This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
File:                     9f9e5042-0109-358f-9abb-5204ef9d0863.roa (raw, json)
Hash identifier:          HKnH1o1+SjHIw/u3t1N/84LMQwwClTZMzV7mvJZxzWE=
Subject key identifier:   73:2F:F7:CE:0E:5B:D8:A8:70:3C:38:ED:DD:AC:C3:EE:B9:C8:90:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C39167230F9D1DF42C57411C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
Signing time:             Thu 18 Dec 2025 02:00:31 +0000
ROA not before:           Thu 18 Dec 2025 02:00:31 +0000
ROA not after:            Wed 18 Mar 2026 01:00:31 +0000
asID:                     36733
IP address blocks:        64.235.160.0/19 maxlen: 19
                          65.97.0.0/20 maxlen: 20
                          65.97.16.0/20 maxlen: 20
                          67.174.80.0/20 maxlen: 20
                          68.81.10.0/23 maxlen: 23
                          68.85.136.0/23 maxlen: 23
                          68.85.215.0/24 maxlen: 24
                          68.86.134.0/23 maxlen: 23
                          68.86.228.0/23 maxlen: 23
                          68.87.16.0/22 maxlen: 22
                          68.87.24.0/24 maxlen: 24
                          68.87.26.0/23 maxlen: 23
                          68.87.28.0/22 maxlen: 22
                          68.87.32.0/20 maxlen: 20
                          68.87.96.0/20 maxlen: 20
                          69.137.133.0/24 maxlen: 24
                          69.139.191.0/24 maxlen: 24
                          69.139.244.0/23 maxlen: 23
                          69.241.18.0/23 maxlen: 23
                          69.241.40.0/21 maxlen: 21
                          69.241.72.0/24 maxlen: 24
                          69.247.96.0/20 maxlen: 20
                          73.5.240.0/20 maxlen: 20
                          75.149.106.0/23 maxlen: 23
                          76.26.112.0/21 maxlen: 21
                          76.96.48.0/20 maxlen: 20
                          76.96.64.0/20 maxlen: 20
                          96.82.16.0/23 maxlen: 23
                          96.97.20.0/22 maxlen: 22
                          96.108.38.0/23 maxlen: 23
                          96.108.76.0/22 maxlen: 22
                          96.108.144.0/23 maxlen: 23
                          96.109.130.0/23 maxlen: 23
                          96.115.158.0/23 maxlen: 23
                          96.116.0.0/19 maxlen: 19
                          96.119.96.0/19 maxlen: 19
                          96.216.36.0/22 maxlen: 22
                          98.40.34.0/23 maxlen: 23
                          162.150.160.0/20 maxlen: 20
                          2001:558:e0::/44 maxlen: 44
                          2001:558:400::/44 maxlen: 44
                          2001:558:460::/44 maxlen: 44
                          2001:558:461::/48 maxlen: 48
                          2001:558:502a::/48 maxlen: 48
                          2001:558:6000::/48 maxlen: 48
                          2001:558:fc0b::/48 maxlen: 48
                          2001:558:fe14::/48 maxlen: 48
                          2001:558:fee7::/48 maxlen: 48
                          2001:558:ff00::/40 maxlen: 40
                          2601:a40::/26 maxlen: 26
                          2601:a40:202::/48 maxlen: 48
                          2601:a40:600::/40 maxlen: 40
                          2601:a40:700::/40 maxlen: 40
                          2603:2a40::/26 maxlen: 26
                          2603:2a40:5::/48 maxlen: 48
                          2603:2a40:600::/40 maxlen: 40
                          2603:3019::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:39:16:72:30:f9:d1:df:42:c5:74:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 18 02:00:31 2025 GMT
            Not After : Mar 18 01:00:31 2026 GMT
        Subject: CN=23ba8a40-ca33-4f1f-9959-001848c2e8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:75:9c:d5:19:90:fe:4b:fc:e5:09:79:b6:
