This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/8461ce34-cf4c-3612-a529-a4a783652d59.roa
File:                     8461ce34-cf4c-3612-a529-a4a783652d59.roa (raw, json)
Hash identifier:          zl3zV53yiAoTJ/brCdEkTQN0dbNj2SFiUX5G4hbPfpI=
Subject key identifier:   01:4C:B4:3B:6F:25:72:66:BE:A4:49:11:A4:48:43:37:BF:81:A3:19
Certificate issuer:       /CN=e25d686e-0b40-4450-bc73-6a20b06135f1
Certificate serial:       010D0C9F4328584C109B7171862B0746812BB000
Authority key identifier: C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/8461ce34-cf4c-3612-a529-a4a783652d59.roa
Signing time:             Wed 03 Dec 2025 14:00:38 +0000
ROA not before:           Wed 03 Dec 2025 14:00:38 +0000
ROA not after:            Tue 03 Mar 2026 14:00:38 +0000
asID:                     32413
IP address blocks:        74.115.88.0/21 maxlen: 21
                          108.59.32.0/20 maxlen: 20
                          199.83.184.0/21 maxlen: 21
                          208.90.224.0/22 maxlen: 24
                          2605:5600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:10:9b:71:71:86:2b:07:46:81:2b:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25d686e-0b40-4450-bc73-6a20b06135f1
        Validity
            Not Before: Dec  3 14:00:38 2025 GMT
            Not After : Mar  3 14:00:38 2026 GMT
        Subject: CN=79bc76aa-819d-4540-a7eb-40a26ac508db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:be:9b:12:33:29:ed:e7:d5:10:0c:e2:c8:
                    d9:70:43:4e:57:fc:23:63:16:09:d1:79:b1:15:a0:
                    8c:00:a6:d7:ad:47:ad:bd:14:6d:9d:8f:cf:f1:14:
                    51:2f:38:ce:81:2e:12:8b:0f:a0:70:4e:06:21:f8:
                    9d:6a:24:db:2b:2b:7d:14:ec:63:4d:2f:53:f8:b7:
                    5b:8c:53:9c:f6:1b:4d:47:77:92:13:51:58:d9:45:
                    09:0c:f9:ec:6a:5a:c5:e1:b8:53:42:79:35:d4:99:
                    d9:8a:d7:c0:85:1a:a5:74:8b:9a:05:d3:7b:87:72:
                    1c:6f:c2:2e:46:e9:8e:9e:5a:7e:4e:1c:27:be:97:
                    36:84:d3:0a:64:d8:bb:b8:33:24:55:71:54:3b:f6:
                    29:5d:45:3a:e0:b6:95:a6:a9:b3:c3:44:68:9f:60:
                    b5:30:94:46:aa:bc:19:e1:d9:1b:96:e1:6e:6b:65:
                    ad:a4:c2:14:61:25:3c:d1:96:41:cc:c2:af:75:19:
                    58:61:c7:30:df:d1:d9:32:26:24:38:ed:f7:12:63:
                    65:ee:72:87:11:c5:83:aa:7a:f2:16:d0:b8:10:62:
                    eb:8b:dd:2b:be:f2:87:f0:bd:6c:17:8a:55:b9:11:
                    c3:69:8d:72:38:95:f1:44:7f:51:0d:a8:90:5c:41:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:B4:3B:6F:25:72:66:BE:A4:49:11:A4:48:43:37:BF:81:A3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/8461ce34-cf4c-3612-a529-a4a783652d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl

            X509v3 Authority Key Identifier:
                keyid:C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.88.0/21
                  108.59.32.0/20
                  199.83.184.0/21
                  208.90.224.0/22
                IPv6:
                  2605:5600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:0e:fa:3b:8a:9c:81:94:01:db:ab:86:95:c4:4c:06:c2:
         c2:25:79:2e:5e:cd:6a:a7:1c:e4:2d:de:fd:b3:87:ad:11:2f:
         19:a8:83:f8:82:4c:7d:5c:c6:e7:f0:6c:b4:a6:68:93:56:e8:
         d0:98:e9:e6:73:90:39:ba:29:1b:95:b3:7f:5a:12:39:9a:c7:
         bb:cc:ef:fc:f7:3f:5d:64:4b:3c:89:79:a1:4a:33:a1:91:ca:
         55:59:21:81:8f:0f:cf:2c:25:e9:95:ca:af:95:92:12:3f:e7:
         d5:11:3a:97:ca:f1:af:d1:70:c5:b3:a0:7f:7d:5b:7b:b3:e2:
         13:83:ff:cf:49:c7:31:c8:72:9a:c8:87:92:6a:a0:eb:a2:37:
         75:6e:04:b7:04:2d:af:b1:24:6a:60:2a:7d:c8:52:8e:b6:eb:
         a8:d2:13:5a:3f:36:4d:c9:95:1e:8b:b6:6a:37:be:10:77:eb:
         5e:f8:ae:32:24:ad:1d:b0:dc:90:df:f1:68:66:9a:0a:08:ef:
         dc:f0:c5:b8:12:74:85:11:8b:06:cc:3f:bb:09:e1:e0:98:e3:
         9c:58:39:d4:41:73:ab:cc:fc:3d:08:4c:ad:78:ad:fa:9a:09:
         5c:ec:dd:95:c6:16:38:d9:95:7c:8a:a7:dc:12:eb:52:8c:d1:
         63:51:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:56:26 2025 by rpki-client