This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
File:                     2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json)
Hash identifier:          GzprcjS8UVDKLd8eK96t+keng5FXlU6TPlGxSnpZrC8=
Subject key identifier:   54:18:52:42:0B:89:7B:59:B8:26:B8:3E:EB:C7:BC:D7:7C:88:96:C2
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584BEAEB1C5180DF039D3C0F2580
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
Signing time:             Thu 20 Nov 2025 02:00:30 +0000
ROA not before:           Thu 20 Nov 2025 02:00:30 +0000
ROA not after:            Wed 18 Feb 2026 02:00:30 +0000
asID:                     803
IP address blocks:        104.152.28.0/22 maxlen: 22
                          104.219.8.0/22 maxlen: 22
                          104.255.48.0/22 maxlen: 22
                          108.60.160.0/19 maxlen: 19
                          108.160.16.0/20 maxlen: 20
                          108.174.160.0/20 maxlen: 20
                          162.253.8.0/22 maxlen: 22
                          192.34.224.0/21 maxlen: 21
                          198.245.112.0/20 maxlen: 20
                          199.26.190.0/23 maxlen: 23
                          199.189.88.0/21 maxlen: 21
                          206.163.224.0/19 maxlen: 19
                          207.47.128.0/17 maxlen: 17
                          216.126.200.0/22 maxlen: 22
                          216.174.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ea:eb:1c:51:80:df:03:9d:3c:0f:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Nov 20 02:00:30 2025 GMT
            Not After : Feb 18 02:00:30 2026 GMT
        Subject: CN=f579a422-58c6-4c42-a2ff-5684e5c2987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:77:dc:f9:4a:56:af:3e:cb:ec:30:37:e0:
                    76:3e:d3:ee:11:99:52:92:af:72:2e:54:38:4f:42:
                    bc:d1:2e:ca:bc:74:1a:19:06:ac:f8:80:6f:76:a6:
                    9e:fe:a7:2d:80:1c:82:ec:ed:7e:e5:95:86:68:c3:
                    d0:36:99:04:a2:2d:37:4a:1c:f5:51:2c:cf:42:c2:
                    ea:33:a0:c6:a5:15:a4:8e:22:aa:dd:2d:08:cc:5e:
                    91:7b:a3:6c:e9:b8:0d:3a:28:60:47:d2:51:87:bf:
                    f5:cc:da:0c:19:50:c8:89:35:2d:68:44:bf:f3:15:
                    d4:0e:b1:07:68:4d:1b:57:fc:d6:01:68:a1:34:9a:
                    e5:72:31:87:02:f7:6d:7c:6b:4a:1f:80:08:bb:8e:
                    d3:85:eb:76:14:33:2d:d5:db:8a:b7:2a:80:7c:97:
                    dc:dd:cd:8e:cb:1b:de:83:8b:83:0b:6a:45:5a:06:
                    3c:a6:c7:58:2c:2b:4e:a1:de:b8:f6:bb:07:96:b7:
                    27:2f:20:6b:06:b5:a3:fd:99:5d:1f:84:73:fe:0f:
                    fb:39:92:c8:6b:4a:7b:fc:6f:7f:df:32:77:76:7f:
                    19:71:97:81:46:f1:cd:65:e9:48:b7:77:ea:63:05:
                    3c:eb:9b:b8:a2:8d:4a:9e:c5:d9:ed:c5:79:c0:46:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:52:42:0B:89:7B:59:B8:26:B8:3E:EB:C7:BC:D7:7C:88:96:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.28.0/22
                  104.219.8.0/22
                  104.255.48.0/22
                  108.60.160.0/19
                  108.160.16.0/20
                  108.174.160.0/20
                  162.253.8.0/22
                  192.34.224.0/21
                  198.245.112.0/20
                  199.26.190.0/23
                  199.189.88.0/21
                  206.163.224.0/19
                  207.47.128.0/17
                  216.126.200.0/22
                  216.174.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:10:25:cc:45:4d:94:2c:eb:d1:4d:33:db:b6:13:93:08:62:
         6f:5b:6a:ad:f5:5b:e9:49:57:78:5a:e4:41:d4:7b:cf:85:83:
         47:6f:1c:e3:4f:3c:62:34:a0:68:20:b4:b5:ff:1f:52:6c:b6:
         b1:46:d2:c5:e0:50:65:12:25:d9:f4:96:85:34:30:11:91:6f:
         48:b3:ef:7a:e6:f0:4b:af:7a:16:92:04:2f:d1:87:57:e4:36:
         13:20:18:76:79:0a:82:d5:b3:39:55:18:dd:14:e4:55:52:75:
         f3:5d:4c:2e:8e:c4:e8:3f:18:15:fb:5b:da:b3:99:45:2e:35:
         55:58:fe:92:01:f6:15:49:a0:b6:7c:5d:ed:d7:8c:84:7d:51:
         e6:49:30:cb:86:b7:4e:ce:70:a0:93:29:67:83:15:10:18:3b:
         23:bf:2d:ee:d1:d2:a8:4d:73:45:ce:7c:8f:02:a8:b3:0c:5c:
         c9:2d:3f:d7:df:6e:47:95:9b:79:73:30:c2:87:36:9e:d1:a6:
         86:26:97:dd:b2:03:52:ed:5e:a3:60:e1:39:d1:1e:5a:95:89:
         91:ad:c8:e2:56:d6:fe:02:7b:d5:7c:50:6a:03:2e:be:db:c5:
         97:c4:3b:3f:93:01:23:3f:f3:62:0a:14:3d:23:71:3a:db:62:
         b2:f5:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 20:09:30 2025 by rpki-client