This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa
File:                     cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa (raw, json)
Hash identifier:          B/Oss3GmXHMEEgd75nZAZEIwUIOeiA3jNWvOC8q23Z4=
Subject key identifier:   76:FC:04:6E:5D:CA:07:37:82:85:CD:02:74:56:83:AA:3E:53:7C:EB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584BD93C2F306B2E1C8C706366A4
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa
Signing time:             Thu 13 Nov 2025 17:59:23 +0000
ROA not before:           Thu 13 Nov 2025 17:59:23 +0000
ROA not after:            Wed 11 Feb 2026 17:59:23 +0000
asID:                     62904
IP address blocks:        104.140.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d9:3c:2f:30:6b:2e:1c:8c:70:63:66:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Nov 13 17:59:23 2025 GMT
            Not After : Feb 11 17:59:23 2026 GMT
        Subject: CN=16af5771-4f70-4ef3-bf1e-27f0d401cf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:5e:24:87:2d:08:2f:95:52:4e:92:3b:3f:
                    a8:14:1f:14:d8:ee:a0:e2:2a:4e:76:fd:8d:03:e4:
                    ce:ad:68:7e:2a:f4:57:79:7e:1c:c6:da:10:8f:35:
                    5c:96:01:72:ed:5a:6c:15:3e:de:9c:03:53:51:bb:
                    11:2a:09:bb:01:50:cd:b4:02:cb:94:af:ce:33:b8:
                    13:8b:9b:bc:a3:c1:16:db:62:15:38:cd:2c:c5:87:
                    9e:4c:6c:4f:2c:bf:78:e0:95:4b:f3:55:a7:fd:84:
                    62:25:d7:36:0a:5a:e0:40:53:25:05:04:24:d9:c3:
                    6c:09:57:45:a7:cc:de:91:6c:4c:9f:01:8c:5d:83:
                    51:b2:48:40:24:82:dd:0d:d9:a5:21:f7:30:61:59:
                    d2:e2:dd:22:04:20:61:e5:95:b9:0e:d4:87:47:d9:
                    3f:77:6f:fb:95:cc:aa:89:64:1a:00:53:1b:82:ce:
                    a4:05:23:09:7c:6f:77:c5:b0:84:36:61:01:0b:60:
                    0b:dc:16:b2:a6:fc:0f:9e:8e:77:94:29:8f:d4:e1:
                    48:c2:57:4a:c2:73:84:85:d3:bc:18:4b:67:14:a2:
                    43:d6:7f:c3:c4:98:e0:a1:ae:7c:ff:33:25:86:31:
                    29:2e:ea:c1:20:92:ca:77:ea:36:2c:48:46:09:9c:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:04:6E:5D:CA:07:37:82:85:CD:02:74:56:83:AA:3E:53:7C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:21:ec:14:92:e1:75:51:26:e4:aa:50:79:f1:32:0a:80:
         a6:83:31:f1:e0:76:3a:fb:70:9e:27:4f:5a:36:9c:f2:31:9e:
         d8:3c:e9:51:6f:f4:e1:03:ed:5d:d2:e1:5e:04:9e:9d:18:7b:
         22:98:99:38:a7:5f:f9:68:ba:ba:96:38:cb:9f:a7:64:e0:70:
         47:e7:38:37:f7:18:6d:f9:81:25:aa:dc:c5:b3:fd:52:e9:cf:
         e8:59:eb:77:58:62:86:eb:d1:22:25:20:3e:5c:67:12:cd:29:
         30:26:83:4b:9b:b9:9b:20:66:3e:9e:58:81:b5:ba:e6:90:dc:
         79:d6:03:99:dd:cb:41:bc:dd:89:34:1a:0e:52:74:1f:8b:55:
         89:3c:d1:e8:d4:29:ac:83:90:1d:96:5c:a6:28:00:41:4b:7c:
         53:ae:79:28:42:1e:43:3f:b7:7e:b4:0b:a4:8e:50:1e:b3:21:
         bc:ec:04:67:58:bb:c5:47:e6:d1:3b:bd:51:bb:95:d6:0f:e5:
         5f:14:fb:e5:ed:e1:d3:83:b0:ac:8f:eb:85:de:0d:96:3a:88:
         20:71:8d:26:b7:cc:31:85:7f:6b:a0:7d:80:29:af:e1:08:e0:
         58:4e:07:41:7a:1f:38:a7:c7:cb:11:50:1b:3b:4d:ee:b1:0c:
         17:fe:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:04:04 2025 by rpki-client