This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa
File:                     cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa (raw, json)
Hash identifier:          g3Xtdk748c5QQO4iO6y3KIDqp0Dz4JHsG3CFjtV8AAQ=
Subject key identifier:   D1:7C:D4:75:A3:C7:87:7C:BC:C3:51:4B:C7:D1:DE:96:35:6D:86:D2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584C54C7C767615293BEB363D780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa
Signing time:             Sun 28 Dec 2025 00:05:04 +0000
ROA not before:           Sun 28 Dec 2025 00:05:04 +0000
ROA not after:            Fri 27 Mar 2026 23:05:04 +0000
asID:                     834
IP address blocks:        64.7.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:54:c7:c7:67:61:52:93:be:b3:63:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Dec 28 00:05:04 2025 GMT
            Not After : Mar 27 23:05:04 2026 GMT
        Subject: CN=d191e27c-c835-4b83-bfb4-e01916e535ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:95:7d:91:f5:84:33:1b:80:e4:40:5b:12:
                    9b:20:b3:81:6d:95:51:5b:0f:fa:fd:d9:02:42:b4:
                    13:2b:92:17:b7:d3:aa:87:26:6e:22:8f:f4:57:1a:
                    a5:3a:d9:ab:ef:34:f7:57:48:e4:ad:f3:9e:2e:98:
                    97:68:b9:b9:97:7f:b8:3c:8a:df:1b:b0:24:2c:d5:
                    97:d2:6d:4e:47:b5:d1:01:4a:84:2b:44:1c:9a:e4:
                    ce:d6:6d:bb:69:1d:13:51:a9:20:90:02:49:c0:04:
                    29:32:59:28:73:a2:85:ee:46:7d:ea:23:fa:57:4b:
                    61:1d:bf:f3:61:e3:09:9d:7f:ed:74:ab:90:3a:ce:
                    8f:e7:90:68:f0:3d:2e:44:9a:ac:dc:25:be:d6:4b:
                    c8:95:d5:88:ea:7b:87:de:44:a0:b0:32:6d:5d:ac:
                    6f:bc:15:ee:8c:6b:39:fd:83:f8:a2:8e:56:78:b5:
                    db:2f:1e:f5:c9:67:2c:f9:df:10:35:1d:d2:26:e9:
                    85:17:d0:7c:88:e9:17:fc:61:d2:4a:59:15:be:ed:
                    c4:c6:ce:00:7c:82:98:94:96:1e:8c:bd:22:d6:57:
                    9d:12:ad:b3:17:23:33:be:b5:7d:dc:7c:3c:37:65:
                    56:48:ba:a9:fb:fd:61:36:22:94:d1:20:ed:75:f3:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:D4:75:A3:C7:87:7C:BC:C3:51:4B:C7:D1:DE:96:35:6D:86:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5f:32:f1:2c:24:06:17:d6:e4:cd:f0:1b:07:db:b6:06:c5:
         7a:8a:dd:43:49:79:87:bb:60:bc:df:41:c0:47:c9:00:f2:42:
         29:3b:78:00:ba:45:2b:d6:f4:bc:0e:93:bd:59:2a:2b:a8:ea:
         c8:c8:27:d1:4b:82:45:fa:16:b5:e8:ad:a3:88:99:32:c7:de:
         c2:24:0a:f5:57:d3:21:1a:3c:03:a6:94:50:41:e1:67:68:46:
         96:31:b1:54:1f:90:77:c2:46:e6:fd:4f:b6:61:3b:8d:b9:29:
         e0:4b:90:ba:07:57:ae:47:66:ad:02:1b:c5:81:eb:34:47:77:
         56:01:56:9f:95:b8:93:bf:2b:5b:26:4a:b2:a5:35:8b:05:ea:
         83:c9:39:e7:1d:e8:cc:91:aa:34:22:1f:fd:ab:bc:c4:f3:ee:
         da:31:8f:36:ce:ac:f8:7e:5a:b4:1f:e4:24:83:9b:9d:76:dd:
         d3:55:c7:75:a1:ee:bc:b4:7b:22:c0:87:72:07:91:bc:1c:fc:
         2b:2b:9d:ac:05:ed:74:b3:47:9d:ca:31:65:40:21:19:0b:19:
         28:b7:cb:ff:f4:90:2d:18:0c:a5:ac:11:93:01:ce:b0:ff:a3:
         1a:0a:d0:59:f9:ae:6d:84:f4:f8:94:0a:b0:99:25:87:99:fc:
         03:e7:3b:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExUx8dnYVKTvrNj14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTIyODAwMDUwNFoXDTI2MDMyNzIzMDUwNFowLzEtMCsGA1UEAxMk
ZDE5MWUyN2MtYzgzNS00YjgzLWJmYjQtZTAxOTE2ZTUzNWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DWVfZH1hDMbgORAWxKbILOBbZVRWw/6/dkC
QrQTK5IXt9OqhyZuIo/0VxqlOtmr7zT3V0jkrfOeLpiXaLm5l3+4PIrfG7AkLNWX
0m1OR7XRAUqEK0QcmuTO1m27aR0TUakgkAJJwAQpMlkoc6KF7kZ96iP6V0thHb/z
YeMJnX/tdKuQOs6P55Bo8D0uRJqs3CW+1kvIldWI6nuH3kSgsDJtXaxvvBXujGs5
/YP4oo5WeLXbLx71yWcs+d8QNR3SJumFF9B8iOkX/GHSSlkVvu3Exs4AfIKYlJYe
jL0i1ledEq2zFyMzvrV93Hw8N2VWSLqp+/1hNiKU0SDtdfMNOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNF81HWjx4d8vMNRS8fR3pY1bYbSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2Q5NWM5ODktMWU1Mi0z
OGUzLThiMzMtZjJjMzVkYzExOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAcUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRfMvEsJAYX1uTN8BsH27YGxXqK3UNJeYe7YLzfQcBHyQDyQik7eAC6
RSvW9LwOk71ZKiuo6sjIJ9FLgkX6FrXoraOImTLH3sIkCvVX0yEaPAOmlFBB4Wdo
RpYxsVQfkHfCRub9T7ZhO425KeBLkLoHV65HZq0CG8WB6zRHd1YBVp+VuJO/K1sm
SrKlNYsF6oPJOecd6MyRqjQiH/2rvMTz7toxjzbOrPh+WrQf5CSDm5123dNVx3Wh
7ry0eyLAh3IHkbwc/CsrnawF7XSzR53KMWVAIRkLGSi3y//0kC0YDKWsEZMBzrD/
oxoK0Fn5rm2E9PiUCrCZJYeZ/APnOzw=
-----END CERTIFICATE-----
Generated at Tue Dec 30 21:11:48 2025 by rpki-client