This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa
File:                     08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa (raw, json)
Hash identifier:          wWUpMNFMQ1EqLbEzg1FqTUOjOTlocHERBV43SIMJmXo=
Subject key identifier:   4F:45:A7:A2:D2:89:E7:D5:BD:59:13:10:E9:35:D2:F0:B8:C7:41:EA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C42DC0F20E2C2AFA60834F790
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        65.22.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:0f:20:e2:c2:af:a6:08:34:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=5df85948-32dc-454e-b033-9f666213e778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:86:1b:89:9a:cd:a4:51:8c:c6:10:fd:b0:
                    8f:d8:3b:f2:aa:74:45:c1:ce:10:50:ae:32:69:cb:
                    75:04:33:f7:59:40:fc:95:f6:bc:e4:01:bc:5c:88:
                    14:33:fb:c8:77:18:21:e9:86:33:79:38:d4:db:8a:
                    6b:97:3e:c1:b7:34:d5:ec:83:89:0b:11:17:8e:30:
                    84:3a:5a:a0:8f:9d:05:e7:51:ff:ba:fa:b2:4d:23:
                    03:b0:ff:ac:24:15:41:c9:61:ba:83:31:9f:4a:e0:
                    75:0f:7e:b6:d5:71:0f:87:9f:e8:36:ee:ff:f7:78:
                    9c:f5:68:46:6a:fa:0e:fd:4d:ae:af:6a:ac:29:a0:
                    b1:46:f0:b5:c2:b8:03:31:b8:ff:7d:09:06:92:99:
                    0f:c2:51:62:40:82:e5:4a:18:4b:6f:e9:10:9c:60:
                    69:d2:4f:b3:a0:78:37:b3:f9:1b:ca:c1:d7:31:65:
                    f4:ef:7c:f4:45:76:4e:f2:15:aa:af:e6:8e:fc:71:
                    de:92:30:76:e8:91:c3:ad:a9:68:24:74:ac:ac:21:
                    a7:c4:e7:0b:de:e3:00:5e:c1:95:ca:eb:6b:ca:01:
                    ce:82:0c:13:6c:da:40:6c:be:7b:c7:a5:58:0a:d9:
                    21:c9:86:91:f1:18:45:d7:d5:9c:94:cf:3f:9e:17:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:A7:A2:D2:89:E7:D5:BD:59:13:10:E9:35:D2:F0:B8:C7:41:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f4:c2:c1:17:b8:1b:ec:5b:93:d5:7f:4c:1f:47:a3:f3:6a:
         4d:19:08:b7:34:62:f9:33:06:ef:5c:ab:90:fb:6c:78:f0:42:
         af:b4:5f:dc:3f:3a:26:4d:7b:29:3e:c0:04:e2:7d:10:2e:e9:
         f0:18:d0:1d:a2:1e:1d:19:ed:63:3a:64:1b:f0:f1:47:25:da:
         94:3e:51:2a:6f:c0:77:78:52:b7:13:7f:01:e8:13:c1:9a:b0:
         89:a7:4f:d6:79:ac:d9:bd:cf:75:03:83:2c:c6:fc:1f:be:ad:
         4e:38:64:da:1e:85:97:4b:08:85:7c:b8:42:f2:76:ca:a0:40:
         78:bb:5d:00:b3:ff:0b:82:a1:62:a5:6c:f0:d0:e3:39:7f:3e:
         c4:b6:94:82:13:0e:5f:e8:68:33:87:ae:f3:d1:9e:93:0b:84:
         eb:17:71:bd:73:fd:f2:1d:49:e3:2f:e0:4a:30:b7:d8:d3:08:
         d8:8c:d0:5b:44:75:dc:8c:8c:18:b2:df:bf:ff:a4:9f:66:4e:
         40:ac:97:65:a6:14:5f:06:05:c4:5f:be:ee:ae:60:35:67:59:
         1f:31:14:b0:9b:81:65:78:2d:bf:8b:22:96:4b:7c:7f:c8:28:
         92:78:ef:cb:01:c9:dc:2b:01:8d:28:44:3f:74:ec:00:df:9d:
         03:74:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:09 2026 by rpki-client