This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa
File:                     e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa (raw, json)
Hash identifier:          fpjoZ5maz3ha6F5/qiseK3M4x9wqNzZIaWYyRIjr1pg=
Subject key identifier:   C8:3E:0D:AA:60:B3:F1:65:25:30:53:B2:96:FE:3F:96:39:1D:70:03
Certificate issuer:       /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial:       010D0C9F4328584C285623ECA24C7863EF7DAE00
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa
Signing time:             Fri 12 Dec 2025 02:00:30 +0000
ROA not before:           Fri 12 Dec 2025 02:00:30 +0000
ROA not after:            Thu 12 Mar 2026 01:00:30 +0000
asID:                     22423
IP address blocks:        24.231.96.0/20 maxlen: 22
                          45.42.72.0/21 maxlen: 21
                          45.58.96.0/20 maxlen: 20
                          65.38.64.0/19 maxlen: 19
                          104.159.0.0/22 maxlen: 22
                          104.159.0.0/24 maxlen: 24
                          104.159.4.0/22 maxlen: 22
                          104.159.16.0/22 maxlen: 22
                          104.159.20.0/22 maxlen: 22
                          104.159.32.0/19 maxlen: 19
                          104.159.64.0/22 maxlen: 22
                          104.159.108.0/22 maxlen: 22
                          104.159.112.0/22 maxlen: 22
                          104.159.116.0/22 maxlen: 22
                          104.159.120.0/23 maxlen: 23
                          104.159.122.0/23 maxlen: 23
                          104.159.124.0/22 maxlen: 22
                          104.244.64.0/22 maxlen: 22
                          138.229.16.0/20 maxlen: 20
                          144.208.96.0/22 maxlen: 22
                          144.208.100.0/22 maxlen: 22
                          144.208.112.0/22 maxlen: 22
                          160.20.232.0/22 maxlen: 22
                          166.48.158.0/24 maxlen: 24
                          166.48.160.0/23 maxlen: 23
                          166.48.188.0/22 maxlen: 22
                          166.48.192.0/19 maxlen: 19
                          166.48.232.0/21 maxlen: 21
                          166.48.254.0/24 maxlen: 24
                          170.100.208.0/22 maxlen: 22
                          170.100.212.0/22 maxlen: 22
                          180.181.160.0/19 maxlen: 19
                          192.214.128.0/20 maxlen: 20
                          192.214.144.0/20 maxlen: 20
                          192.214.224.0/19 maxlen: 19
                          192.214.255.0/24 maxlen: 24
                          199.189.76.0/22 maxlen: 22
                          199.241.128.0/21 maxlen: 21
                          199.241.128.0/23 maxlen: 23
                          199.241.130.0/23 maxlen: 23
                          199.241.132.0/23 maxlen: 23
                          199.241.134.0/23 maxlen: 23
                          205.233.150.0/24 maxlen: 24
                          205.236.43.0/24 maxlen: 24
                          205.236.80.0/24 maxlen: 24
                          205.236.89.0/24 maxlen: 24
                          205.236.120.0/22 maxlen: 22
                          205.236.120.0/24 maxlen: 24
                          205.236.121.0/24 maxlen: 24
                          205.236.122.0/23 maxlen: 23
                          205.236.226.0/24 maxlen: 24
                          206.180.240.0/20 maxlen: 20
                          206.180.240.0/23 maxlen: 23
                          206.180.242.0/23 maxlen: 23
                          206.180.244.0/23 maxlen: 23
                          206.180.246.0/23 maxlen: 23
                          206.180.248.0/23 maxlen: 23
                          206.180.250.0/23 maxlen: 23
                          206.180.252.0/23 maxlen: 23
                          206.180.254.0/23 maxlen: 23
