This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa
File:                     c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (raw, json)
Hash identifier:          f3K7AHPA0cXFvlBanUP5h7/M+6aoeoEsHCKFQAb45vM=
Subject key identifier:   44:E4:CD:23:88:58:0A:B2:C3:BD:8F:DA:66:78:88:B3:9C:6A:07:A0
Certificate issuer:       /CN=3bb72fa3-359e-464d-be35-978a12d62998
Certificate serial:       010D0C9F4328584BE3F07CCF61A561164F648140
Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa
Signing time:             Mon 17 Nov 2025 14:00:39 +0000
ROA not before:           Mon 17 Nov 2025 14:00:39 +0000
ROA not after:            Sun 15 Feb 2026 14:00:39 +0000
asID:                     5009
IP address blocks:        64.56.0.0/19 maxlen: 24
                          64.237.64.0/19 maxlen: 24
                          66.186.224.0/19 maxlen: 24
                          108.179.160.0/19 maxlen: 24
                          159.48.192.0/19 maxlen: 24
                          160.223.208.0/20 maxlen: 24
                          205.233.40.0/22 maxlen: 24
                          206.124.192.0/19 maxlen: 24
                          206.204.112.0/20 maxlen: 24
                          208.97.32.0/20 maxlen: 24
                          209.62.192.0/19 maxlen: 24
                          209.124.192.0/19 maxlen: 24
                          209.124.224.0/19 maxlen: 24
                          216.115.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e3:f0:7c:cf:61:a5:61:16:4f:64:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998
        Validity
            Not Before: Nov 17 14:00:39 2025 GMT
            Not After : Feb 15 14:00:39 2026 GMT
        Subject: CN=d44a31c4-4158-44db-84b8-d7c2ba2b5cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:67:39:96:26:90:fe:ad:87:a1:f6:8b:94:
                    f2:e0:16:89:15:de:b4:e7:ea:bf:39:6c:c2:64:b8:
                    f7:79:7a:a3:7b:bf:69:a7:d3:47:bd:82:b6:d8:3e:
                    53:78:66:67:c6:19:64:5c:68:99:56:21:30:dd:10:
                    8c:b0:86:31:73:43:51:3b:1b:db:e1:5e:bc:25:0d:
                    e1:78:9b:fd:44:6c:f2:65:a1:fe:f7:c7:a4:9b:1c:
                    44:73:f7:4c:c2:ed:e7:1e:9a:31:4f:65:bc:91:e5:
                    17:46:50:6c:ab:6a:15:2a:a8:8b:9f:b3:70:c6:9f:
                    d1:a1:cd:90:7b:cd:00:45:e0:33:63:1e:78:c7:bd:
                    38:fe:87:27:49:30:b8:42:e9:29:b1:49:33:38:66:
                    e8:f8:cd:1e:25:64:76:0d:07:7c:4d:32:90:e5:5b:
                    ff:92:0e:61:7d:12:0a:a0:5b:b6:08:75:b0:d1:36:
                    7b:c4:a9:01:7c:9d:02:00:a6:b6:7f:5a:4c:44:c0:
                    46:f7:91:27:d7:ff:0c:f9:22:ed:c4:16:cb:e4:2c:
                    05:45:b7:9f:c7:d9:65:22:46:cc:dc:d8:ed:8a:d1:
                    41:c5:e1:2b:bb:c1:bd:e6:9c:59:52:a8:f4:1f:23:
                    a4:b6:39:db:6b:2d:d3:c3:1c:27:a4:d3:4c:a1:80:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E4:CD:23:88:58:0A:B2:C3:BD:8F:DA:66:78:88:B3:9C:6A:07:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl

            X509v3 Authority Key Identifier:
                keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.0.0/19
                  64.237.64.0/19
                  66.186.224.0/19
                  108.179.160.0/19
                  159.48.192.0/19
                  160.223.208.0/20
                  205.233.40.0/22
                  206.124.192.0/19
                  206.204.112.0/20
                  208.97.32.0/20
                  209.62.192.0/19
                  209.124.192.0/18
                  216.115.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:91:0e:82:70:a2:b6:09:6e:5e:4a:0e:62:83:d5:cf:96:b1:
         78:43:90:ed:27:42:a5:2a:26:ea:ba:f4:15:a7:b6:34:9f:1d:
         7c:3b:ba:24:df:dd:a8:94:1d:53:0a:02:7f:45:b5:33:1e:2f:
         8a:b2:c0:22:12:22:06:bf:8d:66:cf:96:87:3f:0b:45:bd:87:
         f7:13:a5:41:31:8e:c9:bc:a6:47:6e:d4:28:d8:ff:27:77:69:
         88:30:80:50:b9:cb:30:4c:1d:9b:ac:49:b0:63:7d:ab:c7:be:
         85:b7:c1:9c:78:85:3e:9b:90:2d:35:6e:19:00:72:47:a7:93:
         70:bb:1e:a3:53:b0:40:79:3e:51:16:b6:8f:eb:21:b1:4d:2f:
         d7:5d:36:92:55:71:d4:c0:39:1c:8c:0a:d1:7e:0f:4c:68:26:
         24:bc:0e:59:3a:87:f2:07:d1:11:5c:61:02:87:e9:8a:83:cd:
         5b:b3:6c:46:74:5f:23:a0:4c:13:40:19:67:bc:82:ed:e6:ac:
         b1:54:d7:45:a8:f4:41:6d:8c:4d:f7:6c:0b:ec:ce:b1:7d:42:
         74:8e:b9:e1:c4:ca:82:e2:d9:c0:76:5b:26:23:56:b6:10:82:
         68:fd:88:40:ca:78:e1:0e:0d:ed:56:a5:b5:b1:50:92:66:dc:
         cc:50:d5:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 26 02:37:21 2025 by rpki-client