This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa
File:                     1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa (raw, json)
Hash identifier:          8DPxZlizdVxI2NfcsHfErZmyUFWJGQ4bdSqwWoX/JKo=
Subject key identifier:   33:35:A3:FC:1A:ED:DE:BD:79:21:40:94:AC:73:D5:73:7E:AB:42:E9
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F4328584BFBAB4C285FB8CB466B02E760
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa
Signing time:             Wed 26 Nov 2025 02:00:31 +0000
ROA not before:           Wed 26 Nov 2025 02:00:31 +0000
ROA not after:            Tue 24 Feb 2026 02:00:31 +0000
asID:                     40788
IP address blocks:        108.170.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fb:ab:4c:28:5f:b8:cb:46:6b:02:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Nov 26 02:00:31 2025 GMT
            Not After : Feb 24 02:00:31 2026 GMT
        Subject: CN=90b3e173-211b-4caa-9d77-fe74c45bf1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:4c:20:d2:22:fb:f1:20:4d:75:d8:cf:ec:
                    c1:ad:ac:fa:4a:ee:8f:7c:81:2a:29:97:7c:28:f6:
                    7d:b5:e7:ff:d2:b0:54:74:06:39:a4:f5:9f:4a:9f:
                    a9:cb:74:db:ac:02:59:5c:13:54:04:13:fd:c3:4c:
                    f3:fc:58:bf:ba:d3:c1:7d:99:68:ef:23:82:9f:43:
                    7c:53:33:06:3c:33:3a:5d:9d:98:3c:0d:81:d4:12:
                    c0:bd:b5:aa:db:ec:21:26:ad:3c:aa:61:38:8c:4f:
                    c8:fe:74:10:61:d6:62:31:cd:2e:26:c1:9a:28:7b:
                    7e:f3:19:d5:17:ba:34:83:6b:6e:ac:b1:34:b5:b7:
                    54:73:c5:41:3b:9d:02:cd:11:75:0e:4a:2a:5b:cd:
                    54:b2:29:49:66:44:8b:af:62:1a:ef:63:73:ca:4d:
                    2c:fb:6a:30:ef:c3:d2:92:f6:9e:70:8f:45:7b:33:
                    09:b2:da:98:00:24:7c:55:52:04:7b:5e:92:89:a9:
                    ca:d0:90:e1:53:5e:d6:44:b4:9f:cd:c9:8a:0c:ff:
                    57:eb:21:5a:dd:1d:1b:a9:f1:36:60:c1:c7:c3:bc:
                    c5:82:ea:6d:48:d8:3a:48:d4:3c:39:14:ab:72:b8:
                    3c:ea:56:2c:0d:9f:6b:35:57:7e:e9:f3:b9:6d:8c:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:35:A3:FC:1A:ED:DE:BD:79:21:40:94:AC:73:D5:73:7E:AB:42:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:23:96:3f:9d:9f:a2:c0:a1:9e:ca:b8:89:03:fa:28:72:85:
         a7:7f:36:f9:46:84:60:5f:1f:fd:29:73:a0:ec:b1:f3:97:00:
         41:f1:dc:b2:77:c9:f7:be:69:18:49:c6:09:20:9f:1b:35:33:
         52:eb:0b:a2:bf:33:0a:7a:12:04:a5:1e:1c:c1:b9:47:d8:5b:
         58:6d:ef:bd:fa:9e:ca:0d:60:8d:1c:2f:a4:b5:1d:7b:fd:fa:
         d6:1c:44:27:b9:6d:72:87:d8:4c:28:ba:42:49:2a:f5:6a:5a:
         18:8b:fd:fe:bf:4c:1f:2a:c6:5d:a7:51:03:35:35:e4:bb:24:
         b3:54:50:4a:70:6b:1f:df:8e:ec:9a:4a:01:99:6d:9b:36:ab:
         e8:f1:51:94:94:11:c9:48:99:9d:f2:7d:54:d7:26:4a:ae:47:
         cc:36:a7:0f:4c:21:ae:c2:79:09:94:b8:2b:af:4e:14:5e:41:
         3b:ef:ab:0c:25:5d:0d:fb:46:ae:28:8a:80:8c:6e:24:67:e0:
         bc:18:3a:23:1d:a4:a1:53:70:d8:7a:af:ad:4c:25:ab:43:2c:
         7d:b7:9a:4a:21:e5:9b:7b:99:a2:f6:88:ce:94:37:4e:83:8c:
         23:22:2f:32:99:fc:2e:97:ac:fe:84:c0:91:77:0f:11:a8:2a:
         a1:71:92:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q0woX7jLRmsC52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVm
NGU4MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
OTBiM2UxNzMtMjExYi00Y2FhLTlkNzctZmU3NGM0NWJmMWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXRMINIi+/EgTXXYz+zBraz6Su6PfIEqKZd8
KPZ9tef/0rBUdAY5pPWfSp+py3TbrAJZXBNUBBP9w0zz/Fi/utPBfZlo7yOCn0N8
UzMGPDM6XZ2YPA2B1BLAvbWq2+whJq08qmE4jE/I/nQQYdZiMc0uJsGaKHt+8xnV
F7o0g2turLE0tbdUc8VBO50CzRF1DkoqW81UsilJZkSLr2Ia72Nzyk0s+2ow78PS
kvaecI9FezMJstqYACR8VVIEe16SianK0JDhU17WRLSfzcmKDP9X6yFa3R0bqfE2
YMHHw7zFguptSNg6SNQ8ORSrcrg86lYsDZ9rNVd+6fO5bYyqMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDM1o/wa7d69eSFAlKxz1XN+q0LpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NjRj
ZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvMWFiMzczNTAtZjBlMC0z
ZThiLWI0ZmQtZDRjYzRhZDdmMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDY0Y2QwZDQtNmRhOC00OTdjLWIy
NzAtY2I2NThkNDVmNGU4LzQ2NGNkMGQ0LTZkYTgtNDk3Yy1iMjcwLWNiNjU4ZDQ1
ZjRlOC5jcmwwHwYDVR0jBBgwFoAUS39fShDtIwmAi5OI16u8VyHwb6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1
OGQ0NWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8jlj+dn6LAoZ7KuIkD+ihyhad/NvlGhGBfH/0pc6DssfOXAEHx3LJ3
yfe+aRhJxgkgnxs1M1LrC6K/Mwp6EgSlHhzBuUfYW1ht7736nsoNYI0cL6S1HXv9
+tYcRCe5bXKH2EwoukJJKvVqWhiL/f6/TB8qxl2nUQM1NeS7JLNUUEpwax/fjuya
SgGZbZs2q+jxUZSUEclImZ3yfVTXJkquR8w2pw9MIa7CeQmUuCuvThReQTvvqwwl
XQ37Rq4oioCMbiRn4LwYOiMdpKFTcNh6r61MJatDLH23mkoh5Zt7maL2iM6UN06D
jCMiLzKZ/C6XrP6EwJF3DxGoKqFxkrc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:17:12 2025 by rpki-client