0:e6:d6:f2:f2:dc:85:0d:e9:a7:cb:43:60:af:
                    75:7a:96:70:f8:9b:3c:60:f2:4a:eb:45:2c:8c:6c:
                    6e:33:2c:a9:0b:01:dd:d9:9f:16:54:7c:e9:a0:c1:
                    b1:c7:66:53:ee:af:91:70:56:55:36:cd:31:a7:4c:
                    8b:03:b2:08:d5:3e:71:36:51:28:21:7d:51:80:23:
                    68:a0:fe:ed:9a:55:68:a5:ae:03:ae:72:ba:61:f9:
                    1f:a9:98:e1:38:b4:ee:b7:b5:d3:ae:7d:81:06:48:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2D:C2:14:9A:19:42:12:F5:91:C1:8A:EC:B7:05:7D:3A:33:87:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:69:e1:90:7b:b0:8f:d8:b8:f7:ef:de:81:d0:2e:bd:1a:
         6e:1a:d7:53:1a:89:dc:17:72:e3:c8:16:89:c2:b3:ef:f3:24:
         11:41:70:43:36:ee:ed:0e:d6:a2:5f:cc:74:9f:bf:8c:72:bf:
         92:6b:28:6e:af:05:0f:d4:fe:46:d1:ce:16:82:59:4a:c4:79:
         97:c4:10:b8:02:34:20:23:9b:84:66:63:59:d6:b1:c8:9c:f2:
         cc:33:d6:2a:f7:af:db:06:f8:00:73:06:0f:61:60:77:1a:f8:
         58:40:38:c1:2a:ed:1f:fb:0a:76:16:5b:42:a1:6e:ed:94:ae:
         5b:88:ed:c6:05:97:6c:ca:f6:9c:40:2c:bc:f5:4f:16:34:73:
         b1:d2:5a:71:dc:24:15:78:bb:da:50:42:98:d7:94:3e:de:a5:
         46:81:6c:2b:a3:3e:10:31:10:c7:c4:8c:95:88:51:ae:89:b3:
         4a:02:70:c1:99:b2:be:e1:ed:f2:03:d6:d9:e9:45:ce:4a:d4:
         29:da:0b:bd:b1:00:c3:02:f6:84:cf:70:07:cb:fc:a4:77:1a:
         f0:c9:9d:d4:aa:35:57:4d:e7:e5:80:bf:98:c0:e8:38:bb:91:
         d5:56:0c:b5:d5:30:b4:3b:82:fa:ef:88:44:15:58:8f:ef:83:
         74:3d:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:19:10 2025 by rpki-client