This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa
File:                     5ccc738a-4d60-307a-b635-bbfa03724c5e.roa (raw, json)
Hash identifier:          Mct3IwnDGFd1TxNIqpYXcw3tTNqHULlA43zPKKt8uDo=
Subject key identifier:   D3:C6:D2:9A:2A:A7:0C:0B:FF:41:A0:5C:54:34:38:36:0D:6C:CC:F7
Certificate issuer:       /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
Certificate serial:       010D0C9F4328584C083B5B2B06A425BA99B61800
Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa
Signing time:             Sun 30 Nov 2025 14:00:39 +0000
ROA not before:           Sun 30 Nov 2025 14:00:39 +0000
ROA not after:            Sat 28 Feb 2026 14:00:39 +0000
asID:                     19504
IP address blocks:        64.6.112.0/20 maxlen: 24
                          66.109.112.0/21 maxlen: 24
                          68.171.176.0/20 maxlen: 24
                          104.200.208.0/21 maxlen: 24
                          206.168.16.0/20 maxlen: 24
                          216.122.152.0/21 maxlen: 24
                          216.147.224.0/20 maxlen: 24
                          2604:1c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:08:3b:5b:2b:06:a4:25:ba:99:b6:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
        Validity
            Not Before: Nov 30 14:00:39 2025 GMT
            Not After : Feb 28 14:00:39 2026 GMT
        Subject: CN=c358852a-6ae8-44b1-b501-8e4dd0bedaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:4a:9c:c4:b1:25:db:2f:ea:de:ff:14:ea:
                    38:e0:72:65:10:dc:af:2e:56:0f:c2:a7:67:be:2d:
                    00:10:ce:36:1e:91:d7:07:fe:3b:2b:a8:df:56:25:
                    fc:26:a5:5a:48:f4:9e:9f:35:ec:de:50:ea:ed:b5:
                    2c:4b:28:2e:c2:03:7b:f2:c0:a8:be:6c:c4:18:04:
                    2e:b1:81:17:43:60:ac:b7:d7:da:44:b4:e2:8c:b4:
                    a1:31:45:58:bc:66:0c:1f:40:61:29:7a:0b:f1:bf:
                    08:f3:bb:c3:91:73:18:b3:02:4b:af:a2:c7:07:a1:
                    1e:da:94:8e:57:35:d6:75:dc:40:54:48:13:b6:a4:
                    59:f3:94:c2:e7:14:22:48:2d:07:b3:e2:a0:ce:24:
                    dd:2a:a8:9d:6c:21:ed:2e:b4:26:4a:70:13:0f:55:
                    45:cc:87:45:2f:bc:93:6f:8c:05:85:a6:26:52:ab:
                    fa:f1:eb:92:5e:76:3b:36:3b:41:82:3a:bc:d1:8a:
                    5f:e1:fc:c1:a0:7e:2f:b6:82:eb:55:3c:e6:bd:66:
                    8c:45:f9:23:2d:d8:4a:c6:28:c3:13:a7:7c:cc:30:
                    4b:39:7a:c6:36:18:cf:44:cd:10:d1:43:0f:31:b5:
                    a4:a1:8a:5a:89:54:e2:d0:f9:72:ed:33:be:03:e0:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C6:D2:9A:2A:A7:0C:0B:FF:41:A0:5C:54:34:38:36:0D:6C:CC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl

            X509v3 Authority Key Identifier:
                keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.112.0/20
                  66.109.112.0/21
                  68.171.176.0/20
                  104.200.208.0/21
                  206.168.16.0/20
                  216.122.152.0/21
                  216.147.224.0/20
                IPv6:
                  2604:1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:83:ff:4e:9c:bc:2f:55:67:07:f0:4d:5c:ea:6e:28:aa:9a:
         f7:92:ff:97:3e:8a:4a:9d:a7:81:cd:9e:7d:9b:ad:b3:9a:f9:
         27:01:cd:46:b2:3e:03:46:f6:70:ae:6a:5b:d4:2f:ae:d4:e8:
         58:0a:00:49:ba:f6:60:07:97:16:48:af:91:63:ff:16:3a:3b:
         c5:1a:b1:47:db:de:d6:96:a5:83:1c:34:76:7d:25:d1:8c:e4:
         93:a8:3c:96:c2:ea:fb:ae:97:15:c2:b9:33:38:dd:eb:4e:b3:
         f7:89:43:ca:5d:61:59:b9:7c:8e:0b:91:cf:3c:fc:d2:d3:77:
         ca:bc:45:54:0f:fc:ef:e1:78:41:04:04:12:19:48:6b:fe:d5:
         53:1c:b6:d9:bd:9c:10:ce:56:d8:11:f8:bf:47:ef:de:95:f7:
         b4:62:b7:60:e3:0c:9c:78:d5:b8:69:d5:3f:89:5e:d7:c5:2c:
         9c:f4:13:8e:e3:8b:ec:3a:0d:9b:6e:16:72:9e:79:98:72:7c:
         d3:01:de:4b:7b:1f:fc:8c:4c:84:5a:be:8c:e7:b8:39:ad:32:
         ca:e1:6c:50:fe:37:e0:20:ae:a1:7d:e6:0f:b5:51:6b:23:14:
         89:c8:e2:ab:be:12:20:67:38:a5:74:15:25:13:ae:6f:c5:a9:
         98:a0:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:20 2025 by rpki-client