This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3e233b44-911d-3c32-9600-9580640a3557.roa
File:                     3e233b44-911d-3c32-9600-9580640a3557.roa (raw, json)
Hash identifier:          /uRepCVENp1SwsE/mF6xH9h7x5lb5oaudngIORTNcQ4=
Subject key identifier:   B8:C9:AC:96:07:82:E7:42:28:42:52:A8:1F:87:13:2F:8C:EF:1A:F6
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584BC96AF89EB6FD95C34FC31900
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3e233b44-911d-3c32-9600-9580640a3557.roa
Signing time:             Sat 08 Nov 2025 02:00:30 +0000
ROA not before:           Sat 08 Nov 2025 02:00:30 +0000
ROA not after:            Fri 06 Feb 2026 02:00:30 +0000
asID:                     17378
IP address blocks:        72.29.96.0/19 maxlen: 24
                          72.249.0.0/17 maxlen: 24
                          72.249.128.0/18 maxlen: 24
                          74.112.92.0/22 maxlen: 24
                          74.114.180.0/22 maxlen: 24
                          74.118.40.0/22 maxlen: 24
                          74.120.208.0/22 maxlen: 24
                          74.213.128.0/19 maxlen: 24
                          96.31.160.0/20 maxlen: 24
                          98.142.80.0/20 maxlen: 24
                          104.37.108.0/22 maxlen: 24
                          144.202.128.0/17 maxlen: 24
                          162.216.52.0/22 maxlen: 24
                          162.220.104.0/22 maxlen: 24
                          162.222.96.0/22 maxlen: 24
                          162.248.248.0/21 maxlen: 24
                          173.237.128.0/18 maxlen: 24
                          173.240.48.0/20 maxlen: 24
                          174.136.0.0/18 maxlen: 24
                          192.197.58.0/23 maxlen: 24
                          198.35.116.0/22 maxlen: 24
                          199.21.64.0/21 maxlen: 24
                          199.87.60.0/22 maxlen: 24
                          199.96.248.0/21 maxlen: 24
                          199.188.208.0/22 maxlen: 24
                          199.193.140.0/22 maxlen: 24
                          199.193.176.0/22 maxlen: 24
                          199.233.224.0/22 maxlen: 24
                          204.11.208.0/22 maxlen: 24
                          204.15.100.0/22 maxlen: 24
                          204.16.108.0/22 maxlen: 24
                          205.147.202.0/24 maxlen: 24
                          205.147.208.0/24 maxlen: 24
                          205.147.218.0/24 maxlen: 24
                          205.147.235.0/24 maxlen: 24
                          206.123.64.0/18 maxlen: 24
                          206.245.164.0/24 maxlen: 24
                          207.8.244.0/22 maxlen: 24
                          207.45.160.0/20 maxlen: 24
                          207.154.0.0/18 maxlen: 24
                          207.210.192.0/18 maxlen: 24
                          207.254.208.0/20 maxlen: 24
                          208.67.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c9:6a:f8:9e:b6:fd:95:c3:4f:c3:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Nov  8 02:00:30 2025 GMT
            Not After : Feb  6 02:00:30 2026 GMT
        Subject: CN=de21b1df-c8e9-48e1-b6d7-a82a121d1695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:c4:d3:57:eb:52:64:43:b8:9c:f2:ad:f9:
                    63:30:8c:d4:c1:13:74:06:01:01:f6:48:b9:14:06:
                    c4:e9:f0:86:89:30:17:0e:21:59:8b:7b:c9:97:07:
                    6f:b2:8c:79:17:11:20:17:b2:21:b1:4c:ad:a4:41:
