This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
File:                     504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa (raw, json)
Hash identifier:          rTbiY7pBtDUtm6QENVAV0/n5DsJ+02lvzEGPdcCVsWs=
Subject key identifier:   B0:E1:D5:BD:6A:D3:1B:2B:C2:4A:04:F7:57:1C:E9:2D:BC:6A:CD:B4
Certificate issuer:       /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial:       010D0C9F4328584BDCF5B850F80497FE398B6680
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
Signing time:             Sat 15 Nov 2025 02:00:32 +0000
ROA not before:           Sat 15 Nov 2025 02:00:32 +0000
ROA not after:            Fri 13 Feb 2026 02:00:32 +0000
asID:                     36671
IP address blocks:        74.121.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:dc:f5:b8:50:f8:04:97:fe:39:8b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
        Validity
            Not Before: Nov 15 02:00:32 2025 GMT
            Not After : Feb 13 02:00:32 2026 GMT
        Subject: CN=be0dccf0-4100-41e3-9ab1-cf52227c9abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:d8:aa:a8:01:30:6c:bd:ff:f4:92:ef:25:
                    b7:51:f6:2c:0a:16:b7:7f:ef:7f:df:ab:75:8e:d8:
                    5b:ca:ba:67:83:86:d9:da:da:50:a1:45:11:ed:33:
                    c4:0f:a4:fa:17:47:38:e2:39:a6:1f:5f:4d:34:66:
                    08:58:dc:32:3c:4e:c4:b2:9c:b9:5f:01:ea:1d:7d:
                    75:9f:db:1f:d2:f1:8f:2c:57:ab:c6:9e:a5:51:fa:
                    9c:4c:7a:25:0c:2f:4a:61:ea:5a:c5:96:9a:df:05:
                    fb:bb:45:de:0b:1a:a7:e4:d2:4a:2a:5a:0f:bd:3d:
                    b3:55:73:79:42:ad:52:5a:5c:20:5e:8c:95:9d:7f:
                    72:be:4f:fe:92:4a:53:1a:2b:69:02:48:e0:15:53:
                    e3:fb:9b:d9:6c:73:83:67:37:08:69:79:09:e3:26:
                    ed:56:c4:de:0a:1d:9c:1c:a2:0f:e9:7a:f0:62:e7:
                    86:1f:50:3f:ac:9d:9f:88:45:ae:79:be:3c:83:ca:
                    c0:69:6b:4c:37:93:42:d2:31:9d:82:d6:4d:b0:45:
                    28:12:18:f5:2b:59:6a:a1:10:a4:f7:83:dd:20:66:
                    d1:17:16:e9:19:2a:d6:cc:87:10:04:43:32:82:c7:
                    0c:c1:13:77:14:f1:07:42:2f:9a:68:8e:07:fb:71:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E1:D5:BD:6A:D3:1B:2B:C2:4A:04:F7:57:1C:E9:2D:BC:6A:CD:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6b:6c:65:a3:54:13:e3:fd:b1:46:c3:15:82:19:d5:93:7d:
         2b:39:47:84:14:6d:b7:c8:bb:46:4a:4e:dc:cb:32:26:1c:30:
         05:3c:94:c8:b1:55:63:09:3f:0b:1c:65:b3:e4:aa:79:c7:83:
         6f:2b:d3:98:c3:1e:a4:d9:24:5f:b8:91:ce:fa:c6:93:9f:4c:
         79:8e:63:60:27:ff:5b:20:e6:68:43:46:cf:9c:58:86:a9:eb:
         60:ab:69:f3:33:fc:b6:80:f7:b7:d0:01:0a:f9:38:27:09:ea:
         22:ee:2e:00:b0:8c:00:06:49:b5:b5:ab:02:83:16:08:e5:e1:
         d8:b3:37:7d:97:b2:34:d0:fb:8e:6a:fb:5f:da:40:46:0e:6a:
         3e:89:5f:f8:d7:65:40:95:44:fd:ca:d8:e3:6f:aa:d9:26:f0:
         f5:46:7d:21:fb:88:db:05:3a:f7:2b:c5:cf:42:4a:3c:a1:69:
         ba:34:62:73:31:c3:f6:26:41:13:e6:8a:4f:db:8d:95:04:bf:
         9d:32:94:ae:6d:7b:84:48:79:98:a4:6c:5c:c3:94:99:80:a1:
         fe:e9:24:17:0c:cc:4f:78:bb:52:29:b7:12:79:8a:50:21:de:
         e3:b5:60:27:c6:bf:33:df:a4:4b:15:c6:84:c5:03:42:12:b3:
         45:76:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:10:34 2025 by rpki-client