This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/dc42c54d-17ed-35cb-bc73-c1befbc8a719.roa
File:                     dc42c54d-17ed-35cb-bc73-c1befbc8a719.roa (raw, json)
Hash identifier:          XSZOi1SpWuZbtJbLcgbNdf4BRNIMcD0s3MU/5aC8lXY=
Subject key identifier:   DD:2D:7C:F8:EF:03:E0:E5:35:96:54:6D:8A:24:1D:C3:A1:6F:2C:4B
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584C14CB6D38A922AFA01ECE7EC0
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/dc42c54d-17ed-35cb-bc73-c1befbc8a719.roa
Signing time:             Fri 05 Dec 2025 02:00:30 +0000
ROA not before:           Fri 05 Dec 2025 02:00:30 +0000
ROA not after:            Thu 05 Mar 2026 02:00:30 +0000
asID:                     5650
IP address blocks:        168.91.66.0/24 maxlen: 24
                          168.91.67.0/24 maxlen: 24
                          168.91.80.0/24 maxlen: 24
                          168.91.81.0/24 maxlen: 24
                          168.91.82.0/24 maxlen: 24
                          168.91.83.0/24 maxlen: 24
                          168.91.88.0/24 maxlen: 24
                          168.91.89.0/24 maxlen: 24
                          168.91.90.0/24 maxlen: 24
                          168.91.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:14:cb:6d:38:a9:22:af:a0:1e:ce:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Dec  5 02:00:30 2025 GMT
            Not After : Mar  5 02:00:30 2026 GMT
        Subject: CN=44b4c10c-47dc-4509-92c3-99d3ef473bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:89:87:92:2a:fe:05:76:73:b5:99:25:fd:
                    2a:a7:66:94:ed:23:ab:06:3d:3a:80:8f:38:e8:75:
                    52:29:d8:b1:a5:8a:5a:8e:14:ba:dd:1c:d6:b0:62:
                    81:ce:65:eb:14:95:7b:c8:0b:12:94:bc:7e:66:6e:
                    02:17:5a:a0:09:0d:5a:dc:21:9b:40:13:af:7e:c1:
                    99:88:65:f9:ce:78:db:f1:03:52:ca:26:a1:01:a2:
                    ef:20:10:c8:54:6b:3d:0a:73:95:e2:17:80:29:b7:
                    fa:de:4c:cd:d9:a2:83:4c:cd:0b:57:9d:c4:e5:92:
                    06:d8:c1:ba:73:75:c3:eb:22:e4:5a:85:3c:74:50:
                    dd:2c:c1:73:36:5e:bb:51:fc:4b:67:a3:34:13:16:
                    9f:6b:8a:95:29:b5:3a:8a:45:7d:f2:0a:f5:58:22:
                    51:f8:e5:53:50:fc:a6:8b:50:b4:a8:00:e0:9e:b5:
                    af:c2:e1:02:97:af:0d:cd:0e:e8:fb:ff:42:32:41:
                    48:5b:a7:87:d2:50:df:df:c2:25:55:4f:e2:1c:f8:
                    26:9a:b3:2a:f3:de:08:93:8e:61:07:23:68:69:d6:
                    bf:f6:28:63:4e:ea:a7:9a:da:65:0d:e5:21:25:1f:
                    ca:ef:b1:e4:fe:4b:60:21:11:72:8d:0a:b7:f1:55:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2D:7C:F8:EF:03:E0:E5:35:96:54:6D:8A:24:1D:C3:A1:6F:2C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/dc42c54d-17ed-35cb-bc73-c1befbc8a719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.66.0/23
                  168.91.80.0/22
                  168.91.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:04:f5:56:1c:f7:12:bc:66:fe:99:37:0a:d7:dc:b7:55:ad:
         b1:e6:ab:07:ac:34:c0:25:5a:ff:b0:8a:5d:03:a0:20:60:c8:
         7a:ba:1f:15:75:bc:59:4b:ac:99:bd:05:b3:57:de:0e:a3:0d:
         82:f7:8f:4b:77:84:13:5c:eb:ce:03:5e:3d:6a:84:7b:08:43:
         55:a8:e3:41:08:cc:64:95:42:86:fb:78:b0:34:31:3c:4c:b0:
         ef:c1:02:59:5d:eb:e1:ff:60:21:5a:1a:ab:d1:13:56:be:57:
         68:09:ea:bd:84:46:e0:39:72:75:90:fd:81:8f:68:60:40:23:
         48:95:21:bf:0d:49:71:22:ee:91:d1:1e:8b:3f:4a:10:58:90:
         5f:46:42:3d:77:49:71:40:a7:5f:f3:24:28:f5:ad:44:d5:ab:
         16:fd:c5:ea:1d:8d:76:e5:b0:7f:8c:f2:03:2f:52:19:51:cf:
         a3:5d:86:79:5b:fe:f9:f6:98:24:70:9c:25:c4:86:ae:ce:6a:
         71:c3:36:e3:91:53:1e:07:61:f4:f0:fa:54:7d:d0:80:57:5a:
         fd:3a:48:6c:14:bf:89:b4:97:82:c8:6b:9d:bd:0a:e7:cd:b0:
         a4:87:c5:cf:ea:ef:23:e2:d0:5c:ec:ad:24:85:83:50:2f:ac:
         e6:03:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:08:21 2025 by rpki-client