This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9bc941a0-30bd-3a8a-93ac-588fff355ee9.roa
File:                     9bc941a0-30bd-3a8a-93ac-588fff355ee9.roa (raw, json)
Hash identifier:          3GEuo5Qv79cjnfA4sfzi8eor8kwgXLw9De9pHAkWFNc=
Subject key identifier:   B8:ED:29:22:70:F5:4D:D7:45:58:C4:C9:4C:A8:A1:5A:CA:B2:29:CC
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584BE555CFCD925797CA49CA0200
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9bc941a0-30bd-3a8a-93ac-588fff355ee9.roa
Signing time:             Tue 18 Nov 2025 02:00:30 +0000
ROA not before:           Tue 18 Nov 2025 02:00:30 +0000
ROA not after:            Mon 16 Feb 2026 02:00:30 +0000
asID:                     4922
IP address blocks:        98.159.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e5:55:cf:cd:92:57:97:ca:49:ca:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Nov 18 02:00:30 2025 GMT
            Not After : Feb 16 02:00:30 2026 GMT
        Subject: CN=94b724c6-7eb6-4010-ab6f-76b9a0f8cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:8a:a0:2f:a7:58:ba:60:e6:b5:eb:f3:f9:
                    6c:6e:1c:8f:0c:b6:db:56:d9:91:d8:1b:94:d4:f5:
                    29:15:bd:b1:77:d3:76:d1:90:2c:19:70:cd:75:56:
                    05:47:c4:fa:76:16:ab:f7:84:1f:e0:63:ed:b1:9d:
                    a9:53:5c:0a:17:48:9b:5f:66:b9:51:82:e7:3a:d2:
                    19:30:bf:16:36:08:76:f2:26:e7:b0:43:f3:4c:ac:
                    36:7a:86:47:c6:1c:45:3f:36:6b:38:aa:39:14:33:
                    d4:a0:2e:fd:54:9b:30:0f:ab:ee:77:e2:d0:6e:f4:
                    36:10:7c:63:a6:23:9d:01:2b:f3:e5:36:75:26:17:
                    07:19:ea:74:2e:97:57:b0:9e:c3:92:d3:55:41:26:
                    c0:1a:12:ed:2d:e7:e4:f5:1f:9f:81:7e:04:f9:16:
                    b5:e3:b3:38:ea:8f:01:0c:9d:55:a8:35:8c:95:26:
                    f0:8d:dc:4a:4a:86:fd:85:41:92:79:a4:80:92:2d:
                    43:11:32:57:9e:bf:7e:8c:40:75:ab:9a:26:3e:f9:
                    98:1e:bc:a7:f3:42:f5:78:50:bd:c7:41:0c:87:04:
                    11:48:11:2d:60:8f:e3:91:fa:fe:81:d0:9d:ec:e3:
                    d4:71:68:c0:2c:f7:b5:49:66:92:6b:3a:6c:71:74:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:ED:29:22:70:F5:4D:D7:45:58:C4:C9:4C:A8:A1:5A:CA:B2:29:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9bc941a0-30bd-3a8a-93ac-588fff355ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:59:da:66:3e:1b:5a:9f:63:c1:72:00:ef:cd:49:0e:13:63:
         b0:c3:ae:92:76:68:e6:64:7f:b9:e6:c1:d2:93:d0:29:ff:71:
         eb:ba:1d:ce:60:6a:ab:1f:67:70:75:be:c8:00:f5:fb:68:20:
         9e:22:d6:68:06:09:a7:0b:77:87:74:ca:cd:92:4a:12:e3:dc:
         18:78:46:b7:56:ab:7c:2b:12:cc:e7:a4:48:7d:27:ef:e1:70:
         e3:8f:f8:bc:2f:c3:7b:01:2d:5f:ab:b6:a0:2a:d6:9a:a4:0f:
         74:50:be:f4:07:4c:f4:93:79:74:f0:3c:7b:88:66:6e:dc:1d:
         8e:6d:4d:46:7e:99:a1:ff:64:a7:6c:45:dc:a6:f1:23:16:f0:
         e4:68:8e:dc:26:e8:2c:c6:9a:42:7c:66:52:5a:3e:60:72:5c:
         f6:af:b3:9b:66:1c:24:2f:ce:f5:71:db:5f:26:c6:e7:b6:57:
         d8:8d:a2:ba:ba:94:87:ed:f3:e1:6e:f6:7b:4e:4d:d9:a2:6b:
         c3:40:3e:f0:3d:e7:da:30:95:b6:02:32:e3:1b:56:4a:c2:81:
         4d:ee:4d:02:c9:8c:6c:86:0b:13:80:6b:ee:9c:06:9a:42:df:
         c3:d1:c2:96:30:43:ed:fd:83:2f:21:48:64:c3:0f:cd:0c:69:
         1d:bc:dc:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVc/NkleXyknKAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk
OTRiNzI0YzYtN2ViNi00MDEwLWFiNmYtNzZiOWEwZjhjYjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKqKoC+nWLpg5rXr8/lsbhyPDLbbVtmR2BuU
1PUpFb2xd9N20ZAsGXDNdVYFR8T6dhar94Qf4GPtsZ2pU1wKF0ibX2a5UYLnOtIZ
ML8WNgh28ibnsEPzTKw2eoZHxhxFPzZrOKo5FDPUoC79VJswD6vud+LQbvQ2EHxj
piOdASvz5TZ1JhcHGep0LpdXsJ7DktNVQSbAGhLtLefk9R+fgX4E+Ra147M46o8B
DJ1VqDWMlSbwjdxKSob9hUGSeaSAki1DETJXnr9+jEB1q5omPvmYHryn80L1eFC9
x0EMhwQRSBEtYI/jkfr+gdCd7OPUcWjALPe1SWaSazpscXR9IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLjtKSJw9U3XRVjEyUyooVrKsinMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvOWJjOTQxYTAtMzBiZC0z
YThhLTkzYWMtNTg4ZmZmMzU1ZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5Z2mY+G1qfY8FyAO/NSQ4TY7DDrpJ2aOZkf7nmwdKT0Cn/ceu6Hc5g
aqsfZ3B1vsgA9ftoIJ4i1mgGCacLd4d0ys2SShLj3Bh4RrdWq3wrEsznpEh9J+/h
cOOP+Lwvw3sBLV+rtqAq1pqkD3RQvvQHTPSTeXTwPHuIZm7cHY5tTUZ+maH/ZKds
Rdym8SMW8ORojtwm6CzGmkJ8ZlJaPmByXPavs5tmHCQvzvVx218mxue2V9iNorq6
lIft8+Fu9ntOTdmia8NAPvA959owlbYCMuMbVkrCgU3uTQLJjGyGCxOAa+6cBppC
38PRwpYwQ+39gy8hSGTDD80MaR283FU=
-----END CERTIFICATE-----
Generated at Tue Nov 25 08:21:12 2025 by rpki-client