This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/432b313e-9579-3793-abb3-307c537e7f51.roa
File:                     432b313e-9579-3793-abb3-307c537e7f51.roa (raw, json)
Hash identifier:          ZBh/e88XohuX59DDLKB1GkckedyHKBQtPDMB8Hd8tjU=
Subject key identifier:   AF:03:EF:06:44:14:75:3B:88:26:DD:8A:B1:7D:CE:F5:1C:8B:E2:37
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584C0C45146488AA09A5EEAB9700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/432b313e-9579-3793-abb3-307c537e7f51.roa
Signing time:             Tue 02 Dec 2025 00:43:31 +0000
ROA not before:           Tue 02 Dec 2025 00:43:31 +0000
ROA not after:            Mon 02 Mar 2026 00:43:31 +0000
asID:                     401152
IP address blocks:        166.1.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0c:45:14:64:88:aa:09:a5:ee:ab:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec  2 00:43:31 2025 GMT
            Not After : Mar  2 00:43:31 2026 GMT
        Subject: CN=43a78264-65d3-4d8e-bca8-096a1ae38d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:f6:2d:8f:3f:1b:7a:a4:e0:49:84:60:fe:
                    7b:77:89:0f:2c:39:d6:42:5c:51:70:99:63:46:b3:
                    fc:5b:0a:ff:af:3e:c7:89:48:7d:7b:21:24:c8:93:
                    59:0e:92:91:a8:be:98:21:47:97:a9:e1:d3:a2:49:
                    50:19:16:3b:74:61:b7:dc:36:e3:15:55:5e:a6:98:
                    36:49:bd:27:b7:5c:8d:4d:ad:b9:0d:d8:9f:69:77:
                    51:5b:a2:c9:db:8f:0a:74:81:eb:a1:fe:5e:72:ea:
                    80:a8:bd:33:70:e5:94:22:50:44:27:3c:87:9b:5b:
                    5d:15:31:12:b0:79:4c:a6:ba:a0:64:ef:26:40:6b:
                    51:4c:2f:44:93:5d:9a:48:f8:69:83:91:e9:46:c7:
                    07:6c:f2:d1:5a:dd:74:0f:92:0f:7f:cd:ee:10:c0:
                    bd:b2:d0:3d:37:6f:26:86:f1:ac:8b:11:8d:cd:ac:
                    32:bf:43:df:97:74:8a:57:9a:cd:2a:b4:8b:92:6a:
                    03:99:be:f1:88:ef:23:13:89:30:97:83:68:3c:81:
                    e4:c7:63:68:f3:83:7d:2a:8a:6f:ae:74:b6:59:cc:
                    c1:dd:d6:42:40:7e:dd:bc:68:e6:a5:02:45:e3:78:
                    70:de:4b:09:0a:9d:0f:13:f0:9d:8f:66:c5:59:8f:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:EF:06:44:14:75:3B:88:26:DD:8A:B1:7D:CE:F5:1C:8B:E2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/432b313e-9579-3793-abb3-307c537e7f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:27:47:86:65:29:4b:3c:c5:09:eb:2b:9f:aa:30:7b:0c:0b:
         7c:e1:c0:1a:84:5b:b7:b4:83:05:4e:dc:e8:6f:f8:e4:5a:0a:
         b3:5c:36:e1:12:95:a8:d1:41:4e:14:ee:79:cd:bf:37:a6:b7:
         d5:a5:6e:34:c3:9b:79:81:24:5d:40:19:27:15:29:92:d6:95:
         08:b4:ae:75:a6:23:c1:3f:15:d8:e8:f5:3e:7f:3c:9f:1f:6f:
         37:d0:39:24:bb:00:aa:31:94:90:c9:87:6c:f3:e8:38:ee:c3:
         7d:c3:e1:d8:e8:8a:01:09:ab:a3:ea:3d:c5:84:cd:8f:e2:ca:
         f2:c6:f9:4e:44:12:e4:83:14:57:4a:f8:87:5e:24:2d:2f:9f:
         0c:e7:df:0d:40:a1:0e:66:83:97:d6:16:fc:2f:3e:d7:dd:75:
         d4:fd:ed:23:26:04:1f:74:f3:4d:c1:07:48:c4:29:e9:3f:7a:
         6c:36:9a:20:c7:05:e3:0b:34:0e:f5:b1:d3:85:a9:8d:cf:f0:
         9d:0c:99:93:7b:92:2a:dd:c9:e0:b5:d9:56:8f:71:7c:96:c2:
         24:1f:1c:cf:21:6d:03:80:49:2a:60:66:84:0b:01:81:ce:97:
         4c:fe:71:31:c9:f0:29:69:8b:9f:c6:f9:6f:b6:4c:9b:d9:97:
         2d:33:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:36:49 2025 by rpki-client