This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa
File:                     be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa (raw, json)
Hash identifier:          wV14e+74dVTINyVaIvCo+uR/YAMA03DMN0QkrOAuSnY=
Subject key identifier:   0F:6D:6D:8A:FA:72:44:48:44:65:7C:65:DC:9D:62:DB:47:1D:1E:EE
Certificate issuer:       /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial:       010D0C9F4328584BC53B02576E51C45FA0103000
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     31849
IP address blocks:        67.213.128.0/21 maxlen: 24
                          104.219.20.0/22 maxlen: 24
                          162.212.96.0/22 maxlen: 24
                          199.30.104.0/22 maxlen: 24
                          199.102.56.0/22 maxlen: 24
                          2607:2a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3b:02:57:6e:51:c4:5f:a0:10:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=75d4b44b-65e9-48a3-b988-6cdee127491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:32:d2:c0:b0:b4:17:3e:2c:70:d9:f2:14:
                    a0:45:62:2e:8e:6d:28:1f:f8:e6:3b:4a:87:7a:8c:
                    a8:fc:9f:56:89:4b:da:43:ce:97:f3:13:9f:85:8a:
                    d3:0d:a8:07:cc:95:d0:82:53:63:87:a0:29:56:ef:
                    11:a8:1b:d7:ff:f2:90:86:7d:57:d8:0e:93:c0:04:
                    a1:1d:8f:a2:ab:09:1c:20:cd:c3:33:f0:34:23:e8:
                    1d:0d:e3:b0:4a:67:e9:97:80:6c:f6:00:32:ee:ed:
                    0c:21:f0:b6:ff:e8:ac:d5:7d:6c:1e:02:d6:76:a1:
                    3c:05:c8:23:22:f0:85:59:d8:59:52:69:66:3e:8d:
                    cc:35:a5:d0:8b:ac:73:df:fe:31:ee:7c:87:ec:89:
                    94:2c:57:44:fc:07:79:bf:57:ae:59:7f:db:61:1b:
                    4c:6a:6e:a9:31:72:ba:32:f0:c8:02:5a:d8:14:a0:
                    e2:90:a8:e6:60:f2:d7:9c:6c:7f:aa:80:77:92:34:
                    80:b5:65:4a:bf:88:74:7c:2e:3b:75:bc:c9:44:72:
                    ba:d6:a3:50:e7:17:06:f5:85:aa:8b:4d:3e:8c:49:
                    20:dd:e4:06:a4:77:a6:d2:18:3f:86:ff:bb:83:24:
                    3c:40:31:0d:59:f0:1e:4c:02:18:eb:76:db:9f:a5:
                    88:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6D:6D:8A:FA:72:44:48:44:65:7C:65:DC:9D:62:DB:47:1D:1E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl

            X509v3 Authority Key Identifier:
                keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.128.0/21
                  104.219.20.0/22
                  162.212.96.0/22
                  199.30.104.0/22
                  199.102.56.0/22
                IPv6:
                  2607:2a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a6:75:c7:e9:98:14:96:a6:49:58:0a:e7:0a:3d:f8:89:44:
         ac:03:90:ac:ad:18:ef:e6:bb:6e:1e:6a:25:e7:7b:8b:e1:cd:
         8f:ee:47:0e:02:e5:ec:96:8c:f2:69:b6:47:4f:69:06:69:20:
         57:2e:7c:de:0e:04:e5:0f:02:35:fe:ac:a1:73:4a:62:3e:56:
         c9:82:37:5d:db:f7:85:b7:2d:d0:b1:98:c6:f9:16:4c:99:1e:
         d8:b9:1f:ab:ba:19:b0:99:d2:4a:d2:20:29:da:39:57:2e:2c:
         b3:e1:b3:99:c8:3a:f4:88:62:b8:21:b8:55:b5:14:84:28:03:
         b2:3c:1b:db:9c:8d:a3:d1:04:23:f2:43:b5:1d:2f:95:ea:21:
         89:95:6d:55:bf:8c:3b:b9:29:fd:6a:13:ef:5b:35:c9:72:f8:
         cf:68:f2:fa:9f:51:e0:27:72:0a:a1:ac:6b:ba:c3:3d:cc:c9:
         f6:ac:c3:55:0c:3e:d7:d9:6e:97:62:ec:73:12:f7:29:d7:09:
         16:66:96:82:ae:d6:c6:94:01:ea:bb:48:6d:bd:4e:8c:d1:15:
         4b:c1:ab:b9:18:9f:c1:2f:7a:14:5d:3a:68:64:43:75:58:22:
         92:ce:56:80:fe:2f:31:bb:d2:aa:3a:ce:0b:47:dd:c9:20:ec:
         59:cb:eb:fb
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEvFOwJXblHEX6AQMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5
ZjQxMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzVkNGI0NGItNjVlOS00OGEzLWI5ODgtNmNkZWUxMjc0OTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1oy0sCwtBc+LHDZ8hSgRWIujm0oH/jmO0qH
eoyo/J9WiUvaQ86X8xOfhYrTDagHzJXQglNjh6ApVu8RqBvX//KQhn1X2A6TwASh
HY+iqwkcIM3DM/A0I+gdDeOwSmfpl4Bs9gAy7u0MIfC2/+is1X1sHgLWdqE8Bcgj
IvCFWdhZUmlmPo3MNaXQi6xz3/4x7nyH7ImULFdE/Ad5v1euWX/bYRtMam6pMXK6
MvDIAlrYFKDikKjmYPLXnGx/qoB3kjSAtWVKv4h0fC47dbzJRHK61qNQ5xcG9YWq
i00+jEkg3eQGpHem0hg/hv+7gyQ8QDENWfAeTAIY63bbn6WIOwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFA9tbYr6ckRIRGV8ZdydYttHHR7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm
MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvYmU3YWQ3YjktYTI0Ny0z
YTRiLTg3NjQtZjIzZDhmYjBjMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4
M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk
OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5
MWZjZDlmNDEuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDQ9WAAwQC
aNsUAwQCotRgAwQCxx5oAwQCx2Y4MA0EAgACMAcDBQAmByqAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJam
dcfpmBSWpklYCucKPfiJRKwDkKytGO/mu24eaiXne4vhzY/uRw4C5eyWjPJptkdP
aQZpIFcufN4OBOUPAjX+rKFzSmI+VsmCN13b94W3LdCxmMb5FkyZHti5H6u6GbCZ
0krSICnaOVcuLLPhs5nIOvSIYrghuFW1FIQoA7I8G9ucjaPRBCPyQ7UdL5XqIYmV
bVW/jDu5Kf1qE+9bNcly+M9o8vqfUeAncgqhrGu6wz3Myfasw1UMPtfZbpdi7HMS
9ynXCRZmloKu1saUAeq7SG29TozRFUvBq7kYn8EvehRdOmhkQ3VYIpLOVoD+LzG7
0qo6zgtH3ckg7FnL6/s=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:38:03 2025 by rpki-client