This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/65fc0e2f-7026-32a9-8141-c71dda797fed.roa
File:                     65fc0e2f-7026-32a9-8141-c71dda797fed.roa (raw, json)
Hash identifier:          zi1xh6zas6+IhaPLb3PRQZEKkPXT0FeJq6uvi5CLlUM=
Subject key identifier:   2A:07:A3:2F:68:A9:93:A2:2B:2E:E3:A6:18:04:5D:E5:D1:42:06:6B
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584C109B974FE88F488354E8A978
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/65fc0e2f-7026-32a9-8141-c71dda797fed.roa
Signing time:             Wed 03 Dec 2025 14:00:38 +0000
ROA not before:           Wed 03 Dec 2025 14:00:38 +0000
ROA not after:            Tue 03 Mar 2026 14:00:38 +0000
asID:                     15318
IP address blocks:        206.167.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:10:9b:97:4f:e8:8f:48:83:54:e8:a9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Dec  3 14:00:38 2025 GMT
            Not After : Mar  3 14:00:38 2026 GMT
        Subject: CN=17f8d0f0-4bfc-460c-926c-8d07538afd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:bf:cb:90:69:83:19:45:33:e1:d6:9a:5d:
                    12:e9:60:5d:cd:37:3a:a6:25:36:49:b3:40:4b:d8:
                    f6:ad:8a:99:dc:04:5d:3d:46:09:77:07:63:2a:76:
                    cf:f0:dd:a4:22:e3:3d:65:a5:8b:76:f6:1c:49:2c:
                    48:0d:b6:b4:a8:3b:3f:be:f6:04:ff:4c:1c:1d:cd:
                    1f:46:4b:83:3d:1c:67:db:ab:50:6a:4a:e5:96:20:
                    63:b0:31:83:33:f0:ca:c6:35:31:2c:c6:ee:ec:72:
                    be:6d:b5:f4:56:65:4d:d2:0c:93:c3:25:41:ab:16:
                    a0:8a:87:f6:0f:21:b4:47:6e:ee:05:3a:4f:2e:b2:
                    be:cf:55:de:2b:17:e8:f7:c2:8e:97:e4:9a:b4:9e:
                    51:10:bc:74:27:b2:0c:15:53:2d:37:5c:5e:9a:bf:
                    5f:b6:1f:f5:c3:44:45:26:17:26:af:6b:56:51:cb:
                    1b:bd:f6:a4:24:04:75:80:ff:53:9c:78:2c:78:8b:
                    ea:b8:5f:e2:73:b4:03:69:0b:34:4a:b0:a8:b1:41:
                    dc:fe:23:e5:17:89:2a:85:f1:3b:a5:25:4b:5d:07:
                    e1:6a:b1:57:f5:0d:1b:b8:13:4f:c3:40:c1:83:f2:
                    55:07:0d:1b:78:2c:c8:45:e1:57:ff:50:16:48:cb:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:07:A3:2F:68:A9:93:A2:2B:2E:E3:A6:18:04:5D:E5:D1:42:06:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/65fc0e2f-7026-32a9-8141-c71dda797fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:58:29:c5:f9:1f:96:0d:40:7b:04:bf:d8:78:c6:43:77:
         99:b2:5c:a9:b9:67:c9:e4:f8:20:b3:cf:43:65:3c:74:9f:f9:
         99:82:2c:20:7b:c8:0a:f5:3e:bb:61:17:33:da:25:f8:a1:8d:
         e5:88:d3:9a:bd:a3:35:c1:7f:63:7f:68:18:c1:4a:ff:a1:22:
         67:c2:56:1a:dc:f4:4c:23:4a:a7:11:7c:44:b7:54:bf:1b:54:
         4f:38:b1:70:76:7f:93:5a:72:43:35:37:10:b3:19:41:41:35:
         1e:16:5e:30:21:2f:58:5d:09:d0:3e:42:37:c5:3b:a3:e4:07:
         35:4c:2c:69:50:ba:2e:e1:47:71:55:ee:93:d8:89:e2:02:e0:
         3e:09:d5:5c:69:5d:1e:13:8d:4b:43:a8:72:00:28:c9:3c:e7:
         30:93:8b:3a:95:a0:87:4e:a0:1d:33:06:09:29:0e:50:61:fe:
         66:7f:c1:dd:09:8f:64:40:1a:96:91:39:9c:52:fc:83:d5:04:
         69:e7:63:f0:c5:0b:77:0f:a6:8b:40:5c:5a:15:8e:d6:0f:79:
         73:be:15:05:24:00:fa:e8:d9:88:04:b4:6e:71:10:d2:34:a1:
         37:49:e0:6e:d2:d0:61:34:6d:ab:15:8a:fe:49:e9:89:73:8d:
         ba:a1:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:57 2025 by rpki-client