This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa
File:                     0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa (raw, json)
Hash identifier:          u6dlAHBstq/A/w0qDy8D08KUaW+OM3Xa5pYs9ahPIFw=
Subject key identifier:   D3:73:90:77:89:F5:19:86:37:EF:8B:42:AA:C0:33:C3:5D:92:46:7C
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584BF08082D929CBA74AAFFC7B80
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa
Signing time:             Sat 22 Nov 2025 02:00:30 +0000
ROA not before:           Sat 22 Nov 2025 02:00:30 +0000
ROA not after:            Fri 20 Feb 2026 02:00:30 +0000
asID:                     21947
IP address blocks:        209.200.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f0:80:82:d9:29:cb:a7:4a:af:fc:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Nov 22 02:00:30 2025 GMT
            Not After : Feb 20 02:00:30 2026 GMT
        Subject: CN=e804b3b2-6c5a-4000-a0df-7c373f08ba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:d6:81:0d:be:f6:89:a9:83:b6:89:33:cb:
                    ee:dc:ee:e6:26:21:32:1e:d5:0b:cb:86:f1:d9:c2:
                    b2:53:bc:8f:a3:91:9f:cb:c9:65:5c:d7:1b:0c:3f:
                    a1:51:20:f4:81:a2:7a:bb:ba:00:60:47:7e:5c:f6:
                    3c:39:74:20:12:f2:38:09:0b:f7:48:3a:c7:b5:ae:
                    51:71:67:ee:36:8b:62:55:5a:65:bc:f3:25:94:22:
                    d2:c4:54:3c:97:45:62:58:8e:09:24:af:a6:9b:13:
                    90:a7:7a:e8:64:02:ad:9e:88:31:e6:b7:d7:83:4e:
                    31:8f:de:f7:68:ad:c6:70:eb:47:70:3c:2c:64:e9:
                    a2:76:ea:9b:8d:5b:12:56:bd:b7:53:49:2c:f3:53:
                    97:60:db:cd:79:10:f9:21:9f:63:69:9d:52:f0:9d:
                    39:11:2a:a6:b2:53:27:6b:15:b5:ff:b9:f8:b4:32:
                    5f:39:75:55:fa:f6:6f:8c:39:b5:a4:19:71:71:9d:
                    8d:e3:76:53:dc:87:7f:86:17:bd:31:65:4b:ce:85:
                    74:38:19:7f:4e:a9:54:51:e6:34:89:58:8b:a1:95:
                    0b:c0:5d:d0:49:e8:f9:47:59:bf:a3:01:06:99:f7:
                    83:13:4d:b0:5c:e5:ec:53:76:b9:dc:c3:35:8f:0d:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:73:90:77:89:F5:19:86:37:EF:8B:42:AA:C0:33:C3:5D:92:46:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:72:9b:5a:6f:b0:69:1a:cd:eb:76:1f:65:55:3c:bd:d8:8d:
         01:a3:f9:1d:5f:c4:47:0c:b3:62:ba:66:52:92:00:8a:a0:8b:
         06:24:c3:b0:74:92:cc:4d:88:76:a2:01:19:22:a7:4c:3f:1d:
         1a:5c:b8:49:da:37:2c:77:54:7b:86:4f:9c:bc:63:1f:78:72:
         94:15:c7:8a:9b:1f:0b:63:12:26:8b:f2:f2:f9:bb:12:8d:83:
         56:d1:d8:b6:99:d7:75:90:02:01:bd:22:2a:ba:e9:43:93:c3:
         f8:2a:07:47:72:4c:10:22:75:6d:fe:01:a1:ba:5e:91:d9:58:
         92:b6:be:a5:30:17:82:72:bc:9b:83:e4:e2:46:66:46:25:d6:
         73:88:95:86:13:80:d6:f0:72:2f:d1:63:42:76:50:17:c0:18:
         f2:0a:03:d8:b1:26:d5:c1:13:a4:21:11:a6:8a:53:40:1d:39:
         3e:4a:05:64:36:60:92:0c:a0:5f:a4:93:45:47:2d:62:eb:53:
         8b:be:e2:7f:ab:4f:e8:6f:7f:7c:cc:10:5b:8b:f3:9c:53:04:
         b4:b2:aa:ac:8a:d8:4b:fa:5b:c1:69:11:f5:9b:eb:27:9a:ee:
         c9:08:3a:7f:46:a0:05:4a:b5:8b:02:64:ae:00:a0:66:73:33:
         2f:0c:f3:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvwgILZKcunSq/8e4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk
ZTgwNGIzYjItNmM1YS00MDAwLWEwZGYtN2MzNzNmMDhiYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZnWgQ2+9ompg7aJM8vu3O7mJiEyHtULy4bx
2cKyU7yPo5Gfy8llXNcbDD+hUSD0gaJ6u7oAYEd+XPY8OXQgEvI4CQv3SDrHta5R
cWfuNotiVVplvPMllCLSxFQ8l0ViWI4JJK+mmxOQp3roZAKtnogx5rfXg04xj973
aK3GcOtHcDwsZOmiduqbjVsSVr23U0ks81OXYNvNeRD5IZ9jaZ1S8J05ESqmslMn
axW1/7n4tDJfOXVV+vZvjDm1pBlxcZ2N43ZT3Id/hhe9MWVLzoV0OBl/TqlUUeY0
iViLoZULwF3QSej5R1m/owEGmfeDE02wXOXsU3a53MM1jw14DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNNzkHeJ9RmGN++LQqrAM8NdkkZ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMGEyZDU0NjEtZGFiMi0z
YmQ3LWJiYWUtNGNmZjBmOTg2YmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0cjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRym1pvsGkazet2H2VVPL3YjQGj+R1fxEcMs2K6ZlKSAIqgiwYkw7B0
ksxNiHaiARkip0w/HRpcuEnaNyx3VHuGT5y8Yx94cpQVx4qbHwtjEiaL8vL5uxKN
g1bR2LaZ13WQAgG9Iiq66UOTw/gqB0dyTBAidW3+AaG6XpHZWJK2vqUwF4JyvJuD
5OJGZkYl1nOIlYYTgNbwci/RY0J2UBfAGPIKA9ixJtXBE6QhEaaKU0AdOT5KBWQ2
YJIMoF+kk0VHLWLrU4u+4n+rT+hvf3zMEFuL85xTBLSyqqyK2Ev6W8FpEfWb6yea
7skIOn9GoAVKtYsCZK4AoGZzMy8M8+w=
-----END CERTIFICATE-----
Generated at Tue Nov 25 09:58:00 2025 by rpki-client