This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa
File:                     fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa (raw, json)
Hash identifier:          pP1VZM7WFuULRXDYXz6HbkUZLvnBPG3uULBDEDkuuWE=
Subject key identifier:   29:49:C6:02:1A:99:4A:A7:4B:8C:59:3C:86:0A:F2:97:EC:F2:9D:56
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584C09A0B4686552C3220B624480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa
Signing time:             Mon 01 Dec 2025 02:00:30 +0000
ROA not before:           Mon 01 Dec 2025 02:00:30 +0000
ROA not after:            Sun 01 Mar 2026 02:00:30 +0000
asID:                     401951
IP address blocks:        66.167.8.0/22 maxlen: 22
                          66.167.12.0/23 maxlen: 23
                          66.167.88.0/23 maxlen: 23
                          66.167.148.0/23 maxlen: 23
                          66.167.170.0/23 maxlen: 23
                          66.167.172.0/22 maxlen: 22
                          72.245.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:09:a0:b4:68:65:52:c3:22:0b:62:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Dec  1 02:00:30 2025 GMT
            Not After : Mar  1 02:00:30 2026 GMT
        Subject: CN=27a464c9-b626-422a-a3a2-6c4d856e7740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:e3:49:17:ce:44:c6:e7:78:dc:87:16:f0:
                    b0:ba:c9:8e:a7:b5:b8:e4:94:09:b4:02:68:41:10:
                    b7:b3:95:d8:91:cf:9d:a2:bf:61:4a:64:87:79:c4:
                    7c:6f:b0:33:d4:bb:10:f6:4d:b5:91:f1:ee:dc:b9:
                    f9:7c:f1:72:01:79:cc:ba:4d:02:f6:45:61:cf:83:
                    8f:f1:21:6e:b7:6f:9e:a5:84:89:b0:28:ba:15:ba:
                    72:c2:a4:dd:45:29:e6:26:92:a5:9b:bd:bb:c0:b2:
                    d4:67:c9:0c:4b:92:26:64:1d:98:54:3c:67:46:bc:
                    f2:a0:b6:58:d0:45:c0:e9:e0:e1:a1:08:8d:5f:f2:
                    e2:29:3a:89:e7:7e:5e:3f:6d:68:92:03:f8:db:a9:
                    62:ec:ac:e3:36:98:a9:ca:cf:7d:b0:ee:33:14:09:
                    68:fb:16:9f:ed:37:e5:ad:ba:16:c5:d3:a4:dc:00:
                    00:9d:55:cf:ce:18:b1:d5:01:7c:0e:a7:4f:b9:5b:
                    9d:b1:38:4b:c6:db:d7:94:85:06:70:03:ba:a2:97:
                    58:08:d8:2d:0d:c3:b9:0b:c2:a5:78:6f:3d:31:07:
                    46:12:87:72:7d:fc:24:24:ae:87:99:5e:8e:01:ca:
                    e7:9b:2b:30:86:61:d5:44:f3:0d:e4:6f:98:82:57:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:49:C6:02:1A:99:4A:A7:4B:8C:59:3C:86:0A:F2:97:EC:F2:9D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.167.8.0-66.167.13.255
                  66.167.88.0/23
                  66.167.148.0/23
                  66.167.170.0-66.167.175.255
                  72.245.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:2b:14:ce:f0:07:3a:9c:c9:2c:bc:b1:b2:64:f1:b1:aa:
         49:f8:68:52:22:22:14:0f:ea:f0:28:1a:d5:82:0e:df:20:c1:
         9b:06:aa:96:7f:4a:29:f5:c5:6c:a4:7c:6e:5e:12:99:01:41:
         00:15:ad:62:1a:69:24:32:05:d1:81:e7:d3:f1:7a:95:64:a3:
         1d:ec:03:c3:5b:b6:17:3c:7d:db:bc:2b:cd:5a:7a:2c:81:a2:
         9c:82:59:81:71:70:13:da:25:7f:7c:bd:2d:28:5f:0a:e8:a2:
         c8:bd:c0:4e:68:68:a0:b8:5c:0c:68:ec:8a:9f:39:c1:41:77:
         2e:7e:c8:99:74:3b:03:2e:69:4e:1f:59:54:04:b2:68:a4:d3:
         02:66:e4:e2:2c:ec:20:1f:ed:13:0e:40:61:28:bc:f4:dd:ad:
         1c:2c:4f:fa:ae:71:e4:97:d6:45:a8:8b:07:c7:b8:82:76:72:
         d3:e7:72:55:46:0a:57:13:ba:17:82:36:1c:80:82:77:2a:50:
         c0:de:6f:0f:76:ce:e9:74:3a:fb:d1:3f:90:87:1e:39:8b:52:
         ea:86:64:16:93:cb:3d:d4:97:ba:77:32:25:3d:35:6a:9d:ee:
         0b:60:32:3f:af:62:d7:7b:5b:79:64:c7:c4:c5:67:be:15:c3:
         9e:30:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:12:39 2025 by rpki-client