This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
File:                     8f83a025-4c20-3f17-8d78-fe614226ddcb.roa (raw, json)
Hash identifier:          pbvjMdX95S/sYeN8LyFrI6EjsmMCAIfgJXamH0dEE10=
Subject key identifier:   99:EC:FB:E5:A4:F5:3A:24:3E:A8:AA:1F:55:8A:D5:0D:8A:9B:9A:20
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584BEC5093D6E61254D4F84F1280
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
Signing time:             Thu 20 Nov 2025 14:00:39 +0000
ROA not before:           Thu 20 Nov 2025 14:00:39 +0000
ROA not after:            Wed 18 Feb 2026 14:00:39 +0000
asID:                     394285
IP address blocks:        68.68.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ec:50:93:d6:e6:12:54:d4:f8:4f:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Nov 20 14:00:39 2025 GMT
            Not After : Feb 18 14:00:39 2026 GMT
        Subject: CN=5a024bc3-4dfa-479c-93b2-e41a082ece62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:88:5a:05:43:0a:a2:0b:c1:9c:98:c9:62:
                    7b:0e:36:96:ce:c3:22:48:1a:d7:2f:f8:fc:db:7d:
                    c7:6c:65:aa:4f:cf:52:48:d8:ed:0a:a6:e1:bc:f5:
                    46:66:2f:80:4f:40:fc:18:9d:c0:2d:a1:9b:c5:d4:
                    c6:80:d1:e2:4f:69:9a:3f:2a:40:b8:46:27:82:aa:
                    1f:33:64:55:40:97:19:7b:1b:f7:af:79:72:a4:b6:
                    21:23:8f:d7:00:41:fa:13:fc:44:ab:fc:3f:51:cf:
                    37:89:12:34:87:4a:48:d7:41:90:c0:b2:b8:0a:5c:
                    04:97:96:1a:42:9b:99:00:22:ad:da:e9:d5:c0:c3:
                    99:a9:1a:6f:14:6a:6a:b5:93:75:73:44:8e:7d:54:
                    37:66:6a:b6:13:2e:b0:a4:0c:83:6a:20:7a:d4:7e:
                    ce:e4:c6:2c:f6:6f:9f:e7:81:e7:76:ef:88:7a:7e:
                    71:1e:a5:b3:2b:db:7c:f2:60:c4:65:ff:7f:d5:59:
                    c5:f3:c0:e1:77:7c:c5:4e:d9:50:68:c6:4a:91:60:
                    45:a0:4b:5a:c7:a3:e3:27:7c:8b:b8:9f:3e:b0:fe:
                    0f:d6:0b:1d:3e:7f:03:d1:e9:5e:5b:9c:70:9b:88:
                    a1:7e:cf:5b:cd:85:28:fa:4a:77:32:b0:82:5f:34:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:FB:E5:A4:F5:3A:24:3E:A8:AA:1F:55:8A:D5:0D:8A:9B:9A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:77:95:fe:75:88:d3:52:b7:b7:83:be:cd:5b:df:da:e2:cd:
         0e:d1:f3:83:33:db:7c:5f:36:4e:cb:24:4e:ef:bb:2f:31:a4:
         31:98:0d:9b:4f:05:c8:dc:40:4e:db:ea:43:94:6e:61:7b:2c:
         e6:74:f5:78:c9:11:c3:f7:44:4d:5e:23:05:3c:17:e9:45:42:
         4c:e4:59:ac:c2:a2:9d:71:1f:2a:4f:41:01:51:b5:53:0b:54:
         f8:66:cc:04:75:d8:b2:b6:65:0b:12:81:a8:d5:aa:2f:5a:27:
         ac:0a:07:98:6c:e9:fd:46:42:6f:b7:e9:03:26:dc:81:70:de:
         e7:2f:f0:a5:a8:ca:6a:15:40:77:89:24:62:73:4f:e3:7b:68:
         d0:01:a6:ac:af:97:46:10:0c:a0:e7:70:57:39:23:cc:6a:6b:
         0c:b8:08:cd:66:ac:ba:27:ca:1b:64:05:8e:0a:d3:86:51:f4:
         f6:cb:3b:68:3d:a7:28:b0:53:0a:c2:f0:d3:28:88:45:78:c8:
         4c:b1:b5:be:02:a3:62:64:95:7b:12:4e:57:19:07:5c:71:73:
         9d:c5:5e:80:90:81:03:20:44:32:11:e3:2c:63:34:dd:13:ff:
         a0:54:65:cb:5c:15:a8:f6:a5:91:bd:cf:ae:d8:42:71:bb:a4:
         57:fb:c6:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUJPW5hJU1PhPEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk
NWEwMjRiYzMtNGRmYS00NzljLTkzYjItZTQxYTA4MmVjZTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMKIWgVDCqILwZyYyWJ7DjaWzsMiSBrXL/j8
233HbGWqT89SSNjtCqbhvPVGZi+AT0D8GJ3ALaGbxdTGgNHiT2maPypAuEYngqof
M2RVQJcZexv3r3lypLYhI4/XAEH6E/xEq/w/Uc83iRI0h0pI10GQwLK4ClwEl5Ya
QpuZACKt2unVwMOZqRpvFGpqtZN1c0SOfVQ3Zmq2Ey6wpAyDaiB61H7O5MYs9m+f
54Hndu+Ien5xHqWzK9t88mDEZf9/1VnF88Dhd3zFTtlQaMZKkWBFoEtax6PjJ3yL
uJ8+sP4P1gsdPn8D0eleW5xwm4ihfs9bzYUo+kp3MrCCXzQxLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJns++Wk9TokPqiqH1WK1Q2Km5ogMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvOGY4M2EwMjUtNGMyMC0z
ZjE3LThkNzgtZmU2MTQyMjZkZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRESQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJp3lf51iNNSt7eDvs1b39rizQ7R84Mz23xfNk7LJE7vuy8xpDGYDZtP
BcjcQE7b6kOUbmF7LOZ09XjJEcP3RE1eIwU8F+lFQkzkWazCop1xHypPQQFRtVML
VPhmzAR12LK2ZQsSgajVqi9aJ6wKB5hs6f1GQm+36QMm3IFw3ucv8KWoymoVQHeJ
JGJzT+N7aNABpqyvl0YQDKDncFc5I8xqawy4CM1mrLonyhtkBY4K04ZR9PbLO2g9
pyiwUwrC8NMoiEV4yEyxtb4Co2JklXsSTlcZB1xxc53FXoCQgQMgRDIR4yxjNN0T
/6BUZctcFaj2pZG9z67YQnG7pFf7xgw=
-----END CERTIFICATE-----
Generated at Fri Dec 19 00:29:19 2025 by rpki-client