This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa
File:                     ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa (raw, json)
Hash identifier:          IVo2h4CtHRKYeEKFqJSrXGcbW43Ei87gNCN7ffxaB6A=
Subject key identifier:   02:74:DF:D8:01:0C:14:D1:9A:FF:E6:D0:F4:D8:49:6B:92:93:A6:BE
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584BE82087A450CCD583F0FD0240
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa
Signing time:             Wed 19 Nov 2025 02:00:30 +0000
ROA not before:           Wed 19 Nov 2025 02:00:30 +0000
ROA not after:            Tue 17 Feb 2026 02:00:30 +0000
asID:                     8069
IP address blocks:        20.33.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e8:20:87:a4:50:cc:d5:83:f0:fd:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Nov 19 02:00:30 2025 GMT
            Not After : Feb 17 02:00:30 2026 GMT
        Subject: CN=16ef6ddd-64c2-49cf-909b-ee9d2f6d2138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:29:71:63:86:f7:a9:8b:f6:8c:f3:25:a5:
                    fb:41:d2:7c:3f:df:37:51:09:ac:f2:d2:f5:08:63:
                    00:e8:e8:05:da:e0:25:d1:88:69:ea:26:68:84:65:
                    d0:ba:04:a8:80:d8:f3:46:cb:fa:b9:d2:32:5c:ff:
                    a6:3c:51:ae:76:34:7e:66:b2:5d:28:a6:a6:73:70:
                    62:b1:39:0e:72:4f:10:64:45:e1:91:fd:29:eb:65:
                    98:a8:cf:63:7c:93:99:32:50:47:11:6e:02:8b:d5:
                    1c:06:2f:48:dc:98:b3:bd:24:c6:59:40:81:d2:fb:
                    15:a8:8f:1a:03:4c:bb:e9:b9:14:52:85:82:74:ed:
                    a8:b7:b5:45:20:34:e3:1a:82:b2:a1:19:70:20:1e:
                    c9:29:b8:09:c3:6b:35:0b:62:49:98:60:bf:87:b8:
                    77:3b:2a:57:03:eb:85:4c:bb:78:08:6b:d7:d4:b2:
                    1c:c2:ec:fc:61:7f:71:ac:85:10:bc:66:88:51:ce:
                    03:2d:60:89:bf:2f:27:df:47:df:7b:c4:10:ee:c6:
                    9f:8f:f9:16:51:84:e2:3f:14:1d:6c:89:52:4f:73:
                    f5:7e:40:30:76:2e:b6:e8:50:db:fa:15:29:06:0e:
                    4b:cb:f9:2e:cb:94:c8:e1:26:2e:4a:38:e5:5d:3d:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:DF:D8:01:0C:14:D1:9A:FF:E6:D0:F4:D8:49:6B:92:93:A6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:28:a5:cc:bf:c1:08:5e:50:e6:66:06:ad:71:2b:5b:14:f2:
         aa:df:87:78:0d:fa:d2:d4:dd:d8:5f:30:7a:30:57:e2:49:1d:
         e8:f3:4f:c2:ac:cc:3b:0b:41:75:76:f9:3a:e2:93:44:e3:e7:
         b4:eb:29:c0:54:3b:08:e3:d3:e9:a3:00:a9:7f:d4:75:75:86:
         16:48:4f:98:8d:39:45:44:ef:ed:57:e3:05:02:90:1c:05:5e:
         c7:74:9e:03:3c:eb:1c:35:10:ce:94:21:05:17:af:0e:bc:ea:
         1d:b3:dd:c2:17:15:26:b5:4c:42:a1:a8:0d:19:25:35:ff:c0:
         a1:2a:1b:11:3c:e1:0c:fe:a7:51:54:e5:b0:db:d0:b4:43:4f:
         f0:0a:59:97:44:12:25:6b:16:0c:cf:0b:22:1c:9a:48:0c:f9:
         37:1a:3d:19:69:f9:15:c8:65:d5:fd:2f:6c:f3:84:2e:60:d6:
         2b:df:cf:80:a5:aa:5c:24:32:a9:d9:a6:e3:5c:fb:ca:a2:c8:
         20:f5:cb:16:fa:58:e7:3c:61:a0:30:61:aa:b1:5f:be:81:ba:
         4f:f7:eb:19:71:99:02:23:75:80:d5:ca:1c:4a:19:03:10:3d:
         8d:ba:ab:fe:28:a8:e9:24:e1:33:4a:75:84:a2:59:06:58:0a:
         9d:69:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:53:25 2025 by rpki-client