This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4e03fbd6-9da0-35cd-92e8-cc534f82ea65.roa
File:                     4e03fbd6-9da0-35cd-92e8-cc534f82ea65.roa (raw, json)
Hash identifier:          GW6GZjYaA8VhXYkKdaJu2LLLO93/p9EG7WKipJyPHNo=
Subject key identifier:   29:A0:0F:B6:8F:2C:3B:4C:3C:00:95:96:A3:52:90:FE:CE:BE:D6:97
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584C242695B880B05D450221FC20
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4e03fbd6-9da0-35cd-92e8-cc534f82ea65.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     10794
IP address blocks:        171.159.208.0/20 maxlen: 20
                          171.159.208.0/24 maxlen: 24
                          171.159.209.0/24 maxlen: 24
                          171.159.210.0/23 maxlen: 23
                          171.159.210.0/24 maxlen: 24
                          171.159.211.0/24 maxlen: 24
                          171.159.212.0/22 maxlen: 22
                          171.159.212.0/24 maxlen: 24
                          171.159.213.0/24 maxlen: 24
                          171.159.214.0/24 maxlen: 24
                          171.159.215.0/24 maxlen: 24
                          171.159.216.0/24 maxlen: 24
                          171.159.217.0/24 maxlen: 24
                          171.159.218.0/23 maxlen: 23
                          171.159.218.0/24 maxlen: 24
                          171.159.219.0/24 maxlen: 24
                          171.159.220.0/24 maxlen: 24
                          171.159.221.0/24 maxlen: 24
                          171.159.222.0/24 maxlen: 24
                          171.159.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:95:b8:80:b0:5d:45:02:21:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=8c477919-853a-4e64-b9c4-91a07f097d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:a5:56:75:8c:5c:40:81:df:1e:67:50:8f:
                    74:bd:df:d0:02:51:cd:7a:cc:af:b7:7e:10:16:a6:
                    93:c7:93:1b:8d:13:99:24:83:d0:fc:63:a8:61:d0:
                    d9:5d:5c:5a:c4:3c:80:a6:4e:56:58:d0:1f:a6:b7:
                    d8:da:ef:be:1a:be:2b:c1:3c:3f:94:d2:c8:1c:52:
                    9a:b5:fb:e6:78:81:89:8d:e6:0c:ca:a1:f9:d3:83:
                    dd:8f:6f:45:61:5d:c2:a6:e9:fe:39:81:ba:7a:8a:
                    47:d4:12:29:fe:fc:62:67:8d:79:4d:9a:4b:17:4f:
                    b3:8d:da:09:a0:04:5d:5a:39:11:8e:a0:1b:f6:aa:
                    21:f0:66:fb:07:74:15:a2:7a:96:e9:a0:0b:6a:67:
                    b9:cc:03:46:6c:b8:f5:ac:ac:f7:a4:89:91:76:3d:
                    68:ca:90:ee:f9:30:ef:6e:d0:49:81:04:d1:aa:5e:
                    7a:55:5f:7d:6c:a1:05:72:b6:25:b8:ab:01:76:0a:
                    ff:f5:86:a5:5f:b4:aa:17:17:0e:3e:71:27:38:68:
                    4c:95:55:91:9d:88:c7:be:82:41:aa:9a:de:cd:71:
                    7b:fe:a3:71:68:53:87:a1:04:ce:60:36:7f:3b:61:
                    55:89:e7:15:21:1c:16:bc:83:1b:78:ea:e3:69:72:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:0F:B6:8F:2C:3B:4C:3C:00:95:96:A3:52:90:FE:CE:BE:D6:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4e03fbd6-9da0-35cd-92e8-cc534f82ea65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.159.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:12:86:da:d8:f0:8d:3b:ad:96:7d:c4:05:c1:d8:f6:c5:
         cf:7a:39:ff:20:32:e1:b6:79:c0:4b:a2:43:bf:73:37:d5:d5:
         2a:be:53:4f:14:f6:95:a8:c3:f5:a2:73:0b:0d:89:23:3b:73:
         7c:1c:0a:7f:5d:51:fd:5e:20:43:4c:b3:a0:68:da:64:eb:80:
         fd:ca:c0:5f:94:d9:df:2b:f0:2c:cd:8a:c2:fc:12:f3:6f:bc:
         49:e9:df:8c:03:3f:1c:6d:0c:b1:3b:b4:f0:4f:64:4a:62:19:
         d9:41:4d:99:d0:19:3e:b2:fb:c6:0e:a2:31:61:dc:02:d3:24:
         4c:cf:43:7d:bd:b1:60:73:e6:a4:53:60:de:d4:61:fd:94:2c:
         50:81:0e:8f:b9:80:fc:52:54:a5:c2:17:9e:6b:b7:7e:36:54:
         b9:9a:26:64:f1:b3:73:3c:c5:50:66:a4:f7:7a:b9:b7:d5:0f:
         71:a6:57:f9:78:b2:b9:1a:71:c7:d4:50:3f:e4:4f:8e:41:89:
         cc:38:c1:a1:1d:76:39:5f:e0:db:59:f9:41:14:c3:93:22:bd:
         b8:81:11:82:89:b9:31:d0:10:c6:d3:b5:c1:75:fa:31:bb:59:
         25:37:2b:2d:c9:d1:a7:fe:a7:85:74:ed:57:82:6d:d4:ba:d1:
         e3:e8:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:22:11 2025 by rpki-client