                    ca:a7:90:a2:ca:40:d9:ad:d6:cb:1f:b9:43:5e:d8:
                    59:36:53:4a:54:92:27:09:c0:b3:5d:38:0e:c7:fa:
                    eb:22:83:bc:b8:56:b3:bd:7c:9a:d7:d0:67:fb:98:
                    8d:16:ad:3a:2d:90:41:d1:0b:7a:14:c5:a1:df:ab:
                    d5:87:e5:50:12:d2:b7:12:83:73:41:be:02:79:6d:
                    77:44:7a:b0:5f:7e:7c:5a:34:13:c6:6e:75:cc:58:
                    93:b5:56:b8:b2:56:9c:26:6a:04:c1:8e:d5:31:22:
                    5c:0c:43:c1:ad:ab:31:52:be:dd:be:fa:d2:7c:09:
                    24:d0:03:23:78:98:4f:ef:42:fc:9b:57:fc:8f:aa:
                    0f:24:5b:c5:26:78:b6:a0:29:73:a2:bb:4c:03:d8:
                    63:68:cb:d1:c2:b4:cc:d3:90:ae:69:59:99:65:d0:
                    49:a1:fe:51:f2:d3:1d:b8:6f:9c:bf:10:7e:4f:3f:
                    8a:d0:be:50:58:28:b0:f0:8c:6d:10:7a:fd:dd:ac:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C9:AC:96:07:82:E7:42:28:42:52:A8:1F:87:13:2F:8C:EF:1A:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3e233b44-911d-3c32-9600-9580640a3557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.96.0/19
                  72.249.0.0-72.249.191.255
                  74.112.92.0/22
                  74.114.180.0/22
                  74.118.40.0/22
                  74.120.208.0/22
                  74.213.128.0/19
                  96.31.160.0/20
                  98.142.80.0/20
                  104.37.108.0/22
                  144.202.128.0/17
                  162.216.52.0/22
                  162.220.104.0/22
                  162.222.96.0/22
                  162.248.248.0/21
                  173.237.128.0/18
                  173.240.48.0/20
                  174.136.0.0/18
                  192.197.58.0/23
                  198.35.116.0/22
                  199.21.64.0/21
                  199.87.60.0/22
                  199.96.248.0/21
                  199.188.208.0/22
                  199.193.140.0/22
                  199.193.176.0/22
                  199.233.224.0/22
                  204.11.208.0/22
                  204.15.100.0/22
                  204.16.108.0/22
                  205.147.202.0/24
                  205.147.208.0/24
                  205.147.218.0/24
                  205.147.235.0/24
                  206.123.64.0/18
                  206.245.164.0/24
                  207.8.244.0/22
                  207.45.160.0/20
                  207.154.0.0/18
                  207.210.192.0/18
                  207.254.208.0/20
                  208.67.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:c7:72:f4:52:f9:76:81:be:21:b4:35:c5:c8:a4:d0:b8:
         4a:c8:a8:3a:56:c7:c3:69:a1:83:7a:b1:67:47:cb:24:b7:7d:
         7e:31:72:59:87:ae:33:52:a2:92:5b:42:db:92:86:b4:84:d7:
         d7:88:dd:92:ff:ae:34:9a:bf:91:2f:ce:ad:33:d7:0c:4d:35:
         41:14:cc:80:8f:94:1c:18:09:42:bd:32:ed:65:a8:72:54:37:
         a3:b9:da:d5:5a:54:2e:1e:25:71:97:03:ac:1e:83:df:b2:0d:
         38:36:09:b5:de:28:fb:ab:2a:7d:44:b3:1a:33:8d:be:50:d1:
         2a:87:d6:18:57:18:f3:89:e5:77:48:01:85:d5:2b:6c:94:b7:
         4e:46:cc:69:bb:20:af:c6:7e:bc:24:20:df:d3:5d:ee:0f:8e:
         31:49:7c:2c:a2:24:1e:73:8b:b0:fe:6e:e8:b3:59:f5:28:22:
         5e:59:a7:b1:50:5e:42:36:af:3d:2a:8f:c1:81:7a:f3:48:c7:
         84:80:91:c0:b4:fd:b0:a6:3c:7a:ee:ad:61:18:c2:ae:6b:b8:
         9f:c5:67:ff:36:a5:21:be:05:8a:25:87:14:f5:bd:d4:76:a4:
         98:1f:c1:b6:1f:b5:07:eb:d0:19:38:f5:4a:dc:d6:67:da:fa:
         c8:81:ee:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 5 23:50:50 2025 by rpki-client