This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa
File:                     3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa (raw, json)
Hash identifier:          dLubc0TLc4MLBqUFdjHuzeZhW0XT82+ToqkAqB7xwLA=
Subject key identifier:   FC:1C:4E:48:60:85:87:BF:2D:86:BA:E9:42:B1:F1:35:71:4F:EF:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BC96B0239202803724D46E6C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa
Signing time:             Sat 08 Nov 2025 02:00:30 +0000
ROA not before:           Sat 08 Nov 2025 02:00:30 +0000
ROA not after:            Fri 06 Feb 2026 02:00:30 +0000
asID:                     20940
IP address blocks:        104.70.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c9:6b:02:39:20:28:03:72:4d:46:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:30 2025 GMT
            Not After : Feb  6 02:00:30 2026 GMT
        Subject: CN=45296ea7-2367-4ccd-abdc-ba8d0a864968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:10:9a:9d:96:fb:19:74:ab:71:f8:dd:dd:20:
                    e9:4e:7b:fd:03:34:2e:8d:e4:72:5c:6a:03:92:5f:
                    88:93:25:2b:6b:af:a5:2e:90:b8:a0:c8:17:b6:05:
                    50:e3:39:2f:50:70:e4:6b:c1:75:25:bd:0f:f9:41:
                    bc:9d:3e:24:64:46:42:d9:d4:79:45:56:e0:c2:08:
                    7f:80:6d:d8:e7:ef:88:c2:4c:40:e9:7c:0c:bc:eb:
                    02:63:86:e5:7f:e8:97:e7:7e:0f:6b:33:b3:34:d6:
                    96:c4:cc:32:6c:7c:b2:86:2c:03:86:af:39:21:2c:
                    23:ed:79:da:12:38:75:e1:9f:b8:38:68:45:46:a5:
                    3e:e0:9d:e7:b4:6f:b8:f3:c0:44:61:f1:b3:6b:dd:
                    84:99:86:e0:64:82:1c:04:a0:a7:cf:73:ff:02:ab:
                    56:66:71:66:3a:d5:c6:19:21:b2:52:28:93:2f:5e:
                    ed:cf:b2:ff:7c:b5:6e:c4:64:cd:a2:68:80:bf:ba:
                    c2:1a:fa:80:b0:b7:96:b3:d5:c9:58:eb:5f:d9:29:
                    62:e1:34:eb:35:10:46:65:fa:c3:f0:36:23:5c:50:
                    36:e9:29:79:5d:8d:47:00:bc:09:30:1b:f1:b0:a6:
                    b1:9a:a0:bc:e0:8b:08:3e:f7:2c:51:20:90:4f:59:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1C:4E:48:60:85:87:BF:2D:86:BA:E9:42:B1:F1:35:71:4F:EF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.70.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:7c:8b:fc:38:78:02:30:60:85:c7:81:69:b2:25:9e:5a:
         87:09:7e:cf:f8:5a:f7:75:ab:d5:52:c0:c6:0e:c1:98:06:e0:
         0d:37:a7:1b:ed:9a:67:a6:35:df:d2:43:0c:2a:9c:95:8a:0f:
         61:15:d2:e6:a1:7f:ad:20:72:11:61:3b:ab:f6:2a:a0:59:6e:
         6c:52:ac:54:1e:7c:2d:3a:b3:97:21:c7:14:71:e1:04:fd:e6:
         96:b5:5a:56:e3:19:b9:75:09:a2:66:87:98:52:d4:dd:4d:5e:
         a3:e4:58:1c:53:e0:73:90:ac:2d:56:08:3c:c5:0f:b8:7d:9b:
         ff:32:1a:a7:a9:e1:11:8a:12:0b:18:c8:15:fe:38:c2:26:ce:
         cb:2f:0d:f4:5f:f1:d4:87:6e:7a:bf:aa:ed:95:73:22:84:65:
         14:f3:5d:4d:0f:06:03:56:90:30:b4:fb:80:6e:0c:10:05:31:
         02:c1:b5:2d:ad:4f:6f:c7:30:c4:19:56:7c:3e:1f:54:1a:ea:
         05:d3:37:4d:fd:25:a3:02:77:7b:04:6d:85:d4:ac:9e:b7:91:
         73:2a:78:91:f2:dc:dd:50:e1:e7:71:f4:cb:b4:f7:ef:ad:ac:
         0c:79:00:da:df:c7:cd:a0:b6:4a:93:f1:9f:a9:e4:74:df:3d:
         38:82:c4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:51:35 2025 by rpki-client