This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
File:                     10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json)
Hash identifier:          ae3pL7vqCbtTvtC9lZ5518kkAc3719yBpr7HtMgBzec=
Subject key identifier:   AF:12:C0:EB:5E:0C:9F:9D:FF:5A:02:CE:C7:BC:13:4C:D8:F4:5A:AE
Certificate issuer:       /CN=8c902da3-488d-44d9-9833-f1295a9fd887
Certificate serial:       010D0C9F4328584C0B061AAF773ECB8499001F80
Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
Signing time:             Mon 01 Dec 2025 14:00:39 +0000
ROA not before:           Mon 01 Dec 2025 14:00:39 +0000
ROA not after:            Sun 01 Mar 2026 14:00:39 +0000
asID:                     3925
IP address blocks:        209.165.192.0/24 maxlen: 24
                          209.165.194.0/24 maxlen: 24
                          209.165.201.0/24 maxlen: 24
                          209.165.202.0/24 maxlen: 24
                          209.165.209.0/24 maxlen: 24
                          209.165.211.0/24 maxlen: 24
                          209.165.212.0/24 maxlen: 24
                          209.165.213.0/24 maxlen: 24
                          209.165.214.0/24 maxlen: 24
                          209.165.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0b:06:1a:af:77:3e:cb:84:99:00:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887
        Validity
            Not Before: Dec  1 14:00:39 2025 GMT
            Not After : Mar  1 14:00:39 2026 GMT
        Subject: CN=4c3cec25-d67d-4c10-82bd-8cf4745c3377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:cf:53:4f:2a:62:c8:30:aa:c6:d6:90:94:
                    49:39:2a:21:05:25:85:9d:b8:e5:de:9c:84:e5:20:
                    31:2a:26:ce:82:66:f9:f4:8b:b5:b2:cc:c3:4e:b7:
                    f3:48:7b:98:b3:af:09:f8:56:9d:6f:93:6d:25:d5:
                    56:a3:f6:68:2b:85:53:e0:9c:f5:de:f6:ef:9f:5a:
                    35:e0:ab:a9:8b:02:61:0b:b5:19:21:76:57:93:dc:
                    a5:2f:89:e4:f1:01:28:dd:cf:cb:8e:71:37:9f:a0:
                    58:e0:25:43:3a:d5:38:5d:7c:cb:94:3d:18:7b:eb:
                    3d:f9:3c:a8:c9:61:06:32:75:03:ea:08:fa:8b:37:
                    28:f0:9d:21:47:6e:8e:fd:ad:49:d7:ee:f9:20:17:
                    f9:bf:60:40:9b:06:84:b8:8c:e2:21:1c:95:a5:66:
                    b7:16:9e:b4:cf:f9:a3:ad:e5:dc:8e:16:91:c8:9c:
                    24:95:ba:99:28:a5:5b:76:15:14:f9:4b:8f:b1:52:
                    fd:a1:49:49:b1:9c:63:76:73:76:89:71:e7:af:7e:
                    85:6b:bb:18:d5:13:ef:4a:91:b3:19:7b:df:ff:7f:
                    60:a0:1f:40:3b:01:8d:c1:3d:04:3a:82:64:47:34:
                    25:3e:ed:62:4d:2b:9f:7b:42:e6:7b:1d:cd:c1:c3:
                    19:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:12:C0:EB:5E:0C:9F:9D:FF:5A:02:CE:C7:BC:13:4C:D8:F4:5A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.165.192.0/24
                  209.165.194.0/24
                  209.165.201.0-209.165.202.255
                  209.165.209.0/24
                  209.165.211.0-209.165.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:64:d7:c2:e7:fe:25:bc:48:67:9d:81:ca:d1:e1:e7:63:
         80:a5:a3:b0:6a:48:c1:b9:4b:2c:c1:26:dd:fc:64:8a:49:e0:
         77:8d:8d:0c:fe:8a:97:0e:90:69:d1:53:ee:dd:17:ea:c4:ed:
         a5:d0:87:83:d8:af:e9:cd:c4:0d:6c:62:c5:57:8f:6a:a5:a5:
         c3:e5:5a:bb:e2:3f:95:6f:b8:21:4a:35:05:64:ae:0e:cf:fb:
         b2:4c:d5:b9:37:a7:a9:0b:da:bd:70:1e:1a:1b:11:3e:8a:69:
         18:a4:77:4f:91:7c:d5:ef:4b:4b:b5:b9:ff:04:74:0e:e3:3b:
         91:10:66:ca:a8:50:da:f5:ca:58:2f:11:cf:2d:c9:fd:3b:ac:
         d4:6f:98:c2:68:2c:32:a1:b1:a1:30:ab:2c:fe:9e:aa:2d:49:
         e7:f9:88:bc:46:83:23:22:5e:54:ff:ce:b2:97:82:15:04:7c:
         93:7b:b1:30:29:cb:97:fb:af:2e:cf:ab:3d:51:d6:77:07:b0:
         15:d7:6f:ed:74:7a:a2:4d:3a:59:16:70:9a:56:49:8d:da:66:
         e2:d5:88:78:50:e6:d8:70:99:59:58:be:04:20:c8:fd:a2:21:
         a6:f0:b9:5a:66:de:07:01:b7:29:90:2a:c9:b0:d4:2f:a7:50:
         e7:d3:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:45 2025 by rpki-client