This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa
File:                     b97db266-9fee-346f-b732-032606f5100c.roa (raw, json)
Hash identifier:          l1K62mh/oMeIPwdxLRMII9vkJ00Xtc4yD5M8TGmH7hs=
Subject key identifier:   F2:84:87:C4:D5:81:A3:FC:E5:10:11:B3:4C:02:A0:83:0C:FA:87:FE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BEF1B49890F8BF85885405900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa
Signing time:             Fri 21 Nov 2025 14:00:38 +0000
ROA not before:           Fri 21 Nov 2025 14:00:38 +0000
ROA not after:            Thu 19 Feb 2026 14:00:38 +0000
asID:                     39618
IP address blocks:        64.51.240.0/20 maxlen: 24
                          66.92.65.0/24 maxlen: 24
                          66.92.66.0/23 maxlen: 24
                          66.92.156.0/23 maxlen: 24
                          66.92.158.0/24 maxlen: 24
                          69.17.106.0/23 maxlen: 24
                          72.245.80.0/22 maxlen: 24
                          72.245.168.0/21 maxlen: 24
                          72.245.188.0/22 maxlen: 24
                          216.132.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ef:1b:49:89:0f:8b:f8:58:85:40:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Nov 21 14:00:38 2025 GMT
            Not After : Feb 19 14:00:38 2026 GMT
        Subject: CN=7920d0c9-1eed-442f-848a-65362310b320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:d6:36:39:f3:7c:e3:f9:dc:c5:36:26:c0:
                    07:73:ff:70:66:b3:9a:22:e9:75:04:74:18:8a:04:
                    36:8e:a3:ad:c8:f8:77:d0:4f:3d:04:51:55:5d:8b:
                    95:59:5d:7c:f9:1f:46:ac:41:02:85:21:8a:cb:a7:
                    e1:e6:c4:66:6b:bd:2c:d3:c9:38:9e:6c:cb:f9:f8:
                    02:67:5d:81:fc:99:86:f9:69:49:50:82:5a:32:ff:
                    d4:dc:a4:16:87:3a:eb:52:23:d5:71:d2:7d:3c:98:
                    a1:a7:7c:57:4e:f5:e7:0c:a8:3c:f9:ba:fa:b6:e9:
                    21:54:1b:5f:af:13:63:cd:e1:fd:a7:dc:5a:04:d4:
                    22:0d:19:97:17:64:6b:f2:2f:00:a4:7e:33:8f:68:
                    05:ad:a3:58:d9:41:f0:0f:16:e6:e0:bb:81:cd:38:
                    75:10:d3:11:9c:ce:8a:fb:4f:de:ce:af:30:36:32:
                    8d:13:ea:21:e2:4d:d9:82:82:96:25:ec:05:e2:ed:
                    91:c9:f0:04:7d:32:03:7b:f7:b0:2e:68:a8:fe:0e:
                    41:38:a2:c2:65:04:9f:68:7a:bc:fb:14:46:ad:13:
                    5a:f7:3a:63:7b:52:b3:10:b0:4e:7d:81:9b:d8:c9:
                    69:b3:8b:f3:9b:99:51:59:82:fc:b6:79:9f:47:16:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:84:87:C4:D5:81:A3:FC:E5:10:11:B3:4C:02:A0:83:0C:FA:87:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.51.240.0/20
                  66.92.65.0-66.92.67.255
                  66.92.156.0-66.92.158.255
                  69.17.106.0/23
                  72.245.80.0/22
                  72.245.168.0/21
                  72.245.188.0/22
                  216.132.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b6:47:ab:d1:2e:36:f3:b8:23:ea:32:f9:fe:36:c5:69:4d:
         15:4c:1c:2d:45:47:44:5e:4c:90:53:2e:1b:0f:88:4e:96:ca:
         d0:0d:fa:24:72:4d:ac:e9:f3:47:91:d0:2c:a0:97:3f:fd:16:
         94:27:58:79:43:f8:e1:f5:80:e1:9e:28:0f:03:c9:1f:88:f6:
         3f:14:f4:85:67:a4:15:10:32:67:3e:2f:1b:cf:b7:02:81:9f:
         29:fb:b8:1f:b0:3a:16:cc:91:ac:99:c1:32:3c:45:46:20:4e:
         3d:40:a6:7f:4f:a8:de:c7:cf:0c:b1:66:de:85:ee:c3:0d:63:
         b5:e4:50:3f:52:f4:85:0a:2e:e8:a0:b5:9b:b1:05:5c:32:95:
         65:65:e0:bd:03:b3:fc:a7:c9:98:42:a7:46:cd:c5:9e:98:03:
         89:c6:c3:2b:f0:bc:20:cc:cb:17:29:89:8a:be:06:95:7e:5b:
         78:ae:e5:23:69:29:05:19:b8:d1:a8:b2:1a:4d:71:8a:fa:96:
         ec:a9:cf:2c:77:9a:29:b5:bb:03:0b:6d:04:0b:a7:79:99:54:
         7d:09:ba:dd:14:c6:9e:ed:1c:d8:a9:35:46:5a:9b:ec:88:e1:
         42:40:58:93:1d:cc:33:79:65:5f:cb:f5:5f:bc:55:7e:23:41:
         bd:21:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 14:55:57 2025 by rpki-client