This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/dfda9553-074c-3f0e-a81b-5bb6e0636647.roa
File:                     dfda9553-074c-3f0e-a81b-5bb6e0636647.roa (raw, json)
Hash identifier:          9N3+u1O6tMw9pXpz2qqAcTcUjgz8LWBLTEWeXtY87VE=
Subject key identifier:   2E:13:BE:4D:A4:1B:23:DA:89:A8:F9:5B:4B:DA:7D:0B:5A:82:32:FB
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584BFD112B35A24B1D4F22AEFA30
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/dfda9553-074c-3f0e-a81b-5bb6e0636647.roa
Signing time:             Wed 26 Nov 2025 14:00:39 +0000
ROA not before:           Wed 26 Nov 2025 14:00:39 +0000
ROA not after:            Tue 24 Feb 2026 14:00:39 +0000
asID:                     44486
IP address blocks:        104.204.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fd:11:2b:35:a2:4b:1d:4f:22:ae:fa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Nov 26 14:00:39 2025 GMT
            Not After : Feb 24 14:00:39 2026 GMT
        Subject: CN=66d9decd-ecbb-44d8-bec6-2426cf39e559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:c2:d4:30:8b:f2:86:cd:5d:76:ac:6a:e9:
                    81:6a:b2:29:00:7c:59:f8:73:f8:76:4d:4d:96:cf:
                    e0:e8:85:93:cf:ac:1e:93:34:4e:94:a5:c2:4f:e0:
                    d8:35:d1:e6:5a:5e:ba:b6:30:45:95:c6:2d:80:46:
                    05:18:45:2f:b6:cc:1a:ee:7f:ef:20:d3:e6:ee:0c:
                    a4:28:9f:4f:e4:66:74:9f:27:43:5d:3e:cc:7f:a4:
                    bb:c6:14:b8:3c:47:20:ba:fe:3b:d7:9d:b3:ed:1f:
                    ae:b9:30:07:3d:3b:31:5c:0b:02:bf:8d:9a:bd:0a:
                    6d:12:7d:a1:4d:c6:23:d2:2a:68:38:cb:a1:2f:e1:
                    02:90:3d:8a:8f:e1:fb:09:12:48:b1:e2:8d:0b:94:
                    54:8a:e5:9f:a2:69:2f:68:e3:0e:80:80:f2:a3:56:
                    8f:e9:56:02:9f:93:b4:2b:46:13:59:22:04:f5:66:
                    ed:db:9c:a8:8d:19:9a:16:06:ca:dd:d2:82:1f:d3:
                    6d:00:11:5c:fa:b3:43:5f:c6:62:7a:60:d3:57:a2:
                    9c:59:df:72:c0:4e:aa:51:a0:78:ce:c7:4a:b7:7d:
                    06:42:72:46:be:3e:f0:7e:b5:0f:a9:49:78:20:5d:
                    dd:03:74:10:dd:c2:18:29:92:b8:54:c1:19:d2:0e:
                    d6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:13:BE:4D:A4:1B:23:DA:89:A8:F9:5B:4B:DA:7D:0B:5A:82:32:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/dfda9553-074c-3f0e-a81b-5bb6e0636647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:e8:5b:c8:83:f5:db:19:48:e6:05:5c:c3:de:1e:44:56:bc:
         fb:c1:7b:58:6b:84:97:79:df:17:64:74:f0:b4:76:91:85:75:
         b9:ae:96:c2:42:ed:cd:6d:60:a8:b4:dd:6f:2b:86:04:6b:2b:
         f2:bb:f8:3b:29:82:f2:9d:c9:b4:33:3f:85:d6:20:76:c0:d0:
         74:32:7c:ca:30:c2:fc:b7:3b:33:89:a5:0f:9f:98:58:d1:d3:
         1a:8f:87:b9:60:80:fe:1d:29:4b:45:a7:47:e8:dd:50:0f:1b:
         80:70:bf:47:08:20:51:71:45:53:c7:1f:8a:cf:dc:6f:07:6f:
         8d:b4:bc:4c:08:3a:f5:f1:4e:4d:c0:e9:ed:1e:10:cd:80:7d:
         16:d5:bd:7d:66:d9:8b:07:ee:f1:e3:11:e6:4d:8d:93:36:f0:
         f1:44:d5:78:ac:03:ab:aa:65:df:3e:27:9a:45:25:7a:b0:77:
         70:37:16:87:55:f2:84:5b:7f:9a:f0:e3:fa:a1:eb:6b:c6:c7:
         90:38:22:7c:6d:42:43:d9:83:10:54:a7:8a:16:6c:ed:79:0f:
         cb:c7:e9:1f:fd:ec:38:bd:69:fb:e4:b2:05:1c:e2:eb:4c:74:
         1b:a5:fa:f0:28:c7:26:70:95:ba:03:12:62:5a:5a:d1:77:6d:
         de:61:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 22:16:25 2025 by rpki-client