                    da:06:4f:3c:72:a7:65:71:7f:a8:79:02:b9:2b:cc:
                    18:34:35:ad:fd:60:0b:e2:ce:3e:78:76:2b:0c:d0:
                    6c:1e:f0:d9:e1:07:a3:79:a4:42:9e:c5:ba:0f:89:
                    e7:9a:06:89:e0:c6:f8:e8:23:d9:8b:c2:d7:0f:0c:
                    86:9f:87:a1:23:a8:0e:70:db:87:15:07:9f:dd:df:
                    ac:a0:a8:83:02:2d:b2:d7:43:c0:8c:c8:ae:1f:12:
                    42:15:c6:33:2c:32:ce:da:ec:b9:55:38:a4:12:f5:
                    91:b0:0b:bb:41:6e:07:cc:f6:20:12:b4:89:1a:05:
                    11:ce:54:3a:51:a0:7c:55:f2:a8:9c:ce:73:92:06:
                    86:e5:52:95:c3:c1:44:ef:a1:29:89:4c:e8:e4:73:
                    12:22:a6:fa:47:48:9a:44:a5:0f:80:d4:5f:c9:36:
                    d7:47:19:9b:83:b9:3e:21:02:cf:db:f3:8a:9a:73:
                    87:25:82:1a:45:47:7c:c7:00:e8:d6:82:2e:67:c4:
                    c9:15:1f:cb:a6:40:6c:e9:0c:eb:bc:19:e1:59:91:
                    81:8e:f8:2b:84:b0:81:22:f3:27:58:04:69:a1:89:
                    3e:3a:9a:83:b9:f6:6f:28:c4:88:12:40:20:77:80:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:F7:CE:0E:5B:D8:A8:70:3C:38:ED:DD:AC:C3:EE:B9:C8:90:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.160.0/19
                  65.97.0.0/19
                  67.174.80.0/20
                  68.81.10.0/23
                  68.85.136.0/23
                  68.85.215.0/24
                  68.86.134.0/23
                  68.86.228.0/23
                  68.87.16.0/22
                  68.87.24.0/24
                  68.87.26.0-68.87.47.255
                  68.87.96.0/20
                  69.137.133.0/24
                  69.139.191.0/24
                  69.139.244.0/23
                  69.241.18.0/23
                  69.241.40.0/21
                  69.241.72.0/24
                  69.247.96.0/20
                  73.5.240.0/20
                  75.149.106.0/23
                  76.26.112.0/21
                  76.96.48.0-76.96.79.255
                  96.82.16.0/23
                  96.97.20.0/22
                  96.108.38.0/23
                  96.108.76.0/22
                  96.108.144.0/23
                  96.109.130.0/23
                  96.115.158.0/23
                  96.116.0.0/19
                  96.119.96.0/19
                  96.216.36.0/22
                  98.40.34.0/23
                  162.150.160.0/20
                IPv6:
                  2001:558:e0::/44
                  2001:558:400::/44
                  2001:558:460::/44
                  2001:558:502a::/48
                  2001:558:6000::/48
                  2001:558:fc0b::/48
                  2001:558:fe14::/48
                  2001:558:fee7::/48
                  2001:558:ff00::/40
                  2601:a40::/26
                  2603:2a40::/26
                  2603:3019::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b4:93:44:2b:e4:37:0e:44:13:da:a6:9e:ce:26:39:2d:0b:
         8a:92:e7:ed:e6:98:99:7a:25:64:cf:49:b5:43:10:93:cb:89:
         66:24:a3:6b:93:e7:46:9f:03:aa:e0:70:aa:ac:68:16:ea:34:
         ac:ed:ec:ca:6c:1b:77:67:45:1b:f8:c1:3f:c9:cd:f7:ab:75:
         11:5b:21:19:85:5d:88:53:fa:62:bd:59:83:e2:c2:2c:5e:2b:
         9e:42:82:84:7c:ec:f3:4a:4e:8f:7d:72:34:55:68:70:38:e2:
         63:da:dc:23:9d:3f:19:71:48:e1:09:82:a2:41:af:17:7e:fb:
         c9:d9:11:3f:35:df:10:ac:31:78:33:27:cc:79:7f:ca:64:81:
         19:64:e5:fd:c8:81:5c:6f:a6:4e:cc:11:1f:ee:fd:39:22:97:
         e4:44:09:31:f2:ac:17:4c:19:5f:c5:65:0d:8d:86:36:34:d6:
         bf:73:89:73:1c:2c:a4:62:82:20:56:fc:ce:a4:b0:27:12:64:
         18:8b:0c:21:d0:29:fe:e3:9f:2e:c4:c9:d0:01:42:ea:ac:ff:
         1d:36:96:a2:67:5e:80:22:1e:a1:2b:d1:f0:45:bf:71:f0:45:
         c6:d8:d6:ed:a6:9c:0d:b9:ba:06:6c:2b:1b:a5:16:15:6f:ae:
         ce:94:f7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 22:40:49 2025 by rpki-client