This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/647269b7-0ce5-34fe-9325-02fb43163014.roa
File:                     647269b7-0ce5-34fe-9325-02fb43163014.roa (raw, json)
Hash identifier:          PPFP+wdpFUCfguhISN4spWlrFoDo6IyjzewjEUfYjS4=
Subject key identifier:   4D:C5:B3:44:BE:96:61:E3:EB:E5:A9:79:C8:42:63:60:D6:A3:4F:5F
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584BECAF04E5CCC209ADE1821DEC
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/647269b7-0ce5-34fe-9325-02fb43163014.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     0
IP address blocks:        70.0.0.0/13 maxlen: 24
                          70.12.0.0/15 maxlen: 24
                          107.24.0.0/13 maxlen: 24
                          108.96.0.0/11 maxlen: 24
                          173.128.0.0/11 maxlen: 24
                          174.144.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ec:af:04:e5:cc:c2:09:ad:e1:82:1d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=f85760cf-776b-42f7-a668-7b6fab602f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:7e:e4:a8:f2:5a:b1:dd:40:a3:ab:df:8a:
                    b2:ab:da:97:9b:f3:75:3d:29:e1:fe:60:e2:d4:3a:
                    ec:75:54:b4:5c:e0:df:9e:3a:1d:29:3a:18:ce:dd:
                    3b:fa:dc:64:c3:87:72:09:b8:8c:4f:37:e2:80:24:
                    86:3b:ac:14:4b:10:26:fa:61:11:ab:e4:86:d3:5c:
                    bb:60:e6:9a:9e:e0:b5:6a:76:2b:f0:e2:3c:44:35:
                    ba:d1:7a:56:42:56:3f:e5:38:ee:0b:d4:2a:bd:c7:
                    95:47:ac:bc:fc:7c:28:91:b1:d8:5a:82:26:e2:78:
                    e6:9a:d3:93:eb:a5:12:92:3f:25:73:a1:d6:ee:21:
                    f8:65:3c:2c:31:49:2a:4b:d7:7f:c8:37:14:68:4d:
                    3c:3a:03:c9:12:e1:c3:db:97:8c:22:cf:61:9a:da:
                    d5:f0:2f:4f:98:00:44:a6:2c:4a:f6:f7:3d:ca:24:
                    36:5b:d2:7e:28:19:1c:15:7d:e5:0c:88:3c:c2:06:
                    8a:b7:b1:db:0f:18:6e:f2:4c:fc:74:41:8f:69:db:
                    3b:e6:b9:d9:7e:86:ed:bf:b8:88:00:7b:21:53:72:
                    fb:64:e9:cc:32:d5:82:64:a0:25:0f:70:56:4d:25:
                    58:35:42:a3:ef:ba:bd:fb:7e:12:5a:c5:a5:8d:c3:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C5:B3:44:BE:96:61:E3:EB:E5:A9:79:C8:42:63:60:D6:A3:4F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/647269b7-0ce5-34fe-9325-02fb43163014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.0.0.0/13
                  70.12.0.0/15
                  107.24.0.0/13
                  108.96.0.0/11
                  173.128.0.0/11
                  174.144.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:cb:a3:12:9e:b9:a9:30:bf:9c:46:0e:78:ef:bc:1a:79:2a:
         d0:72:5a:4c:a8:6e:74:19:b4:3b:1d:d6:fd:e6:c9:35:8e:8a:
         2c:23:49:dd:90:ad:a7:dd:aa:f3:bc:dd:e5:32:93:a2:b7:04:
         86:33:fb:2c:0c:69:67:38:34:b5:0a:58:73:15:3b:33:01:f4:
         a1:41:5e:c7:33:f4:6e:af:1e:e4:08:ef:ab:d0:56:d1:c1:9c:
         96:ab:c6:20:15:36:ba:b7:13:bc:8d:6a:94:3b:a5:87:eb:56:
         f1:d7:2a:ec:5e:2a:d3:25:31:ac:39:d0:7e:af:a4:3f:07:5d:
         81:a5:c2:9e:02:7c:eb:d3:a8:1f:1b:90:c0:03:0c:d2:28:94:
         2a:b9:5b:df:d0:08:ac:8d:e2:87:59:21:58:9e:b2:45:1c:bf:
         2d:7b:57:60:30:17:f1:85:85:47:76:78:81:d2:f9:2a:32:95:
         b8:de:8e:ab:94:26:3b:f1:6c:97:ee:16:93:78:8e:61:9f:a0:
         09:55:dd:d3:a6:6f:34:3d:cc:04:5b:bf:96:72:ff:60:4b:03:
         0f:a0:68:8d:95:01:b5:61:9b:d3:4d:43:24:80:b2:0a:dc:65:
         4e:fa:8d:56:f5:51:20:dc:1b:27:8d:81:ea:00:14:c6:fe:67:
         cf:66:33:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:41:28 2025 by rpki-client