This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de50dc86-887f-38f7-9e99-ce621d467946.roa
File:                     de50dc86-887f-38f7-9e99-ce621d467946.roa (raw, json)
Hash identifier:          k7BYgHp+Vo0IbMHw6B/7RWCNui8IxpwfPKZz+3lQZl8=
Subject key identifier:   9E:B2:50:93:98:78:A4:C1:3C:18:E1:91:78:F5:64:7E:80:85:E1:F6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584C4373D97B17C19D281E514500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de50dc86-887f-38f7-9e99-ce621d467946.roa
Signing time:             Sun 21 Dec 2025 19:07:13 +0000
ROA not before:           Sun 21 Dec 2025 19:07:13 +0000
ROA not after:            Sat 21 Mar 2026 18:07:13 +0000
asID:                     11427
IP address blocks:        207.145.224.0/20 maxlen: 24
                          207.168.0.0/20 maxlen: 24
                          207.168.32.0/20 maxlen: 24
                          207.168.64.0/20 maxlen: 24
                          207.168.96.0/20 maxlen: 24
                          207.168.128.0/17 maxlen: 24
                          209.101.32.0/20 maxlen: 24
                          209.166.48.0/20 maxlen: 24
                          216.133.0.0/18 maxlen: 24
                          216.133.64.0/19 maxlen: 24
                          216.133.112.0/20 maxlen: 24
                          216.133.192.0/21 maxlen: 24
                          216.133.216.0/21 maxlen: 24
                          216.254.16.0/20 maxlen: 24
                          216.254.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:43:73:d9:7b:17:c1:9d:28:1e:51:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Dec 21 19:07:13 2025 GMT
            Not After : Mar 21 18:07:13 2026 GMT
        Subject: CN=279b4833-bdb7-44a1-ae3c-841c0a9fabe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:af:d0:b6:50:a3:72:34:c9:73:6d:5d:72:6b:
                    30:d3:db:88:bc:6e:6b:11:28:e7:6a:e9:f0:4a:de:
                    8a:81:ad:bd:a0:9d:9f:c1:39:6e:1b:7d:d0:2e:e3:
                    99:5c:7d:b8:09:0b:fb:d3:4c:34:75:b0:15:44:17:
                    14:d4:64:a8:8e:56:e1:21:48:44:6f:07:20:ec:d6:
                    12:fb:87:0c:e6:01:cd:6f:9d:ba:1e:b8:58:c5:84:
                    68:70:99:98:9b:db:be:85:c7:c8:4e:be:fa:3b:02:
                    92:98:31:db:f8:ab:33:a2:18:e9:0f:e5:08:08:9c:
                    14:04:63:3e:1f:1e:74:f1:68:05:0a:1d:78:e0:e9:
                    2f:02:41:36:50:2e:c5:c1:d4:a0:04:10:71:b3:6b:
                    60:30:f9:87:a9:ed:8e:9f:b2:df:40:5c:85:f5:de:
                    35:98:95:40:10:74:91:51:1f:9b:7b:65:b6:c6:3f:
                    41:7d:b4:23:88:e9:d9:1e:02:00:5e:fc:ba:ff:a3:
                    0e:48:77:f5:5c:e2:42:93:4d:07:9b:5a:46:41:d6:
                    cc:cc:a2:12:3e:59:02:94:9f:a7:4b:2d:0e:79:08:
                    b2:71:ba:b4:bf:ba:b6:b6:ad:34:19:76:bd:98:db:
                    d1:40:ee:e9:6d:c1:e4:d0:8d:8e:55:f7:ae:76:20:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B2:50:93:98:78:A4:C1:3C:18:E1:91:78:F5:64:7E:80:85:E1:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de50dc86-887f-38f7-9e99-ce621d467946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.145.224.0/20
                  207.168.0.0/20
                  207.168.32.0/20
                  207.168.64.0/20
                  207.168.96.0/20
                  207.168.128.0/17
                  209.101.32.0/20
                  209.166.48.0/20
                  216.133.0.0-216.133.95.255
                  216.133.112.0/20
                  216.133.192.0/21
                  216.133.216.0/21
                  216.254.16.0/20
                  216.254.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:63:24:07:5e:11:8d:81:66:02:42:56:e9:93:14:23:4d:10:
         9d:fe:35:54:ad:28:ec:32:21:a0:c4:20:b1:46:60:3a:cd:40:
         79:b9:fb:07:da:0c:5a:58:0d:6d:c4:28:f5:bb:67:ad:c5:6c:
         2e:d9:3d:74:e1:28:08:c6:19:69:97:63:65:44:84:96:9a:e9:
         e0:98:7e:20:72:0a:8a:aa:1a:e2:99:da:23:65:87:84:13:37:
         9c:d8:13:f1:c7:a6:6b:d0:f3:84:3a:03:19:64:c5:11:b0:72:
         0a:8e:ec:bb:af:f6:62:3a:db:21:1e:c3:b1:88:f3:9c:f5:04:
         db:89:c4:13:fe:40:b1:4c:e2:f0:1f:78:75:6a:8c:3e:6d:5d:
         b7:df:0a:46:c4:b2:bb:bd:88:1e:8f:4f:23:c8:e7:2f:32:c2:
         08:6a:3f:cd:c9:d5:2e:9e:ae:46:b5:4c:e6:1c:92:b1:ae:03:
         52:ef:ac:3c:32:c9:d1:8d:f3:a0:ff:c4:66:c0:af:c3:85:31:
         fe:88:a8:0e:ee:3b:58:13:e5:81:cb:dc:11:38:d1:29:35:33:
         4f:c0:4f:f9:84:60:19:a2:ff:c7:a8:75:32:9f:5f:6f:b4:08:
         53:66:29:28:a0:33:5e:95:ae:01:d2:e3:a5:4b:d9:a8:c6:5c:
         08:8f:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 20:50:59 2026 by rpki-client