This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
File:                     6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa (raw, json)
Hash identifier:          /We0UgVFduzzg3OLjLfmjjnVC5EXJrUGiQWr2xN8Vr4=
Subject key identifier:   80:38:26:26:4B:FB:80:85:24:6A:4D:BD:7D:62:98:40:DC:06:A2:9F
Certificate issuer:       /CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
Certificate serial:       010D0C9F4328584C444102DD2982AD94C600B628
Authority key identifier: 72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
Signing time:             Mon 22 Dec 2025 02:00:32 +0000
ROA not before:           Mon 22 Dec 2025 02:00:32 +0000
ROA not after:            Sun 22 Mar 2026 01:00:32 +0000
asID:                     27373
IP address blocks:        104.193.248.0/23 maxlen: 23
                          192.251.197.0/24 maxlen: 24
                          204.10.107.0/24 maxlen: 24
                          204.10.108.0/24 maxlen: 24
                          2602:fa37::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:44:41:02:dd:29:82:ad:94:c6:00:b6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
        Validity
            Not Before: Dec 22 02:00:32 2025 GMT
            Not After : Mar 22 01:00:32 2026 GMT
        Subject: CN=8aecb92e-02e9-4902-ac42-7289f43a4813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:82:97:c2:95:ef:48:08:97:9b:9c:1a:79:
                    d4:15:49:64:a4:15:55:7b:6c:92:1f:e8:ac:54:46:
                    68:76:4a:3a:d9:b8:d7:88:d1:f7:38:60:dd:d4:e8:
                    96:24:f0:8d:fe:35:f1:c7:2b:ce:d3:fd:d4:a4:70:
                    80:df:31:04:2b:dc:a1:2c:06:14:76:f0:db:c2:2d:
                    84:bc:9c:cd:c7:21:ea:66:50:49:35:13:c6:ae:0c:
                    6a:4d:df:5b:7d:3e:1e:f9:90:78:f1:46:0a:ec:2e:
                    c1:2e:23:c7:69:e6:b7:45:c7:12:02:c3:f9:88:52:
                    4a:70:b1:be:e5:bd:9f:7a:74:cf:ed:be:02:e9:57:
                    2f:da:78:e9:65:0f:51:af:ab:8d:af:35:95:bd:ca:
                    8d:4f:2d:c7:2e:65:63:c1:ec:f3:24:6c:12:60:1d:
                    0b:fc:c2:e2:a8:c2:ef:f3:ed:3d:74:1e:01:5d:a7:
                    cd:24:09:65:9f:21:c7:c0:99:dd:be:e2:f9:ba:7b:
                    85:39:a6:19:fd:d9:9f:78:04:88:5c:60:89:41:23:
                    e5:4e:21:f8:5a:4f:6f:4e:60:05:42:32:df:ca:6f:
                    7a:fd:9c:07:d3:a8:bd:1a:10:77:f3:21:24:97:7a:
                    8c:3e:55:8d:76:87:07:1e:c3:69:8e:88:7a:dd:c6:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:26:26:4B:FB:80:85:24:6A:4D:BD:7D:62:98:40:DC:06:A2:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl

            X509v3 Authority Key Identifier:
                keyid:72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.248.0/23
                  192.251.197.0/24
                  204.10.107.0-204.10.108.255
                IPv6:
                  2602:fa37::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:30:17:14:a9:ae:71:7f:42:c3:e7:e0:c5:0c:44:fd:22:
         25:16:89:9f:35:bb:32:f0:2e:2d:fc:65:d2:49:64:6f:af:70:
         65:91:8e:c2:0b:0b:c3:13:ea:c9:d5:21:cd:29:09:63:f8:6f:
         00:69:27:5f:03:5b:3b:53:d2:53:41:b5:0f:c0:b7:16:07:3d:
         06:75:e7:c1:cd:d0:e2:28:1a:bb:f0:5f:3e:5e:60:65:f7:ff:
         56:4b:25:b3:56:82:b3:e2:d9:31:6a:b2:3a:96:19:b6:7b:d7:
         84:b3:41:c1:c0:a7:21:11:a3:3f:18:d7:df:ad:02:25:48:24:
         70:bc:c7:eb:72:8c:37:13:52:31:03:a8:81:27:2f:c9:67:a1:
         83:79:1c:ac:4c:e4:cc:25:3e:c6:87:1b:a7:d7:95:6f:df:1a:
         3f:cd:07:27:f6:14:29:e6:bf:c4:fd:9b:7c:35:ac:87:da:e5:
         f3:43:3d:45:37:d2:26:e1:6d:d1:e1:71:91:db:a8:2a:08:60:
         0b:a9:2f:d0:72:78:0a:2e:dd:27:b7:3a:ff:4a:ca:43:d7:2f:
         e6:0a:6f:42:31:3b:8f:54:d3:5c:c1:ac:fc:2f:22:a5:1f:67:
         09:f7:36:4e:da:e0:d9:bf:9f:d8:e3:64:89:6c:a2:d8:f3:12:
         e6:d8:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 08:15:29 2026 by rpki-client