This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa
File:                     9208bdf5-d639-308d-9352-7b93ba2bc9db.roa (raw, json)
Hash identifier:          zAGzkGIsHO22YueeAW2nUqKG0UFAdBzw3LUetTG3fqs=
Subject key identifier:   AD:FA:5A:01:5C:7B:30:7F:63:62:DA:52:EC:6C:76:20:58:48:B3:96
Certificate issuer:       /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial:       010D0C9F4328584C41765122E61EDF9E46C6ECA0
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     3580
IP address blocks:        68.234.48.0/20 maxlen: 32
                          216.220.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:51:22:e6:1e:df:9e:46:c6:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=d732490c-6980-422d-bfa5-baf231eb72f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:47:bb:45:83:71:44:d4:1c:a8:2e:f4:3b:
                    80:98:bc:be:b0:47:84:11:95:24:3d:b0:96:1a:11:
                    93:c2:03:6d:e9:20:c3:53:21:88:89:6a:ff:fb:c1:
                    bd:1e:11:a6:c1:4f:ad:cc:00:e0:28:7e:9d:09:11:
                    28:27:e1:9d:97:7b:c3:2e:5f:ae:fd:e8:2d:4e:d7:
                    58:82:78:e9:9a:33:8e:98:00:bb:b1:f8:75:25:7d:
                    53:bb:9e:1b:fe:1f:45:54:fc:60:d8:39:d5:21:a0:
                    6d:d6:d0:40:56:12:13:11:9c:ad:37:a6:03:dd:f5:
                    82:5b:97:3b:4f:0b:25:d1:72:94:65:78:ac:a0:98:
                    9f:20:e7:94:34:08:72:05:54:01:a3:e4:d6:b6:08:
                    d8:2b:44:cc:75:b1:44:23:0e:d0:ba:64:90:d4:3c:
                    12:c2:87:e0:e5:d6:39:29:4d:cc:56:97:92:ef:bc:
                    7f:b0:f8:de:bf:44:b0:2e:31:b2:fc:17:36:08:e3:
                    23:29:f7:5c:79:62:e8:d3:77:20:78:a1:e4:44:75:
                    24:76:b8:b9:e5:1b:c3:0a:f2:09:d5:ae:cb:e6:7f:
                    9d:b8:2b:5d:a3:4a:92:ca:5c:61:75:1b:6d:f9:ea:
                    f3:c7:5d:e2:25:b7:33:09:f5:50:8b:ad:5f:a0:c4:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FA:5A:01:5C:7B:30:7F:63:62:DA:52:EC:6C:76:20:58:48:B3:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl

            X509v3 Authority Key Identifier:
                keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.48.0/20
                  216.220.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:92:cf:db:8f:5d:50:a0:d1:4d:39:33:12:e8:c5:3c:0f:06:
         69:b6:96:15:99:54:ba:62:c4:06:16:1f:e7:4a:81:26:ad:d3:
         6f:6a:ad:9b:58:aa:c9:ce:6b:c3:0d:a5:ae:f8:e3:6b:e8:ad:
         f0:b2:58:4a:72:05:3e:5c:2f:d8:c6:fc:bf:65:c3:86:8c:2f:
         05:cb:63:6a:4f:86:fd:6a:30:3f:d0:4d:42:53:45:3d:52:60:
         78:bb:05:c8:32:7f:08:75:af:b3:25:5d:09:5f:1d:10:ff:73:
         dc:86:82:55:47:78:47:c3:04:10:e7:a9:73:6e:6c:4f:89:18:
         76:a7:e0:36:1c:61:13:b3:ba:28:58:54:0f:e2:70:f2:7d:a7:
         30:25:9e:43:ca:e0:51:78:78:f6:6b:b0:b3:f6:27:3c:75:df:
         24:3b:12:c2:c2:22:46:55:72:ba:29:34:9d:c8:42:07:4e:3b:
         d3:4f:7c:06:a7:cb:a6:70:a5:35:16:89:08:51:25:64:ad:ad:
         d1:3b:df:3f:b5:72:6d:5c:bb:0c:4c:f3:00:4a:3a:4e:30:24:
         d4:c4:af:ef:6f:8a:7f:7c:9d:e0:18:59:99:9f:2c:fe:8c:ab:
         92:87:48:e7:b7:fe:5a:41:fe:a6:7d:64:eb:53:78:fe:9c:58:
         2c:74:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:23:11 2026 by rpki-client