                          209.182.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:28:56:23:ec:a2:4c:78:63:ef:7d:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Validity
            Not Before: Dec 12 02:00:30 2025 GMT
            Not After : Mar 12 01:00:30 2026 GMT
        Subject: CN=7439e83d-3607-4f1a-86fd-725ffba7caae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:54:4b:53:96:96:a8:43:d6:1b:86:e0:1e:
                    8e:a0:28:3b:fb:34:fb:34:a5:1b:3b:75:30:df:88:
                    70:55:cd:ed:86:26:db:f2:bc:3e:26:6c:50:eb:90:
                    55:99:c5:bf:1e:0a:40:4e:fe:09:8e:c7:26:45:c9:
                    19:0c:df:a0:77:30:a5:4a:b7:b1:5a:bc:f1:eb:3e:
                    c6:1e:57:4e:99:e8:f6:78:53:44:07:a3:89:1a:a4:
                    22:d4:53:be:a5:0c:2e:4e:ae:10:6c:d5:ff:9b:5f:
                    64:41:82:a8:f7:9c:0b:e8:aa:df:93:02:f7:cf:25:
                    fd:28:ed:05:a6:4c:40:04:d5:bd:d3:3e:be:53:e8:
                    0f:bb:4c:55:5d:86:63:62:2e:00:1b:62:0b:60:dc:
                    ef:51:c3:71:1b:ce:63:91:a6:ec:c4:54:c7:c5:75:
                    5a:1b:e8:be:bd:b3:8c:c9:48:74:c5:67:01:b6:cd:
                    90:aa:00:90:47:42:2e:33:75:f9:71:e2:6f:cf:b7:
                    6b:ba:e5:2b:0f:9c:83:c7:cc:82:71:70:37:6b:8f:
                    b1:96:11:b1:7a:8b:6b:e0:a8:93:c3:20:6c:d9:79:
                    6e:24:87:b0:1f:73:d5:6f:99:aa:2f:44:c6:dd:24:
                    3b:7e:55:e9:c9:db:4d:8e:a8:b3:42:b9:ae:a9:88:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3E:0D:AA:60:B3:F1:65:25:30:53:B2:96:FE:3F:96:39:1D:70:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl

            X509v3 Authority Key Identifier:
                keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.96.0/20
                  45.42.72.0/21
                  45.58.96.0/20
                  65.38.64.0/19
                  104.159.0.0/21
                  104.159.16.0/21
                  104.159.32.0-104.159.67.255
                  104.159.108.0-104.159.127.255
                  104.244.64.0/22
                  138.229.16.0/20
                  144.208.96.0/21
                  144.208.112.0/22
                  160.20.232.0/22
                  166.48.158.0/24
                  166.48.160.0/23
                  166.48.188.0-166.48.223.255
                  166.48.232.0/21
                  166.48.254.0/24
                  170.100.208.0/21
                  180.181.160.0/19
                  192.214.128.0/19
                  192.214.224.0/19
                  199.189.76.0/22
                  199.241.128.0/21
                  205.233.150.0/24
                  205.236.43.0/24
                  205.236.80.0/24
                  205.236.89.0/24
                  205.236.120.0/22
                  205.236.226.0/24
                  206.180.240.0/20
                  209.182.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:ec:84:4e:dc:2c:91:af:2a:00:b6:a3:d7:0e:d7:74:4e:
         d9:6c:41:d7:97:3b:f7:d2:9f:af:c8:45:35:80:d1:38:32:d2:
         77:4d:17:a6:f2:ac:db:6f:e4:69:c5:44:72:d1:a4:d2:64:3f:
         24:8d:66:27:e0:1d:d2:7b:ce:d1:9d:6f:eb:f6:1e:b9:5b:31:
         ae:d1:a4:54:93:f2:80:07:57:f0:1b:f7:59:a3:ff:27:44:25:
         fa:16:df:bc:f8:aa:41:0f:70:0b:4c:08:24:c2:cd:95:0b:d7:
         72:7b:3a:b6:b7:99:bb:14:9a:e4:31:e8:ad:8d:68:71:5f:7b:
         94:6a:23:c3:70:e5:7d:d3:65:fa:39:ac:2f:43:b1:e5:c1:05:
         1d:d1:d0:8b:84:44:14:5e:a9:f4:c4:cf:d6:43:f8:66:01:06:
         35:51:aa:ce:4d:05:59:fa:87:45:42:26:0b:ab:4e:5e:f4:57:
         11:de:72:44:1c:05:5d:84:f7:5a:e5:95:11:2e:34:08:5d:95:
         a7:9e:40:7e:8e:cb:b7:72:d1:e0:42:7a:96:6c:d5:8c:58:c4:
         e3:65:8c:3f:aa:92:04:62:74:6e:58:92:3e:98:29:d0:f5:fe:
         c6:6f:14:03:7e:15:c7:87:8c:34:79:74:6e:7f:91:4c:db:4a:
         4e:e6:f5:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Dec 15 15:47:45 2025 by rpki-client