This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
File:                     cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json)
Hash identifier:          pfu/mK+rw90ljF2Tuqks3LhIq4IU7oofd5CFamdF9WU=
Subject key identifier:   E9:55:07:B2:20:1E:2A:29:AB:1F:40:75:9B:9E:E5:82:71:52:C3:78
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584C28562C6255F3A427C5AC3F00
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
Signing time:             Fri 12 Dec 2025 02:00:30 +0000
ROA not before:           Fri 12 Dec 2025 02:00:30 +0000
ROA not after:            Thu 12 Mar 2026 01:00:30 +0000
asID:                     14618
IP address blocks:        104.200.216.0/24 maxlen: 24
                          104.200.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:28:56:2c:62:55:f3:a4:27:c5:ac:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Dec 12 02:00:30 2025 GMT
            Not After : Mar 12 01:00:30 2026 GMT
        Subject: CN=b85083e6-e6d5-42aa-86e0-87e1b194fb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:94:d0:2b:bd:48:7b:c2:65:aa:7c:92:39:
                    af:fc:32:b3:be:33:7c:46:ee:53:2f:f3:67:d7:44:
                    66:e8:42:6b:13:0a:2d:2b:f8:b7:a0:a9:06:e3:83:
                    1b:f8:46:49:af:cd:d0:ce:96:4b:d5:7c:31:59:e0:
                    83:39:00:1a:77:59:a1:60:91:63:85:b9:ce:fd:85:
                    b7:00:d0:59:4b:79:b0:5c:be:05:63:98:4e:50:22:
                    83:1b:0d:77:d0:c1:17:21:68:4a:58:ec:03:e9:d0:
                    ba:12:4d:0f:13:0f:14:52:04:41:ac:12:c8:3d:77:
                    1f:43:b7:fc:c1:3a:b3:c8:2b:07:b9:d0:a1:62:cb:
                    fe:f4:7d:86:30:bc:6b:91:1b:d5:4b:bd:cf:11:28:
                    9c:44:37:50:fd:5e:2b:6c:0a:00:19:2b:6a:50:d8:
                    05:14:9b:e5:ba:4d:bb:4c:62:85:1c:d8:c1:c2:81:
                    d9:6d:8b:f5:10:f4:22:9f:92:5d:e2:3f:60:7b:78:
                    7d:eb:b5:71:80:43:69:9d:d8:21:2d:fc:47:b7:61:
                    bb:38:38:81:e7:52:71:96:47:87:29:87:e7:b1:d4:
                    61:71:a3:21:4e:93:c2:03:50:64:e9:eb:9d:86:a7:
                    71:8e:18:52:59:0f:cd:52:de:88:ce:7e:fa:ca:bd:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:07:B2:20:1E:2A:29:AB:1F:40:75:9B:9E:E5:82:71:52:C3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.216.0/24
                  104.200.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:eb:b5:74:28:b8:3f:5c:a5:bc:e2:ed:0c:e3:57:7c:44:
         55:db:07:f3:04:c9:bd:ab:88:9b:87:68:4d:ba:81:f2:ac:33:
         94:52:53:5f:9c:b3:75:97:78:87:09:c9:88:1d:f4:74:2b:18:
         59:83:41:25:48:e6:55:62:48:3f:42:ed:8a:75:5f:8b:8e:8f:
         cd:41:b6:46:cb:a0:e6:58:28:88:17:d1:8f:ab:ec:bc:e3:bd:
         92:3a:02:03:cf:e4:de:e2:f0:ed:9c:1b:55:d7:0d:0c:ea:69:
         ab:3d:84:81:50:c2:e1:0a:2d:6d:aa:d2:12:d8:32:91:54:80:
         18:7c:de:01:c4:aa:d6:79:72:48:4e:e0:21:81:b1:3b:22:96:
         18:fb:fe:c9:e6:4a:ba:7a:2b:84:6d:1b:83:85:e2:04:36:50:
         f1:41:c3:5f:df:b6:2d:04:55:37:84:2b:e1:b7:76:90:28:ac:
         e3:3c:32:61:77:2c:e6:35:cc:4b:c1:67:bc:ab:dc:0e:73:03:
         fb:3c:73:89:10:b4:1e:49:31:a8:df:8a:18:16:e0:57:8e:ef:
         7c:b0:e2:c6:a4:c1:ac:2c:7c:39:0d:32:88:66:83:5a:f1:f9:
         e1:5e:3d:d1:31:32:fc:a0:d9:1b:65:8e:1f:69:48:29:42:4c:
         4b:63:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:27:03 2025 by rpki-client