This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa
File:                     41d5735c-bf44-3d40-b55c-71b48a44901f.roa (raw, json)
Hash identifier:          +e5sTqcuS4y+wWXnkGXJLhdRXo+hd7sEg4ThLbD2P+E=
Subject key identifier:   A2:65:C6:81:0E:E8:FA:54:7C:D5:2F:A1:F5:99:7C:18:4C:25:96:5C
Certificate issuer:       /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Certificate serial:       010D0C9F4328584BE125D4C1727BED95C04C4300
Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa
Signing time:             Sun 16 Nov 2025 14:00:39 +0000
ROA not before:           Sun 16 Nov 2025 14:00:39 +0000
ROA not after:            Sat 14 Feb 2026 14:00:39 +0000
asID:                     40230
IP address blocks:        104.143.48.0/20 maxlen: 24
                          199.247.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e1:25:d4:c1:72:7b:ed:95:c0:4c:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
        Validity
            Not Before: Nov 16 14:00:39 2025 GMT
            Not After : Feb 14 14:00:39 2026 GMT
        Subject: CN=92689c4a-33a2-44cb-abe1-50f67667b04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:cc:4b:77:3e:af:50:81:b7:51:1c:e8:0f:
                    b0:9b:b9:30:d3:db:b7:2f:56:49:aa:46:78:4b:48:
                    0f:9f:a3:87:a9:77:95:42:5d:25:80:aa:ed:42:3d:
                    73:9c:1c:a2:82:a5:db:f2:49:65:01:9f:c7:dd:9b:
                    6c:7a:c6:21:1e:8b:7c:df:79:c6:94:f3:44:14:bb:
                    ca:4f:04:a4:89:58:d2:d4:1f:b7:42:e8:57:3b:f7:
                    ec:34:d5:5e:2b:29:58:98:9f:d9:33:1b:24:a9:5e:
                    5e:b0:b6:a6:e5:7f:38:fe:29:43:14:b3:81:68:cc:
                    83:81:59:6a:40:ea:d7:a5:18:e4:d8:98:14:81:ed:
                    cb:26:ef:bf:5b:84:39:17:9d:45:a4:fd:68:31:6a:
                    8e:20:78:b4:49:85:ff:4a:c0:75:82:51:65:ef:50:
                    90:3d:cb:02:4b:92:89:ab:2c:c6:5a:10:f5:ed:c8:
                    01:6e:5c:fb:a5:c6:f3:cf:0f:f2:fe:0f:d8:01:b6:
                    1c:a8:e9:5d:b3:1a:ad:a0:97:04:b4:25:42:37:1a:
                    27:8f:dc:64:ea:7a:b0:f2:3c:69:0b:3c:a7:c9:d8:
                    f2:e5:c0:88:7e:38:0d:6c:9e:3e:cf:12:20:f0:30:
                    47:1f:38:c4:a5:e4:0c:c8:e3:68:55:08:72:fd:e6:
                    90:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:C6:81:0E:E8:FA:54:7C:D5:2F:A1:F5:99:7C:18:4C:25:96:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl

            X509v3 Authority Key Identifier:
                keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.48.0/20
                  199.247.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:39:02:f3:c0:7d:18:33:80:ee:2f:2d:c4:d8:39:4a:2d:74:
         ce:50:b8:a0:83:97:e4:49:f4:dd:b5:fa:af:7e:3a:dd:b1:fb:
         54:15:18:a1:f3:0e:30:15:f4:69:85:7d:f3:d9:ca:f5:03:05:
         cd:ba:21:bf:22:a2:11:30:f9:95:0c:2f:ac:9c:89:5d:6b:d4:
         fc:ba:fd:7d:dd:c8:3c:cd:7f:4e:ef:f9:85:6b:72:73:23:5c:
         20:b2:7f:90:9a:21:a7:85:82:bb:73:28:74:bf:81:92:7f:6f:
         74:3c:3e:ab:51:49:23:80:f8:38:8e:69:54:37:34:05:e2:63:
         87:3e:8c:d3:d1:7e:48:7a:a0:3e:2c:43:73:88:87:13:1f:3f:
         ee:b4:90:fd:10:bd:3f:a3:96:c8:0f:56:55:c4:76:36:10:32:
         76:5b:d6:cb:82:5a:a1:07:ab:98:e2:70:3f:18:58:e9:f1:8b:
         0c:69:6d:ba:1b:a8:8f:00:10:e1:21:00:00:30:d9:c8:c0:c6:
         d6:30:79:c0:1b:d5:a9:d9:5a:62:18:1b:73:07:9b:b9:75:21:
         8d:ff:76:8a:b4:34:b2:8a:78:17:11:75:a6:f0:47:85:56:fe:
         6a:0a:ae:d6:20:b5:e2:9e:c4:9e:d1:3e:e4:51:78:f3:b2:f9:
         c4:23:a6:01
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvhJdTBcnvtlcBMQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy
YWYwMB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk
OTI2ODljNGEtMzNhMi00NGNiLWFiZTEtNTBmNjc2NjdiMDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwXMS3c+r1CBt1Ec6A+wm7kw09u3L1ZJqkZ4
S0gPn6OHqXeVQl0lgKrtQj1znByigqXb8kllAZ/H3ZtsesYhHot833nGlPNEFLvK
TwSkiVjS1B+3QuhXO/fsNNVeKylYmJ/ZMxskqV5esLam5X84/ilDFLOBaMyDgVlq
QOrXpRjk2JgUge3LJu+/W4Q5F51FpP1oMWqOIHi0SYX/SsB1glFl71CQPcsCS5KJ
qyzGWhD17cgBblz7pcbzzw/y/g/YAbYcqOldsxqtoJcEtCVCNxonj9xk6nqw8jxp
Czynydjy5cCIfjgNbJ4+zxIg8DBHHzjEpeQMyONoVQhy/eaQQwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKJlxoEO6PpUfNUvofWZfBhMJZZcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi
MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvNDFkNTczNWMtYmY0NC0z
ZDQwLWI1NWMtNzFiNDhhNDQ5MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1
M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj
MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0
MzRiYzJhZjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaI8wAwQD
x/eQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACM5AvPAfRgzgO4vLcTYOUotdM5QuKCDl+RJ9N21+q9+Ot2x
+1QVGKHzDjAV9GmFffPZyvUDBc26Ib8iohEw+ZUML6yciV1r1Py6/X3dyDzNf07v
+YVrcnMjXCCyf5CaIaeFgrtzKHS/gZJ/b3Q8PqtRSSOA+DiOaVQ3NAXiY4c+jNPR
fkh6oD4sQ3OIhxMfP+60kP0QvT+jlsgPVlXEdjYQMnZb1suCWqEHq5jicD8YWOnx
iwxpbbobqI8AEOEhAAAw2cjAxtYwecAb1anZWmIYG3MHm7l1IY3/doq0NLKKeBcR
dabwR4VW/moKrtYgteKexJ7RPuRRePOy+cQjpgE=
-----END CERTIFICATE-----
Generated at Sun Dec 14 17:01:11 2025 by rpki-client