This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa
File:                     4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa (raw, json)
Hash identifier:          oNvLCFT5VY6MICLlF+YMiRPtY9BgIeeZDVmY2ouW2XE=
Subject key identifier:   0E:8F:1B:59:F8:68:1A:EB:07:04:BB:E1:96:6F:01:C4:F3:CE:00:F9
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584BEDB5DBC40AB6BF5263521700
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa
Signing time:             Fri 21 Nov 2025 02:00:30 +0000
ROA not before:           Fri 21 Nov 2025 02:00:30 +0000
ROA not after:            Thu 19 Feb 2026 02:00:30 +0000
asID:                     3464
IP address blocks:        129.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ed:b5:db:c4:0a:b6:bf:52:63:52:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Nov 21 02:00:30 2025 GMT
            Not After : Feb 19 02:00:30 2026 GMT
        Subject: CN=ef28b600-9a6c-4cd4-beec-c4b25ae3908f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:c2:59:3f:28:0b:49:c2:1a:29:22:34:74:
                    11:fe:b9:d7:e7:65:10:ce:78:24:52:ba:ee:e0:4a:
                    30:54:48:1e:e7:8e:dc:c0:fd:67:8e:95:3c:e5:fd:
                    c8:5c:7c:52:92:8f:0c:b4:3d:01:59:bc:ad:39:39:
                    2b:32:ee:8a:1a:8c:81:a6:f8:33:2f:80:db:c9:18:
                    a4:d1:cc:c7:37:8c:15:aa:cd:67:4a:e5:e2:3f:56:
                    f5:60:e6:51:c5:50:a6:8c:61:be:40:6b:d3:09:dd:
                    dd:59:0c:ca:6f:cd:2c:0b:56:38:81:12:af:fe:a1:
                    50:c3:29:67:0e:08:95:ef:1b:80:a7:8f:6f:a4:ec:
                    61:5a:2b:e4:12:c7:12:9c:11:9e:c6:73:d2:8c:c6:
                    63:13:25:47:9e:34:47:a0:2e:04:8d:b3:59:7b:9b:
                    6c:e1:a8:b2:8f:d0:33:bd:68:49:3d:f5:64:45:c4:
                    aa:8b:4a:18:81:f2:d8:bc:3e:1d:02:da:a6:96:15:
                    76:bf:7a:d9:b4:53:8b:14:f2:9f:10:76:a9:06:1f:
                    f5:3a:98:37:dd:e4:3b:df:96:91:65:58:01:73:ee:
                    db:7a:a2:c6:0c:80:4f:d8:e9:5c:9f:bd:d6:38:e7:
                    0b:72:b2:0f:9b:2b:d1:61:7f:84:91:26:57:ec:3e:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:1B:59:F8:68:1A:EB:07:04:BB:E1:96:6F:01:C4:F3:CE:00:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:16:40:8f:f4:14:7e:3b:ad:32:28:63:f4:6c:24:1b:39:07:
         34:99:af:a4:c7:93:28:3b:94:28:23:51:82:c6:d2:99:8a:d7:
         29:d4:78:06:7a:5a:80:1c:a2:3a:a1:38:7d:66:97:92:4f:64:
         ff:0d:1d:0d:f3:26:73:0a:d6:50:f8:90:da:e8:ae:c7:fa:91:
         0c:3e:83:06:64:06:e0:46:95:75:bf:d5:df:68:34:49:07:2f:
         a8:c4:23:25:c9:ad:6e:14:3a:5b:53:bf:7e:1e:fe:8e:81:d4:
         55:9d:3e:fb:22:fa:22:b3:bc:0b:b7:5d:16:50:54:ce:f3:a8:
         86:4a:50:66:ff:ac:a4:6c:cf:7a:c7:22:2f:c6:a9:d4:70:4d:
         72:d9:95:c6:bb:07:b8:8b:53:21:8f:f1:9b:16:0f:9e:8c:95:
         da:de:ea:af:05:61:7c:39:ee:d8:e0:85:d5:e1:f5:12:be:6b:
         19:e5:3c:18:de:fe:cf:35:5b:5a:ce:60:50:05:e2:8d:fe:fe:
         d6:7b:0d:5d:6f:59:68:e2:94:4c:c6:ea:ed:51:19:b9:95:1f:
         bb:bb:96:cc:79:f3:cd:74:d6:a9:3a:78:2e:8b:d3:b3:06:f8:
         b5:88:5e:39:2a:7c:b7:13:ea:c5:23:42:db:cd:21:80:39:95:
         ef:e4:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:35:35 2025 by rpki-client