This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa
File:                     faa4b138-2a66-3a38-85b9-47b64616ab70.roa (raw, json)
Hash identifier:          xpIl036d8pS4Xrh3XYENdLn6nnyD8ImZSHqb8BxCRoc=
Subject key identifier:   59:5D:81:B6:ED:61:61:FE:6F:16:5A:0D:BE:A6:D2:61:99:95:82:DF
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584BF8E0B18424509E5331F4A680
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa
Signing time:             Tue 25 Nov 2025 02:00:31 +0000
ROA not before:           Tue 25 Nov 2025 02:00:31 +0000
ROA not after:            Mon 23 Feb 2026 02:00:31 +0000
asID:                     7018
IP address blocks:        65.87.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:e0:b1:84:24:50:9e:53:31:f4:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Nov 25 02:00:31 2025 GMT
            Not After : Feb 23 02:00:31 2026 GMT
        Subject: CN=5b3108a0-8eb0-44f3-bb3d-c5eb620c7aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:13:b0:a6:fb:b1:bc:aa:40:1c:1b:13:ea:
                    b1:74:af:91:93:bb:da:96:75:c2:3e:83:7c:7e:81:
                    d7:4e:62:da:b9:f6:d8:24:cd:d6:14:75:c6:8b:d1:
                    03:99:fa:90:90:35:39:77:23:83:5a:59:69:c9:75:
                    3c:fe:c3:d8:d3:ea:e7:05:0b:32:63:34:62:21:eb:
                    ad:5d:98:4f:a5:ab:d7:bf:03:e5:e2:75:e2:d9:16:
                    57:d8:84:b2:03:82:67:ea:dc:02:00:ce:17:c6:53:
                    50:29:e0:4a:b0:9c:73:9e:57:09:35:b6:ce:be:99:
                    c3:92:0d:65:ac:e8:74:0e:4b:24:c5:3d:c1:b8:0c:
                    d5:46:20:51:ca:2b:a4:ca:5a:7d:7c:25:ca:62:36:
                    00:b0:87:d9:7b:55:7b:88:17:e8:48:a3:a6:45:b5:
                    fd:ca:65:df:24:b7:f9:69:55:27:88:98:94:c6:6b:
                    bb:cb:de:90:20:18:8b:e4:ae:80:c6:ca:51:de:e2:
                    87:d1:c3:6d:bb:d3:6d:cd:7a:c7:1b:07:aa:8c:6e:
                    04:af:27:6e:e7:43:6a:7b:a7:66:43:e8:44:25:55:
                    b3:86:96:e3:cf:e7:7e:4d:e9:7f:cc:ec:b0:2d:57:
                    fd:2a:aa:0b:9c:84:89:9b:21:b0:c0:68:77:18:74:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5D:81:B6:ED:61:61:FE:6F:16:5A:0D:BE:A6:D2:61:99:95:82:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:66:40:bc:57:ae:87:82:cd:b1:17:50:87:a6:89:62:54:
         24:a9:71:31:ce:d8:d9:52:f1:e3:19:b9:03:8b:c7:46:46:a6:
         91:32:63:ec:fd:92:ad:0c:dc:f7:16:eb:83:40:5c:85:94:54:
         6a:f7:75:df:61:b8:de:bf:30:c1:55:9f:f6:8f:54:9a:0e:9c:
         55:d9:b5:93:2b:8c:ea:f6:a6:4f:4c:01:9f:72:2b:9c:cb:69:
         05:f0:ef:c7:31:cb:8a:55:7d:b3:3c:59:38:ba:ac:a2:f9:4f:
         77:07:13:3f:1b:c9:29:85:5b:00:2c:c8:0d:33:88:0d:1b:55:
         9e:ed:41:9f:40:b4:fe:80:f3:a0:32:ca:46:c1:92:1b:3d:a4:
         3f:50:a4:0c:80:f2:a7:6a:44:cd:17:72:25:33:3c:b4:f2:8d:
         91:69:16:4b:02:67:0c:f5:b5:fd:0a:32:c3:78:8b:c0:42:6c:
         6c:9c:08:a1:0d:9a:89:61:db:d0:87:a4:19:ca:4a:fa:c9:72:
         cf:d7:be:03:a5:2e:4f:e1:08:ad:f0:fc:6a:7d:1c:b9:a6:12:
         58:53:76:76:a7:98:f6:80:95:8c:05:7a:bc:e4:6b:bd:df:8b:
         ea:7b:8a:89:d2:e0:85:53:e5:c9:af:0d:ac:2e:ee:c2:78:2d:
         b1:c7:2a:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44LGEJFCeUzH0poAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk
NWYzMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
NWIzMTA4YTAtOGViMC00NGYzLWJiM2QtYzVlYjYyMGM3YWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRsTsKb7sbyqQBwbE+qxdK+Rk7valnXCPoN8
foHXTmLaufbYJM3WFHXGi9EDmfqQkDU5dyODWllpyXU8/sPY0+rnBQsyYzRiIeut
XZhPpavXvwPl4nXi2RZX2ISyA4Jn6twCAM4XxlNQKeBKsJxznlcJNbbOvpnDkg1l
rOh0DkskxT3BuAzVRiBRyiukylp9fCXKYjYAsIfZe1V7iBfoSKOmRbX9ymXfJLf5
aVUniJiUxmu7y96QIBiL5K6AxspR3uKH0cNtu9NtzXrHGweqjG4Erydu50Nqe6dm
Q+hEJVWzhpbjz+d+Tel/zOywLVf9KqoLnISJmyGwwGh3GHTQ6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFldgbbtYWH+bxZaDb6m0mGZlYLfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl
Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZmFhNGIxMzgtMmE2Ni0z
YTM4LTg1YjktNDdiNjQ2MTZhYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky
ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk
M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbwZkC8V66Hgs2xF1CHpoliVCSpcTHO2NlS8eMZuQOLx0ZGppEyY+z9
kq0M3PcW64NAXIWUVGr3dd9huN6/MMFVn/aPVJoOnFXZtZMrjOr2pk9MAZ9yK5zL
aQXw78cxy4pVfbM8WTi6rKL5T3cHEz8bySmFWwAsyA0ziA0bVZ7tQZ9AtP6A86Ay
ykbBkhs9pD9QpAyA8qdqRM0XciUzPLTyjZFpFksCZwz1tf0KMsN4i8BCbGycCKEN
molh29CHpBnKSvrJcs/XvgOlLk/hCK3w/Gp9HLmmElhTdnanmPaAlYwFerzka73f
i+p7ionS4IVT5cmvDawu7sJ4LbHHKtU=
-----END CERTIFICATE-----
Generated at Tue Nov 25 16:31:59 2025 by rpki-client