This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
File:                     01b562f0-b1c7-3eae-99a1-f153b793addc.roa (raw, json)
Hash identifier:          UUF1Hc0Q6EhXFS3hf4Z1wtmViNLTw4tsuebtUJ5jPmw=
Subject key identifier:   6C:1E:69:43:C8:98:F6:F7:16:E4:FB:EC:AF:11:64:CF:D7:A7:BD:93
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584BCD9B17D3BC9EC4EFC424E100
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     13768
IP address blocks:        64.34.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:17:d3:bc:9e:c4:ef:c4:24:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=491c4ab6-c453-4b12-8473-c580fd4c1fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:24:d0:95:58:a8:dc:cb:79:41:00:1f:0a:
                    76:e0:64:2b:cf:e9:3e:e1:4c:f5:60:d9:fe:41:4b:
                    78:02:63:9c:8f:53:07:f1:e7:cc:42:af:74:7b:85:
                    5c:8b:15:03:21:89:50:f4:5a:17:d1:44:d6:47:af:
                    38:a9:96:0d:6d:7c:a2:72:5a:75:76:f1:36:01:e6:
                    bd:44:34:99:eb:69:9b:3b:f9:c7:1f:10:f1:18:e5:
                    af:46:25:16:c4:b2:81:c1:b3:49:db:93:a0:5c:be:
                    1a:30:28:a3:1f:29:e4:f9:4e:2b:6a:cf:64:14:01:
                    b7:1f:95:6d:9c:30:b7:e4:fa:67:8b:79:27:a3:b9:
                    c6:06:b1:94:8a:30:48:80:43:f1:6f:3e:7a:44:21:
                    35:91:70:ae:67:fa:e4:99:1c:6b:13:ee:af:42:fe:
                    5c:4f:25:4e:d4:d4:2e:84:16:71:81:48:b5:e7:c2:
                    21:23:d7:c7:ab:f2:3e:9f:8c:1c:1b:12:1b:f8:b3:
                    f8:a0:18:f5:21:91:55:72:cc:5b:31:9c:2d:f3:27:
                    f9:49:78:01:db:ea:90:f0:a5:4e:dd:7b:44:a7:b1:
                    f1:fb:6e:c1:f9:04:37:32:75:8a:f5:b1:8a:62:ab:
                    a7:a6:1f:bd:ae:2d:39:d1:ee:96:d3:73:0d:70:81:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:69:43:C8:98:F6:F7:16:E4:FB:EC:AF:11:64:CF:D7:A7:BD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:3a:16:c3:2d:5b:41:0f:6e:8c:76:9b:14:81:41:8e:52:
         61:2f:4d:ba:10:1d:47:da:87:da:82:87:5f:68:32:be:02:25:
         9c:f5:5e:77:2e:cd:af:b6:1e:f8:d7:62:ca:77:0c:9a:25:e7:
         1a:d7:d8:a0:cb:5a:2e:de:9e:61:c3:b9:68:8f:b7:ea:5a:c2:
         58:f1:4b:47:86:eb:09:c2:3b:ba:8a:eb:a9:6e:1b:03:14:d2:
         f9:fa:4c:c2:3e:19:a0:6f:6c:5b:80:74:3e:82:8d:ed:3a:dd:
         43:44:2a:63:d2:d2:3f:e8:ca:38:f0:1a:d2:a7:89:f6:3c:b5:
         61:1b:ef:a1:64:4b:55:5c:5b:2b:e3:32:da:c3:7e:20:0a:72:
         27:c4:aa:00:5f:83:6d:af:52:76:b4:f2:dc:63:40:3e:d8:95:
         5a:99:cc:71:2b:05:59:5c:60:32:38:19:53:56:99:fa:44:a5:
         f3:b3:aa:da:59:89:ee:c2:3b:be:65:f5:8a:52:f6:cd:71:d1:
         1c:4f:92:c1:cb:1f:4c:9c:21:96:fe:9e:cf:e2:cb:54:74:e0:
         40:5d:1a:8a:c0:e6:24:e7:0e:92:28:5c:70:42:ce:10:c8:91:
         70:25:90:aa:e6:54:05:fd:6d:87:d1:6c:34:55:a6:c6:5b:18:
         ee:4d:4f:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxfTvJ7E78Qk4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk
NDkxYzRhYjYtYzQ1My00YjEyLTg0NzMtYzU4MGZkNGMxZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY8k0JVYqNzLeUEAHwp24GQrz+k+4Uz1YNn+
QUt4AmOcj1MH8efMQq90e4VcixUDIYlQ9FoX0UTWR684qZYNbXyiclp1dvE2Aea9
RDSZ62mbO/nHHxDxGOWvRiUWxLKBwbNJ25OgXL4aMCijHynk+U4ras9kFAG3H5Vt
nDC35Ppni3kno7nGBrGUijBIgEPxbz56RCE1kXCuZ/rkmRxrE+6vQv5cTyVO1NQu
hBZxgUi158IhI9fHq/I+n4wcGxIb+LP4oBj1IZFVcsxbMZwt8yf5SXgB2+qQ8KVO
3XtEp7Hx+27B+QQ3MnWK9bGKYqunph+9ri050e6W03MNcIFWwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGweaUPImPb3FuT77K8RZM/Xp72TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMDFiNTYyZjAtYjFjNy0z
ZWFlLTk5YTEtZjE1M2I3OTNhZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANrOhbDLVtBD26MdpsUgUGOUmEvTboQHUfah9qCh19oMr4CJZz1Xncu
za+2HvjXYsp3DJol5xrX2KDLWi7enmHDuWiPt+pawljxS0eG6wnCO7qK66luGwMU
0vn6TMI+GaBvbFuAdD6Cje063UNEKmPS0j/oyjjwGtKnifY8tWEb76FkS1VcWyvj
MtrDfiAKcifEqgBfg22vUna08txjQD7YlVqZzHErBVlcYDI4GVNWmfpEpfOzqtpZ
ie7CO75l9YpS9s1x0RxPksHLH0ycIZb+ns/iy1R04EBdGorA5iTnDpIoXHBCzhDI
kXAlkKrmVAX9bYfRbDRVpsZbGO5NT5E=
-----END CERTIFICATE-----
Generated at Tue Nov 25 11:58:57 2025 by rpki-client