This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
File:                     9f872cec-cb89-3d99-a275-e385fd188443.roa (raw, json)
Hash identifier:          qA5hsH27lz0vheqF/0xbet80RcOw2wW0APQcvHYq4ns=
Subject key identifier:   39:E9:3A:AD:3E:C4:0D:58:40:20:14:D4:B9:47:85:4C:7E:FE:78:B3
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584BC53B06812A48C397FB5E2D20
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     2572
IP address blocks:        209.106.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3b:06:81:2a:48:c3:97:fb:5e:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=5671e52e-6a41-4b05-a5c1-0dce7df48778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:3e:be:67:fa:25:3c:c6:ec:21:dc:30:f5:
                    c8:d4:15:fb:35:da:c3:af:1a:ee:95:2b:49:14:e2:
                    78:5d:e3:41:c1:ae:65:ee:64:89:21:27:9c:46:11:
                    0f:b3:2b:36:19:91:55:06:05:cc:e3:52:e2:57:d9:
                    f7:37:e8:bd:33:cb:86:98:44:e7:94:fe:72:1e:eb:
                    37:87:72:75:83:4c:e6:94:2b:4f:f0:dd:87:51:f6:
                    32:f1:db:1b:e7:e3:89:8f:1e:09:16:a5:c3:ce:9a:
                    ec:4e:1f:9d:5d:e7:33:9a:5e:11:dd:c4:1c:ae:8a:
                    f7:18:bf:51:1e:60:67:f3:63:87:3e:ce:a2:a0:29:
                    61:07:48:c1:10:bc:bd:70:86:b8:bd:05:20:a7:3c:
                    9b:74:c1:4f:e6:b8:1b:f8:dc:91:cc:36:88:52:e4:
                    28:12:d4:ec:18:27:a7:1a:41:69:49:35:70:b6:a1:
                    c5:67:42:76:f5:00:5e:4b:49:0b:d8:ed:c4:8f:04:
                    4a:39:62:82:ca:37:37:f7:02:14:f3:19:28:c7:ab:
                    3d:ae:09:b2:33:a3:36:5f:0e:4f:3f:f5:5b:da:9a:
                    93:60:fb:09:8f:60:5e:69:c3:90:fd:45:31:7b:13:
                    d1:a5:b3:65:05:61:c2:de:e0:e6:35:d5:0f:74:eb:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E9:3A:AD:3E:C4:0D:58:40:20:14:D4:B9:47:85:4C:7E:FE:78:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:78:b8:21:fa:82:c9:2a:06:99:c7:0d:ab:09:fe:ac:f9:
         04:03:ed:44:7b:67:61:75:e3:04:61:1b:a6:57:27:d2:a2:19:
         2b:c1:07:8d:7a:33:34:7c:62:64:e8:d9:45:3e:a6:79:0f:e7:
         cc:d8:aa:91:f3:cf:d9:9f:13:ce:ce:dc:fe:b6:3a:a9:76:27:
         fd:ab:9e:13:34:59:63:bf:a7:9a:f2:e0:37:0a:5a:48:f8:f6:
         4f:ad:bb:77:93:61:32:2d:98:66:de:bf:b1:b7:df:2e:da:1b:
         03:5c:fb:bc:15:a6:81:87:85:07:4f:d3:34:0b:d4:5e:06:a9:
         72:dd:2f:7b:3f:a6:fb:bb:ae:0e:d3:be:cc:71:08:cd:5a:13:
         66:1c:f6:0e:9c:fa:bd:a0:c4:c4:e4:1c:b7:13:72:f9:06:ef:
         de:a3:b8:af:1c:d5:c1:58:ee:00:0d:86:11:37:c2:e4:33:73:
         9a:01:b6:51:3f:3d:53:48:d4:f3:b1:26:11:14:93:32:a6:04:
         29:cf:e2:b3:ad:d7:58:52:56:ed:e4:f6:8d:5b:b5:fd:33:9f:
         8d:e3:f5:b6:40:4b:86:3c:4c:b6:11:a4:02:e4:65:9b:e2:c1:
         cf:01:39:77:c7:98:0a:67:89:b4:d3:c2:34:79:9f:d2:b2:88:
         7b:2e:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 11:34:15 2025 by rpki-client