This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
File:                     ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa (raw, json)
Hash identifier:          rYXBErtNHrLw1t947qMCtdaZNddu8n6o0173dJvqFE8=
Subject key identifier:   7F:38:B1:4C:CD:BB:04:35:19:50:BA:66:0D:DF:21:44:9A:35:26:6C
Certificate issuer:       /CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
Certificate serial:       010D0C9F4328584BDC60C9A07317892CA15002A0
Authority key identifier: FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     397332
IP address blocks:        23.90.88.0/22 maxlen: 22
                          45.115.204.0/22 maxlen: 22
                          75.119.180.0/22 maxlen: 22
                          152.228.36.0/22 maxlen: 22
                          168.203.12.0/22 maxlen: 22
                          2602:fdfa::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:dc:60:c9:a0:73:17:89:2c:a1:50:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=8217deb5-c167-4905-b52c-d88d50488478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:09:0f:0b:5a:cf:78:21:89:84:c6:6b:66:21:
                    23:24:83:30:87:8c:b4:cf:7d:48:91:6c:e2:59:60:
                    11:79:3c:68:c2:0d:4c:85:7b:3e:94:4e:18:f6:8a:
                    9f:d1:6c:88:21:11:d8:d3:da:7f:70:54:68:60:d7:
                    94:30:d1:77:56:6b:6a:ee:2c:cb:fc:20:a6:52:31:
                    f5:ae:10:aa:0e:40:be:78:6a:bc:d4:36:40:dc:98:
                    eb:e8:be:1c:0b:b8:be:58:de:fd:07:d6:22:7b:13:
                    ec:2a:19:c9:17:9f:a6:3b:19:73:5e:69:f4:58:ba:
                    02:04:f7:10:8a:fc:d3:03:03:6f:ca:bc:9e:c1:58:
                    82:db:00:62:c9:ec:46:27:e8:24:39:2f:0e:e8:29:
                    8c:f7:6a:18:80:d9:20:ef:30:a5:76:f7:19:80:6a:
                    76:c0:f7:54:69:8f:a1:e1:8d:f0:3b:e7:11:84:2b:
                    88:45:d4:94:4d:a7:b1:cc:91:bb:72:01:ae:57:61:
                    ab:4e:3e:bf:b2:a3:58:16:eb:5a:55:8b:a1:4e:f0:
                    96:32:3f:e7:35:5b:9d:25:3e:85:d5:8e:d8:3a:ba:
                    a8:4b:6b:33:91:8c:d9:54:24:69:2b:f4:a1:40:43:
                    24:5b:6b:1c:7d:15:b4:73:e6:55:17:ca:e8:29:31:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:B1:4C:CD:BB:04:35:19:50:BA:66:0D:DF:21:44:9A:35:26:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.88.0/22
                  45.115.204.0/22
                  75.119.180.0/22
                  152.228.36.0/22
                  168.203.12.0/22
                IPv6:
                  2602:fdfa::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:85:bf:65:e9:d1:a4:cf:22:d0:5f:ea:66:bc:9c:6d:66:
         ff:e1:8b:8c:0f:16:d4:fb:7a:9c:d4:ac:f8:48:71:8b:a0:1e:
         db:45:ae:cf:d9:17:4d:77:d0:1b:0f:03:0c:f3:32:b7:9f:ef:
         8c:35:96:42:7b:00:fe:2d:20:ed:19:ec:65:8f:2a:7d:e7:3a:
         c8:57:23:68:0b:0c:49:0b:86:1b:67:db:a9:9f:d9:0d:63:d3:
         5a:3a:51:d8:dd:ed:f8:e1:2e:94:3d:a8:04:ab:c6:33:93:0e:
         ef:34:76:a7:7d:a4:a2:3c:cd:d4:65:c8:94:b0:68:c6:2c:ed:
         14:cc:40:2e:55:6c:2d:4a:61:de:17:0c:32:6c:b5:98:2c:93:
         31:d2:25:03:c0:c3:82:b2:b1:fa:f5:7f:92:a2:60:0c:47:70:
         10:a8:39:9d:b7:07:51:3a:d1:13:f2:4f:df:40:ee:9f:63:6e:
         22:e2:e1:8c:ca:d8:47:e5:a1:41:1c:e4:4e:b0:81:b5:46:00:
         41:57:2b:d0:a3:9d:e7:04:cd:a6:36:d2:8d:9f:34:4e:78:72:
         ca:0b:0a:f9:ad:06:c0:b7:9c:9c:f0:2f:d6:e2:f4:43:c9:fb:
         b5:02:fd:9f:eb:c4:9a:fc:74:9c:2e:4d:30:1c:08:60:62:67:
         a3:f7:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:57:45 2025 by rpki-client