This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/eed438f2-16c2-35d5-8d1e-0f64f2e3f93a.roa
File:                     eed438f2-16c2-35d5-8d1e-0f64f2e3f93a.roa (raw, json)
Hash identifier:          GSSNoOoD+X9xoaGJBS+dM/eH5ok7VOQdRsklSoaiFUs=
Subject key identifier:   69:69:DF:19:5A:62:F4:FE:1F:32:BE:45:F3:B1:DC:2D:10:1B:92:5C
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584C24269436887E8F43520EF600
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/eed438f2-16c2-35d5-8d1e-0f64f2e3f93a.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     10794
IP address blocks:        171.192.0.0/20 maxlen: 20
                          171.192.0.0/24 maxlen: 24
                          171.192.1.0/24 maxlen: 24
                          171.192.2.0/24 maxlen: 24
                          171.192.3.0/24 maxlen: 24
                          171.192.4.0/24 maxlen: 24
                          171.192.5.0/24 maxlen: 24
                          171.192.6.0/24 maxlen: 24
                          171.192.7.0/24 maxlen: 24
                          171.192.8.0/24 maxlen: 24
                          171.192.9.0/24 maxlen: 24
                          171.192.10.0/24 maxlen: 24
                          171.192.11.0/24 maxlen: 24
                          171.192.12.0/24 maxlen: 24
                          171.192.13.0/24 maxlen: 24
                          171.192.14.0/24 maxlen: 24
                          171.192.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:94:36:88:7e:8f:43:52:0e:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=121ea0ee-dec8-4881-9355-87d2712b7a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:74:c0:37:de:18:fb:80:b9:0f:d3:0a:c7:
                    e2:c8:17:bb:55:14:e7:5a:1f:a1:16:a7:f2:13:59:
                    8c:6f:d7:a7:5c:fe:e0:98:f7:bc:87:75:c3:e0:8a:
                    89:21:8e:ec:31:e3:e4:c8:f8:5a:02:3d:ab:af:8f:
                    3d:48:48:bd:94:24:1c:05:74:80:32:aa:70:49:10:
                    75:c0:02:fd:d3:3c:aa:c2:51:e6:ad:29:2b:47:6b:
                    2c:31:83:5f:e6:c9:72:ae:9d:88:5c:df:07:ed:cc:
                    c5:f7:6f:67:57:84:ae:3f:58:e9:aa:15:4b:8f:f2:
                    1b:53:db:e4:72:09:42:4b:94:5b:bb:c6:de:b3:db:
                    30:63:1a:bd:ec:90:8c:82:09:9d:e4:b2:30:e8:17:
                    a2:e6:91:31:5b:67:e9:be:0b:97:17:e0:d4:81:76:
                    65:78:98:33:7c:60:e4:0c:ce:3e:39:86:42:06:d6:
                    6b:4e:2b:cb:0f:56:dd:ab:e8:4e:4b:40:20:d2:bc:
                    ea:4b:a3:2a:48:0a:8a:c0:56:32:d2:a1:31:1e:0a:
                    76:df:36:09:b7:96:fd:5f:95:98:ba:68:e1:5a:16:
                    ba:c9:e9:57:91:6c:a3:41:5b:6f:b0:79:3d:63:f1:
                    27:99:5b:21:cd:68:96:ee:31:30:d7:0e:a6:c5:df:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:69:DF:19:5A:62:F4:FE:1F:32:BE:45:F3:B1:DC:2D:10:1B:92:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/eed438f2-16c2-35d5-8d1e-0f64f2e3f93a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.192.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:15:38:4e:c7:40:a8:41:41:00:cf:58:4b:e2:fe:12:ac:
         f3:0c:a8:f7:24:36:f0:03:11:8f:6b:42:e7:14:82:3c:71:6f:
         0c:39:f3:a0:6f:a3:1f:d7:a8:1b:58:17:69:48:72:25:fe:25:
         d4:79:af:a5:83:34:38:7c:25:fe:f7:83:dd:1a:ba:4b:7f:8b:
         87:86:33:70:9b:1b:c6:04:66:86:9a:23:31:f8:c9:67:7f:c7:
         14:ca:f4:9f:9a:19:eb:0c:bd:79:71:f9:e2:69:40:5d:0c:55:
         eb:98:03:0d:3d:90:ed:e7:b5:c1:77:7b:16:f9:f9:3a:e7:64:
         e5:24:2a:51:da:94:fa:39:e1:94:1f:c6:8d:d2:4f:3d:08:b7:
         6f:9c:cc:29:d8:e0:bb:34:b4:2f:55:61:07:f1:d1:8d:9a:fe:
         44:77:17:ff:64:da:59:25:78:09:63:79:62:6e:84:af:21:99:
         2d:82:c4:e2:ea:64:5f:7f:08:ba:6b:e9:91:42:a0:4a:3c:11:
         d6:75:a8:bc:f9:66:21:e8:86:5d:5b:20:3e:0d:46:5b:11:02:
         0d:48:96:e7:ae:7e:57:4d:fd:47:05:46:a6:70:8b:3f:b2:0c:
         7d:bd:74:9a:25:d8:4c:53:3f:87:fb:7d:c1:8f:99:00:e6:db:
         c5:35:58:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJpQ2iH6PQ1IO9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk
MTIxZWEwZWUtZGVjOC00ODgxLTkzNTUtODdkMjcxMmI3YTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv10wDfeGPuAuQ/TCsfiyBe7VRTnWh+hFqfy
E1mMb9enXP7gmPe8h3XD4IqJIY7sMePkyPhaAj2rr489SEi9lCQcBXSAMqpwSRB1
wAL90zyqwlHmrSkrR2ssMYNf5slyrp2IXN8H7czF929nV4SuP1jpqhVLj/IbU9vk
cglCS5Rbu8bes9swYxq97JCMggmd5LIw6Bei5pExW2fpvguXF+DUgXZleJgzfGDk
DM4+OYZCBtZrTivLD1bdq+hOS0Ag0rzqS6MqSAqKwFYy0qExHgp23zYJt5b9X5WY
umjhWha6yelXkWyjQVtvsHk9Y/EnmVshzWiW7jEw1w6mxd/cJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlp3xlaYvT+HzK+RfOx3C0QG5JcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZWVkNDM4ZjItMTZjMi0z
NWQ1LThkMWUtMGY2NGYyZTNmOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEq8AAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkuFThOx0CoQUEAz1hL4v4SrPMMqPckNvADEY9rQucUgjxxbww586Bv
ox/XqBtYF2lIciX+JdR5r6WDNDh8Jf73g90aukt/i4eGM3CbG8YEZoaaIzH4yWd/
xxTK9J+aGesMvXlx+eJpQF0MVeuYAw09kO3ntcF3exb5+TrnZOUkKlHalPo54ZQf
xo3STz0It2+czCnY4Ls0tC9VYQfx0Y2a/kR3F/9k2lkleAljeWJuhK8hmS2CxOLq
ZF9/CLpr6ZFCoEo8EdZ1qLz5ZiHohl1bID4NRlsRAg1IlueufldN/UcFRqZwiz+y
DH29dJol2ExTP4f7fcGPmQDm28U1WJ8=
-----END CERTIFICATE-----
Generated at Tue Dec 16 13:21:27 2025 by rpki-client