This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/f9086520-339e-300d-814f-f5c1dc9a2617.roa
File:                     f9086520-339e-300d-814f-f5c1dc9a2617.roa (raw, json)
Hash identifier:          JhobQgNZXkMn1A3oc7CuRBxzS78eiJEvTVM9m6iR7eY=
Subject key identifier:   EE:45:F5:7E:07:C0:91:63:F6:0E:40:2F:21:7E:2D:06:10:6D:BE:5A
Certificate issuer:       /CN=1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b
Certificate serial:       010D0C9F4328584BFBAB3B345AD81F2D86252480
Authority key identifier: 17:49:B2:BE:29:6D:3A:F6:4A:90:99:69:0B:9C:E2:8A:C5:A8:95:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/f9086520-339e-300d-814f-f5c1dc9a2617.roa
Signing time:             Wed 26 Nov 2025 02:00:31 +0000
ROA not before:           Wed 26 Nov 2025 02:00:31 +0000
ROA not after:            Tue 24 Feb 2026 02:00:31 +0000
asID:                     13825
IP address blocks:        64.130.96.0/19 maxlen: 19
                          96.47.80.0/20 maxlen: 20
                          139.177.0.0/18 maxlen: 18
                          142.154.128.0/18 maxlen: 18
                          162.216.244.0/22 maxlen: 22
                          198.73.24.0/22 maxlen: 22
                          199.119.96.0/22 maxlen: 22
                          216.93.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fb:ab:3b:34:5a:d8:1f:2d:86:25:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b
        Validity
            Not Before: Nov 26 02:00:31 2025 GMT
            Not After : Feb 24 02:00:31 2026 GMT
        Subject: CN=9e228a53-d29e-4c60-9f73-b934527aa05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:99:fd:a0:4d:34:6a:ed:94:46:a4:1d:c7:
                    86:3b:0e:8a:00:8a:e3:5e:0c:69:6f:d2:ce:52:54:
                    0f:70:a4:d8:4e:5f:d4:fc:8a:32:4c:d3:34:de:6a:
                    32:d9:52:54:1e:1d:4c:41:33:b6:a8:e3:cc:52:75:
                    3b:37:a0:a6:10:79:d0:94:4b:91:bc:76:78:fa:1a:
                    90:96:de:df:aa:e8:5f:a0:17:01:3c:71:86:41:61:
                    d8:af:3a:a8:c5:63:22:a7:90:6f:a6:71:b9:e9:bd:
                    a2:5b:58:7e:de:2b:53:0e:a0:98:80:38:71:48:e8:
                    8a:36:4d:27:3a:36:af:c8:06:e4:7e:d1:63:db:09:
                    06:aa:be:dc:28:54:25:37:28:b2:13:a4:91:d3:8c:
                    d1:cc:98:30:20:ba:31:3a:65:62:7f:0b:7b:2a:7a:
                    c8:8e:10:b8:04:5a:f4:66:43:5c:58:ba:0a:25:2f:
                    ed:b8:31:de:26:17:26:54:37:30:2f:3d:90:8b:7e:
                    ac:44:cf:03:aa:ee:d2:01:78:e6:72:3f:e7:d2:2b:
                    d4:83:50:b0:73:b9:5d:48:d2:f5:dd:95:a6:71:69:
                    1d:15:f5:a2:31:65:f5:b5:c7:f4:61:2c:6c:e8:d7:
                    16:a9:52:cd:c4:46:f5:af:4f:82:eb:88:6e:80:3f:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:F5:7E:07:C0:91:63:F6:0E:40:2F:21:7E:2D:06:10:6D:BE:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/f9086520-339e-300d-814f-f5c1dc9a2617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.crl

            X509v3 Authority Key Identifier:
                keyid:17:49:B2:BE:29:6D:3A:F6:4A:90:99:69:0B:9C:E2:8A:C5:A8:95:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.96.0/19
                  96.47.80.0/20
                  139.177.0.0/18
                  142.154.128.0/18
                  162.216.244.0/22
                  198.73.24.0/22
                  199.119.96.0/22
                  216.93.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:18:90:64:e0:0c:0d:00:5e:59:0a:78:65:42:35:ee:db:
         64:18:93:ee:49:d7:47:7f:4f:35:d4:4d:22:df:34:24:ce:b7:
         94:93:ca:36:14:a4:70:cb:69:bb:b3:da:9b:0e:6c:79:d2:b0:
         82:ae:b4:84:26:15:e7:4c:9a:68:12:f8:9f:6b:fb:30:b6:d0:
         e9:fe:4e:9f:48:d2:28:a8:80:4f:64:54:dd:ea:0d:87:0f:7f:
         95:a7:a6:be:a4:79:01:26:3d:19:5b:92:13:9e:36:34:d3:36:
         1f:55:31:44:22:65:b1:07:cc:56:84:3a:4a:86:03:c9:0f:3e:
         ef:1a:50:3e:e9:0e:fc:6e:8a:aa:4a:8a:2e:ac:c0:6d:8e:84:
         48:52:bc:aa:dd:a0:e4:4a:d2:a7:6c:98:93:e2:58:8a:d0:94:
         2a:e5:71:8f:36:65:ca:18:dd:a5:63:9b:c2:7f:b6:12:46:d5:
         ae:76:ae:d9:ac:aa:ee:19:a2:98:ce:2d:d7:bb:12:dd:80:63:
         ec:ce:9c:fe:b8:fb:27:17:18:62:04:c3:90:52:0c:cf:17:2a:
         b1:1f:b0:90:6b:8f:f9:9f:a0:5e:6d:89:0e:57:ac:b9:a1:d8:
         c9:f3:77:5b:a7:dc:db:b5:05:14:c6:e8:aa:44:46:fe:a7:b3:
         72:7c:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:40:21 2025 by rpki-client