This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa
File:                     065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa (raw, json)
Hash identifier:          dK3LEn6kbhgTADiSTv+W5hrdfTq001yKa7+POI9GCKM=
Subject key identifier:   89:C5:C1:57:5A:45:69:08:55:17:0B:EC:18:C0:13:64:FF:CA:AB:71
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584C364B9B2B3404130732595E20
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa
Signing time:             Wed 17 Dec 2025 02:00:31 +0000
ROA not before:           Wed 17 Dec 2025 02:00:31 +0000
ROA not after:            Tue 17 Mar 2026 01:00:31 +0000
asID:                     852
IP address blocks:        209.171.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:36:4b:9b:2b:34:04:13:07:32:59:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Dec 17 02:00:31 2025 GMT
            Not After : Mar 17 01:00:31 2026 GMT
        Subject: CN=114f8459-6869-43a8-815a-c529caeca275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:95:ac:49:1a:dd:e1:35:ee:ec:36:d7:2a:
                    f4:18:6a:2f:8d:22:ad:e1:49:92:22:01:9a:59:e2:
                    ba:fb:14:75:7e:f0:27:63:1a:1d:8d:7c:04:fd:57:
                    ad:de:cf:20:64:03:9b:4c:07:11:ff:00:35:69:50:
                    66:0b:e5:04:a5:2e:78:70:8b:3b:01:cd:f0:3c:fc:
                    f2:ea:92:f1:cb:2a:73:4d:e9:a6:b6:78:df:a7:61:
                    8b:41:82:2b:f0:d4:ea:c0:0e:cc:c8:6d:36:50:a9:
                    36:17:5e:f6:3a:8e:74:79:8c:50:56:f5:06:e2:bc:
                    97:7a:f3:9b:34:8e:b4:15:e3:4b:62:2e:28:02:2a:
                    0e:8f:5c:f5:dd:11:d5:f3:ff:59:29:a6:97:e2:08:
                    e6:bb:a9:c5:84:21:ce:a5:7d:97:7b:82:65:34:a2:
                    9e:d5:cf:92:4f:df:44:f6:53:ab:ba:54:50:b3:e8:
                    c7:e7:ae:fb:36:cf:06:8a:da:18:e5:16:9c:a5:dd:
                    d2:ea:e2:d1:28:2a:11:2f:39:04:49:a5:fe:fd:d0:
                    df:db:48:5a:83:c8:5a:72:2e:f5:11:81:55:ca:d2:
                    a5:be:33:c0:99:fb:88:f8:4b:65:85:7f:d0:9a:6c:
                    3b:98:82:5f:aa:ad:20:06:c0:b9:5b:eb:40:3c:51:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C5:C1:57:5A:45:69:08:55:17:0B:EC:18:C0:13:64:FF:CA:AB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.171.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:1b:66:dd:a1:47:f0:7a:24:f4:2d:cb:35:e6:c7:85:ec:78:
         17:ec:a3:e8:f9:3f:07:e3:2d:70:4d:f7:d0:14:40:18:8a:0d:
         00:58:c8:51:09:92:bc:db:ec:69:10:67:c8:e3:db:75:40:2d:
         74:bc:cd:f2:6d:da:ab:d7:0a:5d:54:0e:02:1c:0d:c8:49:76:
         94:65:fb:00:59:55:6a:26:6a:ad:88:65:49:f0:f4:f2:29:84:
         dc:27:22:8f:ca:bf:95:cf:0e:45:f4:8c:bb:dd:0c:49:29:29:
         39:aa:d1:e0:db:0e:1c:5d:6d:84:bc:2f:25:26:ef:c4:4a:6c:
         3c:95:92:95:5b:bf:a8:6b:4b:7b:40:ab:aa:db:ab:08:f2:8d:
         66:0a:88:78:2d:a0:e0:9a:18:31:71:93:97:dd:59:c2:0f:e5:
         50:b5:9a:7a:85:95:c3:2b:39:50:ef:20:75:cb:f6:27:c2:66:
         f3:3a:f8:9a:80:ea:e0:8c:38:af:fc:14:ce:fc:a5:b9:b5:e1:
         85:b6:e4:35:95:db:8b:4e:06:f6:a9:7b:ef:45:be:75:8d:d2:
         d1:ff:6e:00:08:81:f5:c1:91:08:1b:67:c7:9e:04:be:4a:e9:
         ec:4d:c9:92:3b:bc:5f:0d:6c:00:cd:5d:84:7c:fa:7a:d8:fd:
         b0:f8:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:34:51 2025 by rpki-client