This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
File:                     f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa (raw, json)
Hash identifier:          WFplTnIS7/NO+BfFbP2B6KruR7BK1cAC/EgpSy4QDjc=
Subject key identifier:   CA:EE:8F:29:C7:54:FA:C9:5E:85:C8:99:BB:4D:07:F1:4F:D2:46:3E
Certificate issuer:       /CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
Certificate serial:       010D0C9F4328584BEDB5C437DE840F54770A4880
Authority key identifier: 06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
Signing time:             Fri 21 Nov 2025 02:00:30 +0000
ROA not before:           Fri 21 Nov 2025 02:00:30 +0000
ROA not after:            Thu 19 Feb 2026 02:00:30 +0000
asID:                     40943
IP address blocks:        199.167.208.0/22 maxlen: 22
                          208.91.184.0/22 maxlen: 22
                          2604:3d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ed:b5:c4:37:de:84:0f:54:77:0a:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
        Validity
            Not Before: Nov 21 02:00:30 2025 GMT
            Not After : Feb 19 02:00:30 2026 GMT
        Subject: CN=faa97972-2f43-4914-a1d0-6f449e3946c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:87:4f:31:41:db:05:9e:c7:dc:8b:71:b1:
                    08:4c:96:86:88:c4:ee:11:96:69:af:db:42:07:f2:
                    0a:ef:7b:07:8e:af:a7:4e:03:1c:ba:6b:0f:f0:83:
                    2e:f8:0b:8e:fe:bd:e0:9d:56:2a:14:60:56:33:77:
                    f5:c8:de:4b:77:6b:e5:b7:c1:2e:e3:85:18:d2:dd:
                    3b:b3:c8:ca:2d:55:9c:8f:cc:1e:71:3f:0f:24:a5:
                    26:74:9d:58:35:ae:c5:04:3a:58:7d:03:ea:a1:7f:
                    35:f5:94:ed:e3:1d:9a:66:7e:06:3d:19:3a:ae:cb:
                    ac:9c:3c:5c:66:dc:a7:f3:10:29:73:ef:b2:ee:83:
                    d6:4c:6f:72:15:f6:c7:d0:64:9d:81:bb:ed:f8:6c:
                    de:dc:82:32:58:bd:16:3e:8c:c4:bb:ef:8b:1b:e5:
                    35:6c:e5:b3:eb:45:45:cf:bf:0c:02:46:cd:01:83:
                    6d:60:2a:2c:b2:3d:f3:a0:ef:e4:e5:25:67:db:f7:
                    73:13:4d:a4:fa:f7:0d:c2:f5:3a:f1:5a:c2:71:a5:
                    0c:b9:1f:db:52:97:c4:f1:0e:92:ad:36:13:96:8b:
                    47:0c:af:ee:25:ae:f4:a6:36:6a:84:94:fe:08:91:
                    06:9c:44:b3:1a:8a:5a:38:60:2b:bc:74:5d:12:82:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EE:8F:29:C7:54:FA:C9:5E:85:C8:99:BB:4D:07:F1:4F:D2:46:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.crl

            X509v3 Authority Key Identifier:
                keyid:06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.208.0/22
                  208.91.184.0/22
                IPv6:
                  2604:3d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:df:de:f4:60:eb:c5:6f:9b:8d:7d:0b:22:34:e5:03:b6:
         67:27:47:39:a6:43:90:cd:63:6d:ff:5f:7b:79:22:16:5e:9c:
         7a:a7:1a:94:c1:65:92:e8:1c:af:51:31:b2:94:fa:63:96:9a:
         4f:12:a5:55:1b:c0:d3:fd:70:0d:34:6f:36:82:9c:e1:ce:8b:
         b2:ad:1f:cd:f2:0d:82:dd:a9:1b:98:b1:5e:2c:05:63:3e:5e:
         51:3b:52:88:33:17:30:e7:25:c5:0a:b3:41:5f:a3:0c:93:f5:
         61:81:21:f4:e6:27:39:55:bd:fe:02:ae:63:8d:bb:d4:0a:48:
         f8:d3:8b:41:cc:90:1c:2c:fe:e5:3f:97:fc:2e:b2:d2:82:e6:
         03:1d:a7:23:b3:26:7d:5d:83:53:cf:61:2a:9f:6a:6c:47:eb:
         a1:07:7e:23:98:ab:d2:84:dd:27:39:97:20:0c:44:0c:97:79:
         d0:77:3e:e6:0c:e4:34:d6:8a:a3:92:8b:81:83:f7:aa:a6:a1:
         30:ce:ca:20:ae:1c:d5:05:74:69:72:fb:ca:a5:f8:5d:f7:a1:
         9b:35:99:6e:ab:23:24:f0:5f:b2:60:7a:c5:79:12:59:47:6c:
         a9:a1:ba:47:d7:c8:3b:df:c2:fe:8b:86:df:e4:ca:a2:55:7d:
         2a:1a:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:22:39 2025 by rpki-client