This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File:                     4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier:          Kq4mOTnbFcPJUMcJgRUfanhiOnhZXetrD7WE/qqhZ8k=
Subject key identifier:   C2:C2:37:35:8E:72:58:C4:B1:1B:25:FA:57:42:BB:C8:4B:4E:54:54
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584BF1E5E3BB8115884004C12A00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time:             Sat 22 Nov 2025 14:00:39 +0000
ROA not before:           Sat 22 Nov 2025 14:00:39 +0000
ROA not after:            Fri 20 Feb 2026 14:00:39 +0000
asID:                     395092
IP address blocks:        64.28.236.0/23 maxlen: 24
                          172.96.136.0/22 maxlen: 24
                          2607:a680:3::/48 maxlen: 48
                          2607:a680:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:e5:e3:bb:81:15:88:40:04:c1:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Nov 22 14:00:39 2025 GMT
            Not After : Feb 20 14:00:39 2026 GMT
        Subject: CN=e5738776-f3dd-4738-9be2-479ed2c8882f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:78:4e:a4:bd:82:89:e4:d6:80:f9:cc:c7:
                    11:7e:20:13:66:84:3d:36:6d:19:a5:03:94:f6:61:
                    06:c2:1d:bf:6a:b4:a5:b9:43:16:69:ff:a7:59:fc:
                    05:1e:2e:99:f3:ea:b4:d5:54:4f:c6:b4:29:17:e1:
                    0a:d8:98:61:e6:ae:83:49:cb:43:3e:9e:0b:cb:f6:
                    50:f7:c9:e9:e1:2e:09:ec:55:cf:c1:a6:d7:ad:1f:
                    ac:cc:ad:4e:7a:62:39:dc:bc:1b:21:b8:32:16:c2:
                    d6:10:e4:35:c9:db:29:94:cd:1c:d0:b0:3b:de:0e:
                    e1:42:1e:46:96:2f:32:a0:99:30:4c:39:e4:2d:a6:
                    df:5d:3b:f4:4a:c0:04:5e:80:53:df:eb:eb:01:72:
                    db:6c:3b:48:c1:9a:f5:2c:84:ad:78:2d:70:bc:3e:
                    7b:53:a0:10:27:25:df:41:7c:7f:99:0c:81:8a:28:
                    e7:72:e7:1a:b4:8e:84:29:c8:8e:f8:62:2c:54:11:
                    90:ba:5d:65:53:4b:4b:40:a7:3d:e6:97:68:fb:69:
                    78:39:b8:02:b7:8f:d0:5c:98:04:55:18:8e:ab:7c:
                    87:5a:44:e7:0c:9a:df:ee:5a:7f:0c:2d:20:72:fd:
                    a6:a7:62:c6:bf:70:f2:ba:80:aa:99:e3:eb:04:ac:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:37:35:8E:72:58:C4:B1:1B:25:FA:57:42:BB:C8:4B:4E:54:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.236.0/23
                  172.96.136.0/22
                IPv6:
                  2607:a680:3::/48
                  2607:a680:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a5:a9:31:77:bc:80:56:59:be:83:1a:d1:4f:d1:49:53:a1:
         e4:50:1b:7e:ce:b7:c2:50:a2:c6:af:72:ee:e9:45:a5:96:47:
         a8:1d:24:e2:1e:85:c7:28:53:bf:70:3b:65:41:e6:71:3e:5a:
         ff:99:58:0e:95:4c:50:8e:92:0a:b2:91:db:80:f5:6a:1a:55:
         e1:42:f0:f2:65:36:69:9f:ee:f3:0c:e3:2d:94:30:e1:1d:57:
         24:31:cf:d9:e2:5b:8d:6d:66:03:4a:46:28:4f:97:bb:89:8c:
         92:bb:bd:c8:21:60:cc:d7:62:ef:e5:9d:a1:00:81:bc:96:61:
         e9:21:0d:77:6c:08:20:9a:c3:66:e1:2e:73:40:d8:aa:30:0b:
         a9:c8:42:4f:f4:15:1f:53:53:d8:bd:6f:51:79:4b:22:41:08:
         59:aa:bc:81:91:94:14:8c:56:c5:57:aa:c1:73:8d:59:ca:cd:
         6c:13:2f:22:e5:85:f4:6a:2a:ea:df:c2:d7:58:e2:90:f1:b6:
         00:aa:d0:27:74:a5:b7:50:06:c2:ea:65:18:f4:2a:3d:e3:fd:
         28:1c:99:78:60:bd:6d:50:f4:6a:e0:c1:40:50:93:b1:5c:6f:
         54:20:fe:62:87:aa:d5:4a:9c:d3:2c:7c:f3:83:e1:8a:d1:15:
         88:20:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:56:05 2025 by rpki-client