This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/6c1aef76-5168-3394-903e-16ff40909876.roa
File:                     6c1aef76-5168-3394-903e-16ff40909876.roa (raw, json)
Hash identifier:          YXv1LmCLYFEIAaQ2HnfyLf4uC9OrjSyuIa+Wz8X9HT0=
Subject key identifier:   95:61:6B:88:DD:F0:25:AE:D0:E6:CD:EA:7C:8A:1F:A3:F7:DF:F7:9B
Certificate issuer:       /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Certificate serial:       010D0C9F4328584BF4B096E7FA755CA0A5723FE0
Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/6c1aef76-5168-3394-903e-16ff40909876.roa
Signing time:             Sun 23 Nov 2025 14:00:38 +0000
ROA not before:           Sun 23 Nov 2025 14:00:38 +0000
ROA not after:            Sat 21 Feb 2026 14:00:38 +0000
asID:                     40244
IP address blocks:        74.115.170.0/23 maxlen: 24
                          74.115.172.0/22 maxlen: 24
                          96.47.5.0/24 maxlen: 24
                          96.47.6.0/24 maxlen: 24
                          96.47.8.0/24 maxlen: 24
                          96.47.9.0/24 maxlen: 24
                          208.72.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f4:b0:96:e7:fa:75:5c:a0:a5:72:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Validity
            Not Before: Nov 23 14:00:38 2025 GMT
            Not After : Feb 21 14:00:38 2026 GMT
        Subject: CN=011da7c3-9cff-47e1-a948-125d7299e93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:b2:aa:aa:8f:8f:b9:8a:75:dc:48:fa:9c:
                    7a:30:64:af:f0:d4:02:99:e9:29:2e:6e:d1:3d:57:
                    d3:90:09:8a:91:7e:e0:cf:14:17:98:ac:bd:39:9a:
                    a6:b7:2b:ee:8c:f6:12:26:28:9c:27:66:bf:78:68:
                    1e:4d:68:43:4f:b7:1f:a4:03:9a:c5:c9:d7:cd:37:
                    91:77:e6:37:65:95:4b:19:1e:a1:92:e3:eb:07:41:
                    0d:6b:cb:d8:0c:bc:b7:10:1c:e3:2e:92:aa:e4:e5:
                    9c:cd:ca:65:db:33:81:af:05:91:f4:e5:e0:27:0a:
                    18:6f:73:df:a0:40:5f:73:b3:84:bc:5a:f5:87:98:
                    0a:ec:c1:58:66:e1:00:75:9a:1c:40:70:81:86:f7:
                    9d:93:ae:23:33:5e:b1:b1:ac:8b:e6:d8:3b:6f:38:
                    2b:2e:78:c0:61:10:12:fb:af:c0:42:e9:fe:bf:bb:
                    3d:58:41:4d:4b:4f:90:75:25:88:5c:18:36:2b:67:
                    15:ba:8b:91:d5:f8:a3:b5:f4:09:4d:4f:60:49:4e:
                    d7:6a:1e:0f:fb:cf:7b:b7:d5:a4:bd:74:38:d7:0d:
                    cb:5d:c3:8b:aa:76:30:6f:7b:58:05:7f:e9:e8:85:
                    e2:c9:1d:f0:9e:c3:68:49:82:42:1a:20:d1:22:b5:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:6B:88:DD:F0:25:AE:D0:E6:CD:EA:7C:8A:1F:A3:F7:DF:F7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/6c1aef76-5168-3394-903e-16ff40909876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.170.0-74.115.175.255
                  96.47.5.0-96.47.6.255
                  96.47.8.0/23
                  208.72.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f9:c8:cd:2c:1b:34:34:07:00:92:78:6c:39:f9:c0:f7:bc:
         fc:d9:a0:b2:0f:16:8f:b4:72:e6:69:41:94:1e:ef:2a:79:d4:
         79:f6:f5:a1:13:7a:01:e0:e1:48:7e:77:6a:3f:a0:b9:51:56:
         63:ba:92:66:d9:00:5e:a3:6e:dc:42:1f:55:ea:48:04:11:1f:
         f6:c1:a0:c7:ee:c5:59:3d:95:e3:cd:00:be:05:b5:06:fe:2a:
         b5:c1:ca:4e:b9:7b:be:d8:62:0f:11:30:4a:cf:04:b5:78:11:
         e5:36:fc:50:8f:2b:68:d4:58:c0:22:b9:93:ff:f9:52:af:f4:
         2e:a6:6c:77:39:d1:1b:a7:17:18:81:98:31:e6:5f:fd:8f:bf:
         e9:32:0f:fb:b2:30:03:b5:40:af:a5:f6:13:bf:cc:7b:d7:95:
         7f:d7:90:7e:c8:cc:ab:c6:fa:b9:9c:47:b1:32:3f:16:26:10:
         26:70:af:de:c8:f7:2f:f0:42:9f:59:52:b6:c9:93:6d:37:ec:
         ae:83:39:a2:a9:63:7d:bf:b9:53:6a:0c:18:6d:65:e4:db:19:
         8c:cf:09:d5:e8:fb:89:aa:d9:ed:68:56:99:2d:75:a7:56:27:
         95:1e:fd:73:4b:45:ab:9b:79:b2:ad:a9:4b:7a:3e:eb:7c:e5:
         78:e2:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:45:18 2025 by rpki-client