This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/e85b829e-4187-31e1-8233-da0005797706.roa
File:                     e85b829e-4187-31e1-8233-da0005797706.roa (raw, json)
Hash identifier:          wYuqE1MOlTolvte62YBxZzR2mP2CnLXHQlt8vPpaYVw=
Subject key identifier:   CA:8F:0C:66:B1:EB:AD:A0:5B:93:3F:91:54:35:02:CD:03:EF:4B:94
Certificate issuer:       /CN=13de6f16-d107-4bd3-9789-960ad0df19bc
Certificate serial:       010D0C9F4328584BEF62B4F7D0A14AC51A6F6900
Authority key identifier: C7:D2:7B:B2:A7:FA:25:1F:B6:5A:B8:53:21:D5:C8:1C:52:33:84:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/e85b829e-4187-31e1-8233-da0005797706.roa
Signing time:             Fri 21 Nov 2025 16:24:47 +0000
ROA not before:           Fri 21 Nov 2025 16:24:47 +0000
ROA not after:            Thu 19 Feb 2026 16:24:47 +0000
asID:                     13335
IP address blocks:        208.88.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/13de6f16-d107-4bd3-9789-960ad0df19bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/13de6f16-d107-4bd3-9789-960ad0df19bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ef:62:b4:f7:d0:a1:4a:c5:1a:6f:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13de6f16-d107-4bd3-9789-960ad0df19bc
        Validity
            Not Before: Nov 21 16:24:47 2025 GMT
            Not After : Feb 19 16:24:47 2026 GMT
        Subject: CN=e0b0e7ff-d3f9-4cfe-a5ca-e1467f83f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:cf:e8:75:71:16:9a:a4:a9:9a:cf:1f:01:
                    d3:1f:da:5f:87:1c:34:33:7e:40:09:34:17:da:12:
                    95:b1:fa:1d:75:b3:08:ac:20:d5:80:5d:74:bd:c1:
                    23:4e:d2:e4:0a:36:a2:7d:4e:28:d6:9d:75:a0:b7:
                    6c:87:2e:e4:d1:93:aa:a1:5f:2b:b7:bb:c2:33:97:
                    11:c8:56:3c:55:eb:33:e4:a1:50:99:cd:e9:49:20:
                    62:d6:ef:d7:92:d6:ba:44:16:73:16:55:f8:58:6a:
                    ed:d8:3c:9f:2e:70:39:15:03:6e:aa:04:b7:92:d6:
                    8d:df:70:03:ee:e1:26:e8:34:e5:e2:86:96:e9:b6:
                    07:1e:3a:50:fd:49:c1:9c:f3:33:ae:93:51:b6:5a:
                    95:26:49:3b:69:4e:0f:f9:bd:4d:70:c3:c5:63:81:
                    95:77:d5:06:92:f8:33:53:f4:9b:dc:54:70:28:28:
                    af:8e:2b:38:47:46:c2:d4:6a:95:de:cb:10:bd:91:
                    33:cb:0f:f1:77:2b:24:6c:37:80:8f:46:91:1f:73:
                    92:3f:7c:11:7b:d6:3c:03:e1:86:eb:0c:48:76:da:
                    6b:21:57:6e:9d:c0:27:20:68:4b:a9:1a:4e:de:62:
                    04:a1:b8:d0:69:0c:48:d0:d1:7b:90:dc:ca:97:a2:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:0C:66:B1:EB:AD:A0:5B:93:3F:91:54:35:02:CD:03:EF:4B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/e85b829e-4187-31e1-8233-da0005797706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/13de6f16-d107-4bd3-9789-960ad0df19bc.crl

            X509v3 Authority Key Identifier:
                keyid:C7:D2:7B:B2:A7:FA:25:1F:B6:5A:B8:53:21:D5:C8:1C:52:33:84:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:b4:cf:34:48:7f:30:7f:84:1d:56:0e:20:28:c2:60:f7:
         97:9d:9b:e3:eb:02:5d:a0:69:da:d4:45:b7:5c:74:f0:9a:1c:
         31:9e:b4:47:4b:11:9d:ab:cf:7a:09:42:04:ec:e2:57:f4:79:
         a2:73:a5:dd:88:94:1c:11:1e:1f:be:6f:fa:17:de:24:08:5c:
         0b:8d:12:5e:81:b9:8b:51:c8:b9:d4:b2:a8:e8:c5:c0:a8:e5:
         08:84:d7:b2:47:b1:0c:bf:18:4f:3e:2e:03:d6:4e:6e:70:be:
         46:7e:ab:3e:cb:a0:0d:df:04:f2:ad:9a:95:e8:9d:df:e4:f8:
         fb:b7:8a:24:7e:56:91:ae:57:b3:0c:5b:ad:dc:a6:7e:e0:3a:
         5b:60:1d:fa:0e:46:0e:77:f6:26:da:46:60:5a:02:ae:0a:53:
         0a:f4:09:9d:e5:54:1f:be:82:fc:8c:ac:ad:11:f0:43:ab:29:
         d8:8d:e5:c9:c2:d4:60:05:af:25:cb:22:8f:f7:22:b8:36:20:
         f6:53:80:bb:c0:ac:15:d3:dd:d6:69:36:4f:17:95:d6:15:6f:
         f4:b4:e2:ff:cd:f7:ad:f4:d2:6c:ea:66:a9:39:02:8d:ab:03:
         b2:d2:1e:ab:28:a0:29:7d:c1:bd:dd:03:26:82:73:3c:73:70:
         b5:c1:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 07:55:18 2025 by rpki-client