This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa
File:                     8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa (raw, json)
Hash identifier:          JRS7JYzy1mzf+ejwWRI36ozUFwIceofpq/9Be78DkHY=
Subject key identifier:   49:D2:53:08:F8:C4:20:4E:A0:00:A1:37:14:79:FE:91:8E:A5:D9:3C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C42DC15F048E225ECF0567920
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        65.22.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Feb 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:15:f0:48:e2:25:ec:f0:56:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=d6274c5c-91b9-4336-97bb-6b75d8db7f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:df:53:e3:fc:62:72:23:b8:29:f2:7f:fe:
                    c8:3d:24:1a:05:10:c2:5c:42:e1:c8:28:c2:38:a2:
                    5f:ba:05:97:5a:0f:f9:4c:72:5e:1e:54:11:00:50:
                    d1:3d:39:f2:e6:52:0c:24:52:a4:78:f0:e0:08:d9:
                    f3:4b:a4:07:43:77:aa:5b:d1:20:01:76:66:8e:1e:
                    1e:8c:11:d6:88:0f:e0:73:62:44:f7:46:af:31:cd:
                    91:1e:2e:26:ca:80:88:a0:a1:4f:b8:c8:17:7a:f2:
                    80:12:b4:da:89:36:d0:e3:78:24:da:77:94:c9:b9:
                    b6:4b:92:dd:70:f4:9f:2d:d2:89:f5:25:79:de:55:
                    b7:74:8a:0a:40:8c:35:30:b4:25:57:84:61:05:ea:
                    84:5c:34:83:e9:a4:ae:dc:6d:be:c5:c2:fd:f8:4a:
                    7d:64:3f:26:1c:9a:a5:27:23:f4:94:17:56:37:f2:
                    9e:61:d2:e0:25:fe:d2:a8:6f:f5:e1:c5:09:3e:56:
                    6e:72:7b:fd:9d:6b:46:94:23:60:99:94:de:d4:86:
                    83:dc:ec:b0:78:a5:c8:0a:66:42:3b:cf:26:fc:37:
                    10:4c:20:79:25:f8:13:f5:62:27:9e:47:c1:3c:cc:
                    9d:c4:9e:da:4b:22:cf:d9:a7:f2:50:fb:32:76:22:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D2:53:08:F8:C4:20:4E:A0:00:A1:37:14:79:FE:91:8E:A5:D9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:16:9d:16:45:2a:2b:5d:57:90:6b:24:dc:d4:be:18:bc:
         ba:24:0a:a3:a3:8b:93:52:c2:0d:b2:b3:f0:9f:34:10:35:77:
         85:8e:af:20:c2:b9:69:93:32:64:be:fa:88:36:bc:b1:15:42:
         79:18:3b:99:d9:cd:bd:48:c4:9b:4b:c5:7b:98:48:74:64:f4:
         0b:75:06:57:f1:17:47:9f:d6:e7:eb:6b:20:c4:9e:e4:ea:b9:
         0b:eb:dc:bb:bd:21:77:40:2e:54:54:5b:f1:e3:24:9d:e9:c0:
         c5:25:a9:31:58:07:48:1e:b4:c6:ef:a7:8f:d7:e5:a5:d7:92:
         7c:26:e3:c1:52:6f:1e:8f:e9:28:eb:8e:ea:7a:16:1f:53:3f:
         7b:b6:63:fd:d3:f7:39:02:18:6b:60:a3:72:7d:9f:6d:94:e1:
         2f:12:c9:fb:cb:9e:df:87:e4:92:59:60:f6:56:ac:72:0e:56:
         3a:8d:a5:2f:d3:31:66:08:59:8c:a6:84:2c:23:8c:c8:95:9c:
         23:ac:d8:84:66:fb:e7:25:46:8b:ab:a7:3d:a4:c2:85:d1:9c:
         aa:38:1c:9b:18:cc:21:76:42:c7:89:ab:ef:3c:ac:8f:41:6f:
         ef:6e:50:23:7f:27:7a:b2:33:a9:6b:ad:2d:ba:41:fc:bf:f5:
         9b:ad:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 05:42:15 2026 by rpki-client