This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
File:                     10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json)
Hash identifier:          7ny4+mt2f/IRJ/l2xR/zRRKUotGKuiyMuzRlkOEgWKY=
Subject key identifier:   37:75:23:03:3E:FF:92:37:4D:9C:AA:47:F5:C8:8C:68:50:30:EA:B2
Certificate issuer:       /CN=8c902da3-488d-44d9-9833-f1295a9fd887
Certificate serial:       010D0C9F4328584BF88FA86926BBC17D7A253D80
Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     3925
IP address blocks:        209.165.192.0/24 maxlen: 24
                          209.165.194.0/24 maxlen: 24
                          209.165.201.0/24 maxlen: 24
                          209.165.202.0/24 maxlen: 24
                          209.165.209.0/24 maxlen: 24
                          209.165.211.0/24 maxlen: 24
                          209.165.212.0/24 maxlen: 24
                          209.165.213.0/24 maxlen: 24
                          209.165.214.0/24 maxlen: 24
                          209.165.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:8f:a8:69:26:bb:c1:7d:7a:25:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=8c9fda89-f9a0-4c5c-b4ed-2e7b4691ffac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:66:8e:11:65:c4:2c:08:54:d8:ef:47:8b:
                    35:d0:76:e1:8a:cc:89:52:e7:a8:fc:74:3e:ba:73:
                    a1:07:49:67:12:30:ae:f6:e2:9b:6c:0b:58:2c:83:
                    55:83:0f:6d:0c:1d:8c:55:37:e1:24:e6:a9:9e:e3:
                    8a:cc:db:2d:66:3d:92:c6:e7:75:b7:04:fa:ff:83:
                    9a:76:7e:e3:e0:d2:90:b8:eb:3f:40:2c:57:f3:52:
                    0b:75:ed:f1:80:70:42:96:88:75:18:bc:6b:a3:65:
                    f1:48:9f:5d:89:5c:aa:78:8b:aa:68:b7:72:20:31:
                    9c:6c:32:ac:60:f5:99:63:6e:4c:5e:a0:f7:bd:a9:
                    e6:e9:be:c0:7e:70:05:52:b4:ca:dd:4c:44:1f:6d:
                    fa:0e:4a:5b:8e:aa:ed:cb:30:96:aa:ac:2b:93:36:
                    2c:ca:6f:97:e6:04:85:7c:76:bd:f0:10:7c:f4:78:
                    24:46:f5:a4:fe:f3:ca:5b:3c:de:9e:b5:da:29:95:
                    81:3f:63:43:d1:7c:0c:93:35:e8:6a:9f:13:93:56:
                    6c:0d:06:24:34:8f:21:b6:5b:cc:79:cf:96:57:87:
                    e4:f5:0f:76:55:48:61:63:e0:2b:54:f7:69:1b:4b:
                    14:a5:e7:ab:78:50:e3:3e:12:49:b2:67:41:89:89:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:75:23:03:3E:FF:92:37:4D:9C:AA:47:F5:C8:8C:68:50:30:EA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.165.192.0/24
                  209.165.194.0/24
                  209.165.201.0-209.165.202.255
                  209.165.209.0/24
                  209.165.211.0-209.165.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:58:7d:82:f7:ed:09:8c:be:c4:bc:f2:7f:66:25:c0:58:12:
         ef:eb:30:f0:56:7b:d2:e8:ba:07:ef:1e:53:7f:97:1c:11:60:
         c8:a4:b0:8f:f2:35:1c:e1:6f:15:6e:74:87:04:cf:32:9d:dc:
         10:ca:87:79:74:8d:b1:02:15:c5:db:38:76:81:4b:e0:45:47:
         ca:bd:29:82:5c:20:2a:5e:4a:5e:18:14:55:34:c0:8c:3a:bf:
         61:17:52:7b:dd:07:18:0d:32:df:30:69:a1:7f:08:c3:0e:25:
         fa:11:f9:c8:12:53:d2:5e:5b:40:84:60:40:55:e2:54:cb:48:
         af:0f:40:d9:2a:a8:a6:06:21:1f:6e:0b:6c:81:c6:4f:d0:c3:
         58:ab:48:93:35:3b:b0:5f:c1:30:57:e5:3c:53:32:97:57:2f:
         d0:9e:77:0b:e9:cc:be:d4:3a:09:a8:09:a3:40:32:6b:16:c6:
         ed:6f:10:00:01:94:eb:42:0b:47:d6:81:96:54:89:7b:24:e2:
         eb:6a:8e:ac:11:69:89:c2:30:59:39:7e:3d:ff:9f:c4:6d:40:
         c1:25:2f:02:0f:c0:40:26:bc:81:79:f5:6f:01:df:c7:0b:14:
         e1:b7:75:dd:f9:07:bc:ee:d5:52:d2:5d:42:8e:4a:08:72:d0:
         33:7f:bd:22
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEv4j6hpJrvBfXolPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk
ODg3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
OGM5ZmRhODktZjlhMC00YzVjLWI0ZWQtMmU3YjQ2OTFmZmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxBmjhFlxCwIVNjvR4s10HbhisyJUueo/HQ+
unOhB0lnEjCu9uKbbAtYLINVgw9tDB2MVTfhJOapnuOKzNstZj2Sxud1twT6/4Oa
dn7j4NKQuOs/QCxX81ILde3xgHBCloh1GLxro2XxSJ9diVyqeIuqaLdyIDGcbDKs
YPWZY25MXqD3vanm6b7AfnAFUrTK3UxEH236DkpbjqrtyzCWqqwrkzYsym+X5gSF
fHa98BB89HgkRvWk/vPKWzzenrXaKZWBP2ND0XwMkzXoap8Tk1ZsDQYkNI8htlvM
ec+WV4fk9Q92VUhhY+ArVPdpG0sUpeereFDjPhJJsmdBiYmFDwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFDd1IwM+/5I3TZyqR/XIjGhQMOqyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw
MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvMTBhNTk4NTYtZjcxYS0z
NWZhLWFhMGQtM2MyOTNmYWE4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4
MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm
ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5
NWE5ZmQ4ODcuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQA0aXAAwQA
0aXCMAwDBADRpckDBADRpcoDBADRpdEwDAMEANGl0wMEA9Gl0DBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI
WH2C9+0JjL7EvPJ/ZiXAWBLv6zDwVnvS6LoH7x5Tf5ccEWDIpLCP8jUc4W8VbnSH
BM8yndwQyod5dI2xAhXF2zh2gUvgRUfKvSmCXCAqXkpeGBRVNMCMOr9hF1J73QcY
DTLfMGmhfwjDDiX6EfnIElPSXltAhGBAVeJUy0ivD0DZKqimBiEfbgtsgcZP0MNY
q0iTNTuwX8EwV+U8UzKXVy/QnncL6cy+1DoJqAmjQDJrFsbtbxAAAZTrQgtH1oGW
VIl7JOLrao6sEWmJwjBZOX49/5/EbUDBJS8CD8BAJryBefVvAd/HCxTht3Xd+Qe8
7tVS0l1CjkoIctAzf70i
-----END CERTIFICATE-----
Generated at Tue Nov 25 08:17:07 2025 by rpki-client