This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa
File:                     8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa (raw, json)
Hash identifier:          aOVwIAOdexKx7hL0jwR5dwuM6cVt2CpYPqY2uBPurcI=
Subject key identifier:   9B:01:24:91:4F:11:03:10:AB:DF:DE:5B:0B:48:47:21:2F:2A:59:A3
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584C0C6B56CBAE5BB0E229123880
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa
Signing time:             Tue 02 Dec 2025 02:00:30 +0000
ROA not before:           Tue 02 Dec 2025 02:00:30 +0000
ROA not after:            Mon 02 Mar 2026 02:00:30 +0000
asID:                     398090
IP address blocks:        104.171.200.0/22 maxlen: 24
                          192.222.48.0/20 maxlen: 24
                          198.145.39.0/24 maxlen: 24
                          209.20.156.0/22 maxlen: 24
                          2607:bb40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0c:6b:56:cb:ae:5b:b0:e2:29:12:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Dec  2 02:00:30 2025 GMT
            Not After : Mar  2 02:00:30 2026 GMT
        Subject: CN=14d330ef-0c42-4fee-b9e0-e6fe2c8a0bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:83:a3:2e:d7:06:03:6e:cf:eb:65:b9:d1:
                    b3:8a:21:8c:6f:e1:f1:42:13:ff:0d:90:64:19:a1:
                    44:c1:22:68:cf:a4:6a:a6:74:25:86:ce:98:d8:c5:
                    1e:08:d9:d4:85:6d:8c:2c:21:d2:29:3f:5b:bd:a8:
                    63:26:07:64:7c:f6:e9:91:0e:83:2b:85:69:c5:7c:
                    1c:04:37:49:a0:37:f4:61:08:79:1f:33:94:f0:8e:
                    4e:3b:59:07:33:e4:52:44:62:d4:31:d2:1e:1f:b9:
                    51:f4:3a:ff:9b:68:40:c1:ce:01:60:46:b3:92:e4:
                    a7:c1:20:f8:8a:fb:08:b7:d5:3a:be:62:2b:d6:5b:
                    a0:4f:92:80:13:18:42:8f:db:a6:2e:78:7b:6d:cd:
                    53:25:2b:80:3a:6f:6f:43:b7:5d:85:08:d1:08:68:
                    e2:cb:89:88:1e:77:91:5d:97:e3:af:a3:41:c5:17:
                    8b:8b:f7:46:c7:39:d3:92:f6:75:43:15:4e:c9:25:
                    4a:3e:7a:e8:82:1a:62:35:37:bc:49:b5:08:b7:50:
                    10:5a:14:26:57:16:e1:82:f6:d9:8a:b6:be:8e:b6:
                    b2:bf:51:18:15:ea:c1:00:cd:3f:db:8b:52:1e:aa:
                    5c:35:70:54:19:dd:62:7a:36:ff:1b:a0:18:95:e7:
                    93:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:24:91:4F:11:03:10:AB:DF:DE:5B:0B:48:47:21:2F:2A:59:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.200.0/22
                  192.222.48.0/20
                  198.145.39.0/24
                  209.20.156.0/22
                IPv6:
                  2607:bb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:c5:e1:d9:a4:00:c8:2a:48:c5:f6:32:1f:0c:c4:7f:aa:
         98:22:34:f7:18:77:19:fc:8a:27:d4:2b:83:61:eb:18:13:24:
         68:2e:77:ca:e8:61:09:b3:cd:2b:5d:86:3d:d1:8e:df:36:bc:
         d7:54:0b:67:2a:c9:32:cc:4d:5e:a4:23:5a:72:f0:95:35:13:
         23:73:75:67:ac:e1:2c:be:65:08:f3:bd:4b:6d:d6:fe:3c:da:
         ab:b7:62:74:10:dc:55:77:27:65:22:9d:2f:82:c8:d0:a7:21:
         8d:45:69:9a:ad:c6:03:00:9d:6e:24:91:38:9d:b1:1c:10:23:
         74:85:39:18:94:1a:fd:69:76:0a:f9:dd:fc:b6:40:f2:73:fe:
         0f:3c:a7:3c:5e:e5:5b:5e:ec:5b:2b:bc:9e:ba:55:5f:42:d5:
         8a:f0:13:bb:fb:1a:23:64:fe:24:fd:c2:8f:0b:58:49:71:e1:
         90:94:cb:25:96:7c:63:d9:f2:96:dd:4a:01:68:e4:96:c1:b0:
         d4:7f:8d:73:04:d7:4d:7d:f9:ad:af:66:2d:5c:21:e3:a8:ce:
         11:1f:f8:1e:a4:20:50:9b:84:88:2c:79:fe:df:3c:57:ab:86:
         7b:d3:2e:80:11:b2:eb:de:d2:b9:40:e7:fe:11:fa:98:73:1d:
         a8:79:6a:70
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEwMa1bLrluw4ikSOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk
MmQ2MB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk
MTRkMzMwZWYtMGM0Mi00ZmVlLWI5ZTAtZTZmZTJjOGEwYmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPyDoy7XBgNuz+tludGziiGMb+HxQhP/DZBk
GaFEwSJoz6RqpnQlhs6Y2MUeCNnUhW2MLCHSKT9bvahjJgdkfPbpkQ6DK4VpxXwc
BDdJoDf0YQh5HzOU8I5OO1kHM+RSRGLUMdIeH7lR9Dr/m2hAwc4BYEazkuSnwSD4
ivsIt9U6vmIr1lugT5KAExhCj9umLnh7bc1TJSuAOm9vQ7ddhQjRCGjiy4mIHneR
XZfjr6NBxReLi/dGxznTkvZ1QxVOySVKPnroghpiNTe8SbUIt1AQWhQmVxbhgvbZ
ira+jrayv1EYFerBAM0/24tSHqpcNXBUGd1iejb/G6AYleeTfQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFJsBJJFPEQMQq9/eWwtIRyEvKlmjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz
NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvOGExMWUwYmItN2NmYS0z
YTIwLWIyZTAtYjRlNmZjNzEwZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj
NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3
ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk
MWE1N2QyZDYuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCaKvIAwQE
wN4wAwQAxpEnAwQC0RScMA0EAgACMAcDBQAmB7tAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFHwxeHZpADI
KkjF9jIfDMR/qpgiNPcYdxn8iifUK4Nh6xgTJGgud8roYQmzzStdhj3Rjt82vNdU
C2cqyTLMTV6kI1py8JU1EyNzdWes4Sy+ZQjzvUtt1v482qu3YnQQ3FV3J2UinS+C
yNCnIY1FaZqtxgMAnW4kkTidsRwQI3SFORiUGv1pdgr53fy2QPJz/g88pzxe5Vte
7FsrvJ66VV9C1YrwE7v7GiNk/iT9wo8LWElx4ZCUyyWWfGPZ8pbdSgFo5JbBsNR/
jXME1019+a2vZi1cIeOozhEf+B6kIFCbhIgsef7fPFerhnvTLoARsuve0rlA5/4R
+phzHah5anA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:39:52 2025 by rpki-client