This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db3ec061-e746-387b-bbd3-7dd3322dd09a.roa
File:                     db3ec061-e746-387b-bbd3-7dd3322dd09a.roa (raw, json)
Hash identifier:          VPA+qr3Oeyd6c5rH3ma9s3IAHkB3q9sbmM+e6Me51qQ=
Subject key identifier:   BE:21:86:4A:8B:3B:50:35:FB:B4:AE:24:F8:44:49:2A:2D:B5:CB:85
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584C48716C515FBC3211FB13C600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db3ec061-e746-387b-bbd3-7dd3322dd09a.roa
Signing time:             Tue 23 Dec 2025 14:00:39 +0000
ROA not before:           Tue 23 Dec 2025 14:00:39 +0000
ROA not after:            Mon 23 Mar 2026 13:00:39 +0000
asID:                     396982
IP address blocks:        35.205.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:48:71:6c:51:5f:bc:32:11:fb:13:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec 23 14:00:39 2025 GMT
            Not After : Mar 23 13:00:39 2026 GMT
        Subject: CN=ecf25097-0107-45a8-a528-1f03ce03cdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:60:d0:35:3b:fd:54:9d:32:f7:14:39:0d:
                    88:a0:61:9a:69:2d:2f:8e:df:71:56:87:9f:28:a0:
                    78:85:91:63:a2:49:ed:97:bd:ce:55:72:fb:a4:cd:
                    80:af:49:ee:9e:c8:1c:f8:29:44:17:d0:f5:91:4d:
                    75:34:ed:37:1c:d5:39:40:94:a4:72:51:61:bd:14:
                    37:ae:ee:d1:45:ac:04:9a:92:f9:7c:4e:2f:c7:6d:
                    31:1a:66:6d:29:e1:ec:7d:f3:33:e6:41:06:9f:db:
                    8e:43:e2:f8:4b:a5:ee:f5:2e:56:ef:34:f2:85:2b:
                    74:0b:65:6d:34:34:16:92:8a:8b:ae:2b:c9:2b:88:
                    0c:66:81:a0:d2:0e:6f:b4:a5:91:2e:49:8f:c6:4a:
                    17:8f:9f:09:9b:ae:a7:e7:74:a8:ee:a0:95:60:69:
                    02:2e:10:79:19:5b:96:66:95:31:b8:d7:88:9a:af:
                    f7:58:ee:65:ed:bb:80:66:41:dc:28:ca:22:bd:76:
                    99:a8:81:5a:45:7d:81:ee:8f:aa:f3:34:ca:a7:19:
                    3e:5d:06:b0:78:1e:d0:44:fb:71:c6:0e:2b:52:56:
                    97:36:1e:ef:d4:2e:9c:c8:0f:2e:09:59:b4:84:b7:
                    1e:a8:3c:89:3a:e4:b1:91:54:17:c1:72:18:13:70:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:21:86:4A:8B:3B:50:35:FB:B4:AE:24:F8:44:49:2A:2D:B5:CB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db3ec061-e746-387b-bbd3-7dd3322dd09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.205.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:23:76:81:5a:03:81:2c:cd:26:8b:ac:9f:9d:e6:33:bf:
         d9:cb:f8:3c:fc:79:4c:0e:66:dc:71:39:87:d9:08:7d:3e:fd:
         1b:3d:36:d8:33:09:7c:74:f5:12:56:e2:74:69:73:66:15:fb:
         09:cd:4e:ee:16:0b:f7:eb:36:5d:0d:d7:07:3c:f3:ff:5b:49:
         12:8c:53:ff:4f:16:ca:0e:25:9d:5a:2d:26:de:9a:75:8a:0a:
         71:da:dd:b5:72:13:20:3a:9e:c2:6d:b8:8c:1e:63:7d:25:a0:
         c7:9e:e9:cd:3f:e6:15:ab:57:35:47:2c:7d:db:82:1e:ff:9b:
         55:5c:c1:1a:64:80:61:c8:b6:54:37:ca:7d:0e:7a:59:14:0f:
         8a:b1:1c:05:14:6c:2a:c9:c9:02:72:8b:88:d8:05:04:9f:42:
         76:a2:71:b4:e8:df:bd:7a:fe:8d:50:45:11:11:ec:5f:d8:3f:
         e8:54:67:39:13:c6:b2:98:a6:33:9a:af:af:44:5b:49:fa:1d:
         30:5a:26:e9:60:a8:be:04:9c:99:f8:55:c6:01:61:b6:10:a9:
         b3:e2:e8:5f:87:59:60:67:6a:e0:2f:d5:23:42:11:e8:a6:36:
         99:cb:b3:07:91:c9:d6:0b:ad:95:ce:c3:7e:25:2a:84:03:b5:
         34:e2:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:16 2026 by rpki-client