This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa
File:                     433f4626-f5a4-3f5b-8402-ad0e6744411a.roa (raw, json)
Hash identifier:          43/qMXaEkYpc9fttBtPXqbDusqI2k+rcPv9ZzYs4yIU=
Subject key identifier:   B0:52:46:64:05:73:DF:AF:8B:06:1D:3E:0A:1B:D8:85:49:D7:A7:DC
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584BE555DE37A5EB00992CE5F800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa
Signing time:             Tue 18 Nov 2025 02:00:30 +0000
ROA not before:           Tue 18 Nov 2025 02:00:30 +0000
ROA not after:            Mon 16 Feb 2026 02:00:30 +0000
asID:                     8069
IP address blocks:        20.33.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e5:55:de:37:a5:eb:00:99:2c:e5:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Nov 18 02:00:30 2025 GMT
            Not After : Feb 16 02:00:30 2026 GMT
        Subject: CN=9a29ef03-4a37-4f64-8020-ca5f7da20a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:18:da:44:89:df:87:d6:96:54:48:7a:f8:
                    09:b0:50:d6:06:56:e1:65:23:cb:19:43:7d:a1:a0:
                    07:8c:f3:79:b1:d3:67:b4:a0:3e:0f:5b:4d:c1:d3:
                    8f:e3:69:d8:4f:54:e0:3a:58:b5:95:b3:ea:a0:6e:
                    ca:02:88:05:26:a7:6f:2b:36:fb:0d:6d:56:7d:28:
                    a3:ac:c8:64:31:b9:6e:1c:07:3d:d7:39:f4:ec:af:
                    56:92:2a:22:0d:76:e9:a2:92:39:40:e9:48:59:d8:
                    5e:4e:59:0c:7b:a7:62:ff:26:37:c0:b4:17:0e:26:
                    fe:68:8a:4d:5a:62:a9:7a:1e:be:0f:e3:52:d2:b3:
                    7a:3f:97:bd:6f:1d:df:b8:1e:3c:ae:52:6e:7d:84:
                    59:ad:69:d8:8f:2d:ed:a9:56:46:bb:eb:50:f1:f0:
                    f5:4c:ab:bb:4b:78:7d:0f:fc:62:c8:5b:3c:b9:47:
                    8a:07:10:4d:72:50:7e:a8:ab:5e:1a:88:ef:fb:8a:
                    40:1d:a4:0a:b8:51:12:47:21:3d:e8:d3:63:a5:02:
                    94:9a:72:de:ea:05:2b:70:9d:63:64:21:5d:b8:b9:
                    95:f1:fa:5f:67:cb:0d:85:ad:3c:f0:26:06:91:b6:
                    6f:4b:ba:41:a6:e2:69:67:9d:02:c8:aa:38:04:3c:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:52:46:64:05:73:DF:AF:8B:06:1D:3E:0A:1B:D8:85:49:D7:A7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:46:4f:86:4a:ca:89:74:b2:be:49:14:3a:0f:f0:88:61:3e:
         89:13:d6:a8:93:68:38:f1:de:07:02:42:98:fa:4c:52:2c:0f:
         65:3c:d1:d1:39:e7:bd:7b:21:94:19:37:e8:c1:db:86:d0:70:
         ca:ef:2b:f7:56:c2:7c:23:19:89:ca:33:0f:3b:9c:8d:1b:24:
         0a:7a:1a:3e:02:1b:ab:1e:2e:02:23:d2:af:61:ad:67:4c:c7:
         11:1b:88:63:93:84:fd:07:8c:45:a7:84:22:04:ee:09:54:b8:
         b2:be:e1:26:25:1d:d5:c2:29:35:9f:a6:14:0f:40:3f:ba:3d:
         7e:e3:5c:c7:1c:29:78:a5:65:df:bc:72:4d:b3:33:79:8d:61:
         4f:d8:ed:ab:e5:1d:a6:72:f9:03:50:f5:a6:05:c5:57:54:92:
         ca:b6:44:32:03:74:62:d2:37:50:d4:70:04:88:d3:66:ef:12:
         a3:71:a9:eb:5f:2b:cd:99:85:f2:f4:bf:cb:09:b8:78:39:07:
         a7:e6:21:48:56:bc:b4:63:d5:19:a1:cf:19:ce:68:37:50:d2:
         b9:66:7b:26:84:2f:16:4f:52:b7:ad:17:9b:bb:45:2a:39:81:
         4b:7e:19:4f:29:c5:e2:3a:72:d4:42:70:3a:51:73:67:32:b7:
         20:d6:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:59:44 2025 by rpki-client