This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa
File:                     cf6479c8-89c9-3878-b98f-958d98676384.roa (raw, json)
Hash identifier:          Vj/Xk6niw5y8r0svtAL5ZgooIIZOniZd8YW5If07U+o=
Subject key identifier:   AD:FF:55:1E:7D:DB:62:30:FD:48:B0:1A:CC:3A:D8:76:D2:01:4F:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C1E916ED0D53EA4FF47FCB1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa
Signing time:             Mon 08 Dec 2025 14:00:38 +0000
ROA not before:           Mon 08 Dec 2025 14:00:38 +0000
ROA not after:            Sun 08 Mar 2026 13:00:38 +0000
asID:                     33489
IP address blocks:        68.86.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1e:91:6e:d0:d5:3e:a4:ff:47:fc:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  8 14:00:38 2025 GMT
            Not After : Mar  8 13:00:38 2026 GMT
        Subject: CN=ea4a470a-8ddf-465f-ba03-20dfaec2ea20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:43:fa:ae:75:1b:f8:58:1c:1f:ad:1f:a8:52:
                    1c:4c:db:78:07:ed:4d:fc:30:4e:80:82:59:7e:35:
                    46:4e:8a:f2:40:de:f8:8c:4f:85:92:2a:77:dd:0d:
                    71:fd:4f:b5:55:a4:99:71:40:70:f6:43:8c:c6:0d:
                    f6:99:ca:ca:cd:19:b8:d2:de:1c:3b:e0:a3:11:06:
                    74:27:fd:7d:3a:4e:96:9d:23:53:b8:97:c2:cb:6e:
                    f5:3e:8a:8d:5f:e5:06:a0:27:99:63:79:f8:f3:eb:
                    d8:a0:69:b9:5e:4f:8a:a0:52:97:a1:35:4b:fa:8c:
                    00:b4:0c:32:3d:f3:09:85:ba:fb:ff:04:42:4b:3a:
                    da:b0:9a:e7:85:9f:66:ff:03:fa:88:77:fd:95:61:
                    ef:d6:0b:be:d3:92:a1:11:f1:9a:90:83:6c:4b:36:
                    62:29:ae:09:08:0c:1c:06:38:ac:06:8d:35:25:e8:
                    10:c1:54:de:8f:b0:38:a6:53:25:fa:f2:91:c3:dc:
                    7f:9c:83:49:a8:0a:e5:d7:fb:b3:04:19:f4:64:fc:
                    da:48:b1:9f:72:c0:c6:dd:9a:bf:93:75:09:a0:ff:
                    c1:7e:c3:ab:38:d1:33:26:66:8c:82:0d:8e:35:66:
                    5d:19:7d:ae:18:2c:f4:78:68:75:86:9c:8f:3b:91:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FF:55:1E:7D:DB:62:30:FD:48:B0:1A:CC:3A:D8:76:D2:01:4F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:0b:73:4b:e6:9c:aa:63:04:85:68:67:a8:39:71:7b:c5:01:
         6e:de:ea:0a:46:43:01:58:d9:36:41:a4:59:af:3b:57:98:0f:
         b5:27:84:23:39:7f:20:4a:d9:5a:5a:97:7d:2a:9f:c3:38:07:
         3a:c2:f4:08:2d:a3:7a:b4:cc:2c:e9:ad:66:1a:a0:d0:03:03:
         5a:6f:2e:23:26:b5:84:b9:6b:32:34:b1:1e:31:73:3d:f8:bb:
         3e:1a:79:63:85:e3:78:85:13:a6:0d:f0:0b:1a:0d:05:69:31:
         9d:75:56:5f:99:89:28:ca:76:75:d3:aa:f6:15:d2:d2:2a:56:
         5b:7f:e1:23:00:4c:6a:ca:b6:7c:6d:0d:fc:dd:e7:05:33:14:
         6b:70:b9:2d:a6:af:cf:8c:b0:53:c9:cc:89:0d:05:46:7d:59:
         bc:de:d1:13:ed:db:0c:e9:fe:b3:84:f9:14:57:ee:7f:c0:bf:
         1d:50:94:5a:40:bc:61:c5:22:93:cf:21:90:65:f7:6d:13:c6:
         52:ad:de:85:0d:6a:96:b4:79:20:ad:93:dc:22:3d:63:bd:d1:
         41:34:0b:fb:7b:81:cc:3f:f9:5f:cb:3a:49:1b:e0:9d:57:f1:
         45:b4:94:4c:52:8f:9c:4d:f9:37:91:85:b0:04:49:51:14:6c:
         f8:72:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:23:11 2025 by rpki-client