This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
File:                     f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa (raw, json)
Hash identifier:          lSJ9ILuawi8VbPr8iDjtre1aY3slUtvYGFAChZbiVg8=
Subject key identifier:   0B:71:62:0C:B4:48:AE:8D:5F:6D:C7:78:38:55:60:2B:78:D7:D0:8C
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584BE28B0B115CDFF87B52BA8E80
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
Signing time:             Mon 17 Nov 2025 02:00:31 +0000
ROA not before:           Mon 17 Nov 2025 02:00:31 +0000
ROA not after:            Sun 15 Feb 2026 02:00:31 +0000
asID:                     18594
IP address blocks:        64.57.144.0/24 maxlen: 24
                          64.57.145.0/24 maxlen: 24
                          64.57.150.0/24 maxlen: 24
                          64.57.151.0/24 maxlen: 24
                          74.120.156.0/24 maxlen: 24
                          74.120.158.0/24 maxlen: 24
                          199.254.202.0/24 maxlen: 24
                          204.90.2.0/24 maxlen: 24
                          208.70.176.0/24 maxlen: 24
                          208.70.177.0/24 maxlen: 24
                          208.70.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e2:8b:0b:11:5c:df:f8:7b:52:ba:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Nov 17 02:00:31 2025 GMT
            Not After : Feb 15 02:00:31 2026 GMT
        Subject: CN=669b3d3d-6f4f-4613-97bd-a6fe29a44ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:7e:21:19:43:2e:25:5e:d6:7f:ae:d8:ca:
                    cf:7c:0a:5b:68:46:f9:a8:88:ad:df:33:ba:26:71:
                    51:55:2b:15:66:6b:29:ee:ce:62:37:09:b4:2b:23:
                    80:5f:6a:2d:85:80:17:76:a4:be:24:7e:9f:04:4b:
                    98:f9:2f:7f:0e:45:5c:1f:d3:79:4b:b0:4f:f1:93:
                    84:a3:ec:b8:a2:fa:42:e3:94:09:4f:11:0f:d0:99:
                    1b:7e:36:4c:e2:02:4d:b8:10:5c:0a:6b:75:97:67:
                    8a:99:36:07:35:a5:cb:28:76:2c:53:b5:eb:72:f1:
                    86:af:e2:df:11:f4:92:01:30:e0:86:ce:f5:3d:86:
                    2b:dd:5c:44:07:6d:e2:76:1c:0b:2b:b8:57:2b:ed:
                    ef:b0:41:af:ce:10:9c:c4:57:78:ec:8a:ba:e7:d8:
                    d8:b0:35:c1:40:55:ba:b3:95:ec:43:65:8b:2b:95:
                    c2:58:59:ac:0d:71:b2:9a:af:92:11:d3:25:b0:7e:
                    a7:67:46:da:7f:b8:cb:76:7d:c0:ec:ba:e8:31:bf:
                    2b:b1:cc:18:aa:62:83:b9:01:09:7c:59:f5:93:35:
                    e7:bf:a4:46:1d:77:ec:6b:e3:c9:85:e3:ab:f9:de:
                    c8:98:23:1a:92:66:45:c9:56:96:07:24:67:9e:bf:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:71:62:0C:B4:48:AE:8D:5F:6D:C7:78:38:55:60:2B:78:D7:D0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.144.0/23
                  64.57.150.0/23
                  74.120.156.0/24
                  74.120.158.0/24
                  199.254.202.0/24
                  204.90.2.0/24
                  208.70.176.0/23
                  208.70.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:6a:99:2b:6f:f0:8c:86:c8:7c:23:85:de:49:f3:18:59:
         50:6c:0c:c3:cd:00:92:5b:8a:fb:09:5d:39:98:d8:71:76:e4:
         6c:1a:80:b7:72:de:03:b0:f5:69:42:b2:6d:c3:21:86:ad:74:
         be:4e:00:41:f1:35:7d:c2:a2:b3:44:5e:3c:b6:d4:83:a7:ce:
         13:bf:3f:e2:88:20:01:d5:c8:23:6d:5c:2c:85:69:68:04:6a:
         bb:62:a0:7c:ed:9d:a2:46:f4:a5:24:06:96:04:ec:da:76:c9:
         81:8b:1a:c1:b7:49:b4:84:42:51:97:7b:03:2c:de:84:31:bd:
         5a:b9:5e:d8:e8:b7:40:3c:2c:d2:68:c3:04:a3:10:dd:af:3b:
         42:9b:d0:9e:e9:9c:93:59:22:cf:9b:2a:68:f7:c8:4a:e7:00:
         5d:b9:cd:a7:82:52:42:8a:0c:14:1c:61:45:d2:85:9b:6e:ec:
         3a:4a:7f:ca:01:42:37:55:90:02:4e:aa:04:e7:ab:6b:d2:24:
         9e:d2:3b:c4:3f:71:12:5e:4a:31:0d:d6:d7:a9:ba:69:06:37:
         8b:6b:3f:c0:b4:21:4a:3a:d4:45:05:c0:19:c1:ec:64:b8:47:
         fe:ce:c8:2b:b0:fb:bb:d1:af:b5:df:a6:6c:64:61:98:28:48:
         1d:8a:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:16:54 2025 by rpki-client