This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa
File:                     a667be05-da89-3b0e-afc3-248ea60a9fa2.roa (raw, json)
Hash identifier:          1OeNrLan67V3Klv8I+331Li+g1o0bhiQFVgC89ya87E=
Subject key identifier:   61:07:8A:97:70:C5:29:AA:8D:92:67:D2:83:B9:58:A3:87:53:07:D7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BFFDC00222F9674217528FB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa
Signing time:             Thu 27 Nov 2025 14:00:40 +0000
ROA not before:           Thu 27 Nov 2025 14:00:40 +0000
ROA not after:            Wed 25 Feb 2026 14:00:40 +0000
asID:                     22773
IP address blocks:        72.217.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ff:dc:00:22:2f:96:74:21:75:28:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Nov 27 14:00:40 2025 GMT
            Not After : Feb 25 14:00:40 2026 GMT
        Subject: CN=8ba5d291-c1c8-45cb-b48c-ec91d7cef4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:24:57:45:89:40:02:3b:7c:66:cb:99:9a:
                    2d:5c:89:5f:58:51:2e:08:14:73:1f:b4:66:7c:81:
                    06:bf:d2:ae:d2:ff:ad:d3:7a:d6:5b:26:2d:3e:81:
                    84:21:97:6f:59:9a:3f:3d:7c:e0:4d:5d:b0:b8:c2:
                    2a:2f:da:78:a8:37:78:7c:7c:0c:98:9a:5d:3c:da:
                    94:0c:b8:96:52:fe:41:00:8d:34:98:4f:c4:b4:e3:
                    f4:c0:67:7b:f5:8a:d9:88:1e:26:c8:b7:24:fd:03:
                    a8:0d:c8:fb:0d:ae:b1:80:2a:ff:fd:ec:99:d7:28:
                    50:2d:51:bd:5d:64:dc:89:c2:31:50:a8:c8:81:b6:
                    70:0b:3a:98:40:ca:d8:08:6e:b4:e8:e5:76:1c:29:
                    af:33:25:6f:0a:7a:eb:86:b9:cb:c3:4b:c5:21:c1:
                    b3:6e:9f:f5:ac:56:d0:ea:ae:d7:d2:6f:cd:9c:3b:
                    91:85:85:a2:7a:ea:8b:ca:ce:57:08:c7:a9:b5:37:
                    c8:a8:ef:7d:05:b4:bf:14:b9:18:72:28:0a:ff:87:
                    8a:a3:05:ea:5d:4b:10:db:03:6a:93:ea:74:ce:0f:
                    05:ec:39:74:b3:61:3f:58:ab:19:af:51:02:18:c9:
                    d0:67:1d:8f:83:ad:a1:fc:6f:dc:7e:22:80:37:01:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:8A:97:70:C5:29:AA:8D:92:67:D2:83:B9:58:A3:87:53:07:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.217.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ce:1c:79:9e:23:02:34:36:f8:1c:35:ee:1b:78:ee:83:a8:
         97:ab:2d:9e:08:fe:55:77:7f:9f:3a:3b:62:ed:23:4d:ab:9e:
         9a:b4:73:2a:5c:7b:b0:8b:2f:27:75:7d:42:c4:f5:7c:ff:02:
         dc:ed:30:8d:e0:48:0d:c0:8a:0f:55:9d:cd:6c:06:f8:a4:a1:
         78:79:a8:a9:f4:1f:b7:e8:8e:28:b3:18:81:de:bf:4a:50:df:
         cc:26:d2:43:0c:ed:ee:7d:59:74:8c:44:9c:e6:8a:85:e9:a3:
         58:13:ce:ca:4c:c7:de:c3:cc:74:56:10:54:32:01:21:13:96:
         3b:ad:ba:78:9f:ed:b5:f9:19:26:62:d3:2d:59:23:f3:59:26:
         13:25:37:6e:3c:c5:c9:50:94:61:ba:6a:12:c8:17:2a:66:49:
         12:5c:c8:b7:48:df:dc:dd:ac:bf:1a:3a:28:fa:bc:f6:79:5b:
         78:a0:1c:7f:0d:aa:10:e5:d4:2d:8f:f8:3b:04:3d:70:81:f2:
         16:e6:fd:cc:01:bf:87:e1:fa:4c:d5:c0:c7:fa:66:cf:79:9f:
         25:f5:0c:67:b3:93:ae:26:77:94:21:ae:f7:33:56:34:95:22:
         8f:9e:22:f1:f5:f2:3f:75:f2:c6:f6:5f:c4:ad:21:69:92:18:
         6c:d9:f2:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AAiL5Z0IXUo+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk
OGJhNWQyOTEtYzFjOC00NWNiLWI0OGMtZWM5MWQ3Y2VmNGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/skV0WJQAI7fGbLmZotXIlfWFEuCBRzH7Rm
fIEGv9Ku0v+t03rWWyYtPoGEIZdvWZo/PXzgTV2wuMIqL9p4qDd4fHwMmJpdPNqU
DLiWUv5BAI00mE/EtOP0wGd79YrZiB4myLck/QOoDcj7Da6xgCr//eyZ1yhQLVG9
XWTcicIxUKjIgbZwCzqYQMrYCG606OV2HCmvMyVvCnrrhrnLw0vFIcGzbp/1rFbQ
6q7X0m/NnDuRhYWieuqLys5XCMeptTfIqO99BbS/FLkYcigK/4eKowXqXUsQ2wNq
k+p0zg8F7Dl0s2E/WKsZr1ECGMnQZx2Pg62h/G/cfiKANwHBvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEHipdwxSmqjZJn0oO5WKOHUwfXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2N2JlMDUtZGE4OS0z
YjBlLWFmYzMtMjQ4ZWE2MGE5ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzOHHmeIwI0NvgcNe4beO6DqJerLZ4I/lV3f586O2LtI02rnpq0cypc
e7CLLyd1fULE9Xz/AtztMI3gSA3Aig9Vnc1sBvikoXh5qKn0H7fojiizGIHev0pQ
38wm0kMM7e59WXSMRJzmioXpo1gTzspMx97DzHRWEFQyASETljutunif7bX5GSZi
0y1ZI/NZJhMlN248xclQlGG6ahLIFypmSRJcyLdI39zdrL8aOij6vPZ5W3igHH8N
qhDl1C2P+DsEPXCB8hbm/cwBv4fh+kzVwMf6Zs95nyX1DGezk64md5QhrvczVjSV
Io+eIvH18j918sb2X8StIWmSGGzZ8ug=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:15:51 2025 by rpki-client