This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
File:                     f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa (raw, json)
Hash identifier:          eCyHWnEErAhuJfuBQimDlXqey0oawL4/2rGMOhxDPCA=
Subject key identifier:   76:84:BC:4A:94:EC:F5:16:C8:17:67:26:DB:BB:03:05:BC:B1:3E:6B
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584BFE76053544564B169880ED00
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
Signing time:             Thu 27 Nov 2025 02:00:31 +0000
ROA not before:           Thu 27 Nov 2025 02:00:31 +0000
ROA not after:            Wed 25 Feb 2026 02:00:31 +0000
asID:                     54004
IP address blocks:        206.246.71.0/24 maxlen: 24
                          206.246.74.0/24 maxlen: 24
                          206.246.84.0/24 maxlen: 24
                          206.246.113.0/24 maxlen: 24
                          207.199.131.0/24 maxlen: 24
                          207.199.136.0/24 maxlen: 24
                          207.199.156.0/24 maxlen: 24
                          207.199.165.0/24 maxlen: 24
                          209.147.71.0/24 maxlen: 24
                          209.147.73.0/24 maxlen: 24
                          209.147.87.0/24 maxlen: 24
                          216.107.0.0/24 maxlen: 24
                          216.107.1.0/24 maxlen: 24
                          216.107.18.0/24 maxlen: 24
                          216.155.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fe:76:05:35:44:56:4b:16:98:80:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Nov 27 02:00:31 2025 GMT
            Not After : Feb 25 02:00:31 2026 GMT
        Subject: CN=33cb779e-0802-402d-adfa-a4c5ef245bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:c2:59:9f:1b:87:6e:0d:aa:80:38:9d:6b:
                    24:f6:31:97:ca:65:17:f7:df:f7:8b:02:aa:a1:fd:
                    20:1e:dd:53:b4:42:d8:40:81:48:20:70:7b:31:e9:
                    ee:58:c5:88:9a:ea:21:8e:5f:b5:f6:49:71:ae:27:
                    56:19:b0:1a:74:f4:bc:7a:22:7f:bd:48:88:bc:1a:
                    b6:b8:a1:ca:4a:36:89:f2:f6:86:a4:a0:51:31:46:
                    26:79:43:f2:0b:61:39:db:0f:ce:75:93:3d:4f:91:
                    c8:04:da:e5:ad:c6:a8:20:03:97:8f:a0:db:9d:e6:
                    16:99:6b:e5:05:f2:ef:19:be:94:0e:cf:8a:50:b9:
                    0c:f8:c8:d6:8f:1f:7b:2d:9e:de:5c:e3:0b:70:b2:
                    47:4b:12:1f:83:30:41:f2:d4:38:92:4a:00:c3:ed:
                    e4:0f:86:f6:10:df:2d:0b:c3:1b:05:b6:8f:4c:24:
                    f1:65:42:b5:7b:0b:d4:ed:aa:b4:0f:87:a0:8e:1a:
                    a5:22:5e:38:8c:7a:83:fc:3a:d5:4d:0d:0c:bb:a9:
                    26:07:60:b2:b4:21:2b:74:e3:fd:1c:8b:13:3f:89:
                    29:98:07:91:26:70:46:a3:eb:8d:c6:21:fb:1b:22:
                    d1:0d:26:6e:af:57:2f:bd:8e:41:a5:6b:83:1c:a4:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:BC:4A:94:EC:F5:16:C8:17:67:26:DB:BB:03:05:BC:B1:3E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.71.0/24
                  206.246.74.0/24
                  206.246.84.0/24
                  206.246.113.0/24
                  207.199.131.0/24
                  207.199.136.0/24
                  207.199.156.0/24
                  207.199.165.0/24
                  209.147.71.0/24
                  209.147.73.0/24
                  209.147.87.0/24
                  216.107.0.0/23
                  216.107.18.0/24
                  216.155.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:49:dc:15:9e:1a:71:f0:03:0d:16:2a:56:a2:1c:b9:83:
         7c:9c:7c:b5:ee:26:f2:4c:b2:b8:b1:1c:8b:f3:62:0c:6c:75:
         92:b9:f9:95:6e:2f:19:0d:d3:1f:55:8a:7f:e6:74:24:a6:0d:
         86:cc:e0:07:5e:43:af:44:51:d5:ec:90:71:67:aa:0d:9c:dc:
         7d:4f:d6:44:f0:db:54:d4:63:09:2b:3e:50:f0:04:d5:1b:1e:
         a1:4f:46:63:3c:20:6b:38:17:da:7a:33:e4:45:26:f4:eb:f7:
         dc:1e:8c:db:ac:86:1c:60:0a:60:31:76:f9:83:3b:34:03:14:
         77:5c:15:08:0c:fb:35:b1:64:0b:d3:89:c5:07:99:fb:4b:a2:
         da:25:66:6b:5b:40:c4:3d:b4:fd:ea:94:b3:ac:37:8a:33:3a:
         4e:2f:1f:e6:0b:f7:28:c9:96:9d:9d:83:99:23:8f:31:69:6f:
         ee:dd:2b:c9:b9:18:6d:2b:df:e1:84:c6:ed:02:fc:91:91:ce:
         a2:65:fa:e8:bd:97:88:39:78:2a:01:d9:5a:b6:3f:29:07:40:
         0d:07:70:37:cc:72:f7:66:28:5d:24:06:49:0a:d9:c1:1a:cb:
         c5:3e:32:fa:9f:35:09:5d:9c:56:fd:72:e1:e9:13:1e:cf:32:
         4f:83:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:44:24 2025 by rpki-client