This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2265bc6-356a-33b9-b75b-be1248521091.roa
File:                     f2265bc6-356a-33b9-b75b-be1248521091.roa (raw, json)
Hash identifier:          fKeNjnKwa34EEdmtU6lujHF3yDjzWU1vhyeKfPj9egc=
Subject key identifier:   CB:1B:44:B6:BC:E5:97:1A:A5:96:AB:E1:1E:C0:57:E2:07:E5:F3:34
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584BDCF5CBE05AF1A4272AC90000
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2265bc6-356a-33b9-b75b-be1248521091.roa
Signing time:             Sat 15 Nov 2025 02:00:32 +0000
ROA not before:           Sat 15 Nov 2025 02:00:32 +0000
ROA not after:            Fri 13 Feb 2026 02:00:32 +0000
asID:                     15204
IP address blocks:        66.128.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:dc:f5:cb:e0:5a:f1:a4:27:2a:c9:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Nov 15 02:00:32 2025 GMT
            Not After : Feb 13 02:00:32 2026 GMT
        Subject: CN=d0e0484c-55ac-472b-86eb-0a9dff300044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:08:ff:98:49:15:44:8e:68:00:7c:b1:76:
                    28:be:d4:07:02:59:c9:8b:cf:d3:f2:70:d0:7a:5a:
                    f7:f8:ac:dc:58:7b:90:a5:02:bf:37:84:d1:18:8b:
                    f7:a0:d7:64:64:d5:e1:7f:58:25:b3:cc:02:0a:2f:
                    33:0b:65:b3:d4:b5:8e:cf:ce:a3:97:8d:fa:c6:c2:
                    a7:8c:7d:5f:5d:fd:45:93:2d:b0:d1:4b:aa:ff:cc:
                    57:3a:ce:2b:28:c3:3b:bb:67:92:14:b8:7a:3a:9f:
                    6c:4d:82:c6:06:7e:2e:f3:9d:8d:ae:6a:ce:53:18:
                    d5:e9:ac:a9:88:60:1f:b9:56:b6:ee:ac:eb:59:60:
                    e7:ea:3a:cd:f2:eb:eb:ac:0a:94:63:60:4f:e7:eb:
                    8c:1e:0b:f8:55:37:86:85:a8:16:e6:42:04:f3:28:
                    52:4b:5b:2f:90:d5:52:ea:8d:f3:ec:bc:c1:d8:93:
                    83:67:9f:0a:8b:5f:8f:3b:e7:08:09:bf:ac:37:d0:
                    6d:55:9b:2c:65:f8:e7:22:78:76:5d:7c:d9:b1:af:
                    c8:ea:4b:a6:68:18:e3:70:06:d6:75:17:11:e5:2c:
                    02:61:35:09:20:ee:14:79:2e:4a:1e:02:49:1e:08:
                    8a:46:45:a8:1b:34:63:bc:61:c0:92:75:ed:46:bd:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:44:B6:BC:E5:97:1A:A5:96:AB:E1:1E:C0:57:E2:07:E5:F3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2265bc6-356a-33b9-b75b-be1248521091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:7b:b3:d2:72:c0:06:8a:3b:dd:e2:d5:ff:67:8d:ac:18:
         8f:9d:1b:b2:4c:7d:ad:94:c7:0f:02:85:3f:9c:3a:d1:e6:4f:
         c3:ba:05:9e:59:a2:e2:d9:91:58:29:38:a5:54:00:2b:35:14:
         fb:4c:30:9e:39:16:ba:ee:57:0d:5c:17:a1:b4:5c:1c:0f:0d:
         a3:98:51:61:e6:42:fe:28:c4:08:89:94:e2:52:6b:03:44:0d:
         b2:41:9c:ad:9a:14:d5:f2:5f:c6:bd:bd:9e:ad:a1:e4:89:cf:
         3b:01:74:1d:32:6c:5a:f9:d3:ac:d0:20:94:43:45:da:ca:14:
         df:2b:76:cd:29:c8:61:9f:af:a8:06:9a:32:51:fc:eb:5d:00:
         6b:50:b2:78:c1:78:a9:0e:10:8a:fd:d5:3d:6d:34:2d:c5:7c:
         01:f1:89:e0:fe:05:e5:2e:4f:45:0e:bf:3f:88:77:f0:ad:52:
         a8:64:87:58:53:be:62:59:26:1b:63:9a:0c:8a:ca:e6:a7:14:
         d1:ad:23:ba:4d:c2:64:f8:4f:c9:c5:1f:0c:44:bc:27:c3:81:
         0a:1e:ce:c8:c8:59:c5:03:a0:9c:e1:3b:cd:4e:91:c1:84:ea:
         71:f6:fb:7c:c4:d5:ba:30:03:b8:e5:35:17:a1:1a:f7:46:b3:
         83:d5:86:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9cvgWvGkJyrJAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZDBlMDQ4NGMtNTVhYy00NzJiLTg2ZWItMGE5ZGZmMzAwMDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIgI/5hJFUSOaAB8sXYovtQHAlnJi8/T8nDQ
elr3+KzcWHuQpQK/N4TRGIv3oNdkZNXhf1gls8wCCi8zC2Wz1LWOz86jl436xsKn
jH1fXf1Fky2w0Uuq/8xXOs4rKMM7u2eSFLh6Op9sTYLGBn4u852NrmrOUxjV6ayp
iGAfuVa27qzrWWDn6jrN8uvrrAqUY2BP5+uMHgv4VTeGhagW5kIE8yhSS1svkNVS
6o3z7LzB2JODZ58Ki1+PO+cICb+sN9BtVZssZfjnInh2XXzZsa/I6kumaBjjcAbW
dRcR5SwCYTUJIO4UeS5KHgJJHgiKRkWoGzRjvGHAknXtRr3O6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsbRLa85ZcapZar4R7AV+IH5fM0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjIyNjViYzYtMzU2YS0z
M2I5LWI3NWItYmUxMjQ4NTIxMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABu/e7PScsAGijvd4tX/Z42sGI+dG7JMfa2Uxw8ChT+cOtHmT8O6BZ5Z
ouLZkVgpOKVUACs1FPtMMJ45FrruVw1cF6G0XBwPDaOYUWHmQv4oxAiJlOJSawNE
DbJBnK2aFNXyX8a9vZ6toeSJzzsBdB0ybFr506zQIJRDRdrKFN8rds0pyGGfr6gG
mjJR/OtdAGtQsnjBeKkOEIr91T1tNC3FfAHxieD+BeUuT0UOvz+Id/CtUqhkh1hT
vmJZJhtjmgyKyuanFNGtI7pNwmT4T8nFHwxEvCfDgQoezsjIWcUDoJzhO81OkcGE
6nH2+3zE1bowA7jlNRehGvdGs4PVhoE=
-----END CERTIFICATE-----
Generated at Tue Nov 25 14:31:26 2025 by rpki-client