This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
File:                     d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json)
Hash identifier:          qXFEhJt5yLo7KWbD50mzgeKYK4kwmV5itPt4DzHtuJw=
Subject key identifier:   F1:E0:42:2D:DC:6A:93:A2:3D:A8:49:9E:24:58:73:0F:68:9F:D1:2B
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584BD1CAFA2CC3A6685196317780
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
Signing time:             Tue 11 Nov 2025 02:00:30 +0000
ROA not before:           Tue 11 Nov 2025 02:00:30 +0000
ROA not after:            Mon 09 Feb 2026 02:00:30 +0000
asID:                     23470
IP address blocks:        104.251.85.0/24 maxlen: 24
                          104.251.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d1:ca:fa:2c:c3:a6:68:51:96:31:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Nov 11 02:00:30 2025 GMT
            Not After : Feb  9 02:00:30 2026 GMT
        Subject: CN=34eb8a6a-c588-47e8-b336-55eacd65909d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:8b:2e:c0:cc:ef:1e:63:51:5c:82:d7:b2:
                    33:62:9c:60:14:2f:b8:14:00:c1:b5:79:b3:e8:0c:
                    25:32:41:45:b5:12:10:bb:7f:4b:a3:7a:86:6b:29:
                    d4:7c:6c:ef:53:7e:66:c7:d3:7b:69:23:de:53:36:
                    a8:fa:7d:e4:68:00:79:b5:ec:77:df:86:88:8d:38:
                    86:bf:dc:05:dd:f8:d3:5f:64:ec:42:90:97:c1:6a:
                    46:31:3f:12:54:cc:b9:d3:20:21:f1:67:8d:dc:36:
                    04:cf:66:73:bd:9a:7e:f8:73:4e:de:f5:29:a8:3a:
                    10:bd:36:08:0f:cf:76:23:81:c0:84:b2:f9:c7:77:
                    5d:78:a8:df:66:38:85:3d:c6:07:58:02:e9:12:3a:
                    14:5d:fe:31:7d:5f:75:0c:01:3b:e4:46:19:d9:70:
                    0c:c2:44:35:69:1e:0f:d7:bc:5f:d2:2f:1a:64:cf:
                    60:09:aa:14:b3:3a:6e:3c:66:1d:8d:dd:f3:92:65:
                    b9:0d:a6:e2:9f:85:4d:1a:b7:06:72:19:15:14:4f:
                    7e:c2:20:f9:52:28:36:c7:d7:ef:5b:e6:e4:bf:b6:
                    c3:ad:d5:87:7b:53:0b:65:16:72:95:3d:fa:9e:db:
                    19:5e:2e:3b:d4:f6:9b:74:2a:f7:fb:81:58:7f:f7:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E0:42:2D:DC:6A:93:A2:3D:A8:49:9E:24:58:73:0F:68:9F:D1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.85.0/24
                  104.251.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:a9:5d:f7:68:e1:31:29:d7:67:9a:02:39:72:0a:38:d1:
         66:60:7f:96:4a:e7:0a:5e:52:c9:0c:06:ce:86:11:9f:7b:d4:
         76:2b:4e:ae:e2:b5:b5:c2:ae:73:3c:bd:e5:13:2f:da:ef:24:
         ef:63:2d:28:a9:6d:fc:fc:d2:05:03:74:ba:4b:51:93:21:3c:
         04:fb:95:7c:0a:42:0a:bb:29:fa:4e:c6:56:8e:d8:5b:c4:57:
         b3:10:bd:82:b4:30:1e:83:19:a1:3c:4b:2e:3d:7b:ca:c9:1e:
         2e:09:05:b6:34:d5:51:7a:aa:cc:17:69:b2:fd:75:d5:e4:33:
         61:75:be:11:4b:2c:29:f4:aa:96:ac:5c:c9:3e:44:05:9b:57:
         dc:8c:f7:75:fa:ea:23:aa:ba:4f:07:aa:33:7d:61:bb:a5:35:
         97:35:98:b5:1d:93:9e:0a:ba:a6:49:10:23:87:dc:8f:f8:4d:
         70:ed:46:43:77:db:9f:83:7f:06:02:79:6c:50:77:ea:b3:2e:
         d2:40:f5:b2:f1:a5:44:0b:01:d7:83:5d:39:3a:27:2c:11:1b:
         5e:07:35:93:cb:03:73:69:77:12:3e:91:fe:0a:88:3c:3c:33:
         79:00:1d:6f:fa:41:38:22:13:cb:2d:fa:96:10:5e:1d:fb:2f:
         2d:99:50:03
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvRyvosw6ZoUZYxd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
MzRlYjhhNmEtYzU4OC00N2U4LWIzMzYtNTVlYWNkNjU5MDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiouLLsDM7x5jUVyC17IzYpxgFC+4FADBtXmz
6AwlMkFFtRIQu39Lo3qGaynUfGzvU35mx9N7aSPeUzao+n3kaAB5tex334aIjTiG
v9wF3fjTX2TsQpCXwWpGMT8SVMy50yAh8WeN3DYEz2ZzvZp++HNO3vUpqDoQvTYI
D892I4HAhLL5x3ddeKjfZjiFPcYHWALpEjoUXf4xfV91DAE75EYZ2XAMwkQ1aR4P
17xf0i8aZM9gCaoUszpuPGYdjd3zkmW5Dabin4VNGrcGchkVFE9+wiD5Uig2x9fv
W+bkv7bDrdWHe1MLZRZylT36ntsZXi471PabdCr3+4FYf/e6QQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPHgQi3capOiPahJniRYcw9on9ErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDhkYzg2Y2ItMTYxZi0z
OTk1LThkOTktZGQyNDBkZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtVAwQA
aPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHePqV33aOExKddnmgI5cgo40WZgf5ZK5wpeUskMBs6GEZ97
1HYrTq7itbXCrnM8veUTL9rvJO9jLSipbfz80gUDdLpLUZMhPAT7lXwKQgq7KfpO
xlaO2FvEV7MQvYK0MB6DGaE8Sy49e8rJHi4JBbY01VF6qswXabL9ddXkM2F1vhFL
LCn0qpasXMk+RAWbV9yM93X66iOquk8HqjN9YbulNZc1mLUdk54KuqZJECOH3I/4
TXDtRkN325+DfwYCeWxQd+qzLtJA9bLxpUQLAdeDXTk6JywRG14HNZPLA3NpdxI+
kf4KiDw8M3kAHW/6QTgiE8st+pYQXh37Ly2ZUAM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:10:53 2025 by rpki-client