This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa
File:                     a3e28558-5307-3ceb-a172-8724d830db67.roa (raw, json)
Hash identifier:          bCpV5KayaocqfCi6lxbQqbBGZdSWAN5naHbl0K84ScI=
Subject key identifier:   A3:4D:D7:9B:F9:F0:E7:29:00:79:14:9A:B4:CA:5F:8B:E1:12:FD:F2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584C42DC21274A7FF5EF55C1A880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     9009
IP address blocks:        66.95.198.0/23 maxlen: 24
                          68.165.98.0/23 maxlen: 24
                          68.166.178.0/23 maxlen: 24
                          68.167.74.0/23 maxlen: 24
                          68.167.78.0/23 maxlen: 24
                          68.167.130.0/23 maxlen: 24
                          68.167.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:21:27:4a:7f:f5:ef:55:c1:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=f63ee114-68ec-40d0-ba4f-b8d590412e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:a7:8f:b1:4c:85:f7:18:35:72:31:8c:c7:
                    0b:a1:94:65:69:67:ce:76:c7:d4:ad:00:3d:5d:27:
                    9c:fd:d3:a8:4f:0b:c5:9d:e1:2a:58:6f:2a:ed:0a:
                    99:08:d6:b8:4b:f6:83:f0:44:6a:e0:0b:7f:c8:c9:
                    39:00:23:fd:a3:d2:83:52:7a:fb:ca:0a:df:46:63:
                    f2:ab:52:05:fa:60:d1:eb:cc:7e:9a:86:b8:94:2c:
                    f9:ad:28:b3:19:da:5e:d5:ac:4d:31:70:72:a9:3e:
                    de:30:ef:54:c7:ff:de:83:9e:0e:af:b5:be:24:d3:
                    8b:b1:5b:40:07:e1:07:be:ef:0f:8f:82:b7:28:af:
                    bf:06:26:2e:53:7b:8d:82:b5:00:8c:3b:0f:77:3c:
                    f8:3b:46:21:37:93:46:9e:14:ca:8a:0d:82:4c:93:
                    45:5c:1f:d4:08:09:da:4b:d6:45:ba:31:7c:1b:2b:
                    67:73:f4:54:9f:9c:b1:57:85:22:3f:92:62:a4:18:
                    bb:27:f3:a5:32:2a:6d:45:97:e3:6f:9d:67:be:15:
                    0f:76:ae:ee:ab:70:59:b2:bd:4a:a3:a8:81:36:6f:
                    fe:63:c9:db:75:9c:4b:f8:f2:6c:68:5a:9f:78:85:
                    28:72:e5:00:4e:0c:f1:ef:71:72:0f:67:9a:18:86:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4D:D7:9B:F9:F0:E7:29:00:79:14:9A:B4:CA:5F:8B:E1:12:FD:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.95.198.0/23
                  68.165.98.0/23
                  68.166.178.0/23
                  68.167.74.0/23
                  68.167.78.0/23
                  68.167.130.0/23
                  68.167.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:0a:12:ec:b2:a4:42:e7:3f:7e:8e:10:87:0f:8a:6c:72:
         bb:49:69:df:80:eb:69:d3:4e:e4:b3:86:12:32:cd:01:56:5c:
         c9:82:29:ca:ac:f5:0e:29:64:6c:04:32:74:cc:d1:a7:19:bc:
         56:7e:2a:46:e0:e4:3e:f7:fa:3f:43:73:36:64:2f:a9:7d:4f:
         ca:4e:e9:ed:d9:b5:b9:cc:d7:30:4f:3e:35:9e:8d:2f:bd:05:
         04:4b:74:f7:76:b0:ce:64:71:98:04:5e:ad:64:47:93:9e:24:
         aa:01:ae:24:b1:18:b0:f2:77:56:14:c4:96:5e:1a:78:91:93:
         53:e8:6a:2d:9b:da:85:5e:de:20:9e:e2:c0:f2:7f:03:13:77:
         af:ba:20:77:0f:a8:90:60:61:f0:fa:c1:ea:44:e6:b3:fe:4b:
         cb:6f:44:73:13:88:e5:16:78:b4:de:8b:9e:54:10:fc:74:19:
         e2:0f:3b:83:66:52:9f:cc:b3:77:d8:60:6f:b1:03:8c:f4:6a:
         25:f3:7b:28:00:52:be:25:65:3c:a3:7d:9e:94:44:bd:75:ad:
         ef:c3:4c:cb:a3:36:cd:30:d5:2a:cc:97:f2:2d:fe:81:0a:8e:
         e2:90:30:8c:51:d6:0b:1e:e3:71:2a:3d:43:db:0c:19:5b:ed:
         4d:1a:a0:fa
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWExC3CEnSn/171XBqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
ZjYzZWUxMTQtNjhlYy00MGQwLWJhNGYtYjhkNTkwNDEyZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn12nj7FMhfcYNXIxjMcLoZRlaWfOdsfUrQA9
XSec/dOoTwvFneEqWG8q7QqZCNa4S/aD8ERq4At/yMk5ACP9o9KDUnr7ygrfRmPy
q1IF+mDR68x+moa4lCz5rSizGdpe1axNMXByqT7eMO9Ux//eg54Or7W+JNOLsVtA
B+EHvu8Pj4K3KK+/BiYuU3uNgrUAjDsPdzz4O0YhN5NGnhTKig2CTJNFXB/UCAna
S9ZFujF8Gytnc/RUn5yxV4UiP5JipBi7J/OlMiptRZfjb51nvhUPdq7uq3BZsr1K
o6iBNm/+Y8nbdZxL+PJsaFqfeIUocuUATgzx73FyD2eaGIYalwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFKNN15v58OcpAHkUmrTKX4vhEv3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTNlMjg1NTgtNTMwNy0z
Y2ViLWExNzItODcyNGQ4MzBkYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBQl/GAwQB
RKViAwQBRKayAwQBRKdKAwQBRKdOAwQBRKeCAwQBRKeOMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6MChLs
sqRC5z9+jhCHD4pscrtJad+A62nTTuSzhhIyzQFWXMmCKcqs9Q4pZGwEMnTM0acZ
vFZ+Kkbg5D73+j9DczZkL6l9T8pO6e3ZtbnM1zBPPjWejS+9BQRLdPd2sM5kcZgE
Xq1kR5OeJKoBriSxGLDyd1YUxJZeGniRk1Poai2b2oVe3iCe4sDyfwMTd6+6IHcP
qJBgYfD6wepE5rP+S8tvRHMTiOUWeLTei55UEPx0GeIPO4NmUp/Ms3fYYG+xA4z0
aiXzeygAUr4lZTyjfZ6URL11re/DTMujNs0w1SrMl/It/oEKjuKQMIxR1gse43Eq
PUPbDBlb7U0aoPo=
-----END CERTIFICATE-----
Generated at Sat Jan 10 04:26:08 2026 by rpki-client