This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
File:                     afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json)
Hash identifier:          8MsjzheUg2gztklDJikTggAYzjbPTKs4vJ3kDDeIg5M=
Subject key identifier:   6B:0C:3B:09:7F:62:1E:D2:C9:94:E0:D9:55:2D:1D:C4:4E:F0:9B:07
Certificate issuer:       /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Certificate serial:       010D0C9F4328584C417650BD038F0641DB916400
Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     14618
IP address blocks:        168.100.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:50:bd:03:8f:06:41:db:91:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=63c73cf8-7aae-497d-9cf8-942dd1167782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:7e:a4:dc:ef:cc:db:7e:e7:93:56:2d:79:
                    a9:d2:4b:b3:08:3d:4e:b6:22:37:84:bf:73:a5:97:
                    3b:15:06:7f:0c:bb:f9:5a:cd:fe:a3:7e:d7:af:8c:
                    40:e0:90:b7:d4:77:ae:5d:4c:d3:65:4d:d9:e7:aa:
                    01:28:1f:e5:cd:da:a1:cf:a4:f6:c3:06:14:e5:04:
                    13:6f:26:ff:d5:8e:49:b9:a5:32:47:11:fb:41:74:
                    2f:94:f3:ce:c0:f8:d0:84:d9:27:62:cd:86:93:29:
                    87:a8:c9:ec:87:24:62:2f:4c:6b:23:75:53:1d:95:
                    b6:98:fb:f2:ea:5a:60:ab:87:ac:42:20:1f:eb:50:
                    d2:20:4a:c0:74:fb:bc:6c:d5:ab:aa:d5:c9:6f:9e:
                    6f:26:a0:03:8b:e0:61:4d:ea:a0:8f:86:99:78:20:
                    9e:32:88:25:43:5f:e6:c8:91:a8:84:1c:55:15:db:
                    97:f8:b7:f7:7f:55:8f:c8:81:57:10:f4:d8:e8:be:
                    75:45:e2:2d:c9:15:48:c2:ee:84:2b:e9:62:68:6d:
                    2c:f9:7e:c0:93:82:a9:5b:d3:fa:ed:61:fe:20:90:
                    15:63:f7:90:75:1f:87:09:68:58:9d:b7:24:67:22:
                    7c:0e:69:55:5c:5a:cb:da:93:5d:f3:ef:f9:03:56:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0C:3B:09:7F:62:1E:D2:C9:94:E0:D9:55:2D:1D:C4:4E:F0:9B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl

            X509v3 Authority Key Identifier:
                keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:98:b2:df:a6:ec:6d:af:11:d9:75:04:48:ad:ed:fe:ea:
         a4:53:80:1d:77:88:37:53:43:1c:93:e9:59:0c:84:85:0b:f5:
         76:91:2b:64:2c:44:d8:f6:94:8c:9b:2b:e4:ca:f5:a7:6f:d0:
         72:b1:31:fc:62:ec:c5:23:ce:fa:10:e6:3b:07:67:23:39:6c:
         32:d2:ec:88:4b:95:f4:5d:b6:dd:ca:25:a3:61:c0:df:0d:de:
         20:61:61:bd:2d:64:09:e7:d4:e1:25:91:1c:69:6f:81:96:39:
         48:a6:21:ae:49:16:ee:fe:96:5a:77:75:a0:e5:8a:d0:71:20:
         d3:65:e3:47:03:14:5a:74:31:1c:9a:7f:32:dc:f0:fb:d3:d2:
         d1:06:8c:26:54:35:8c:28:50:80:61:26:ff:78:a7:04:98:49:
         60:bd:9b:ad:99:cd:4e:8b:0d:c2:02:e6:1a:6f:98:07:dc:2e:
         29:fa:4a:a1:73:bd:87:2e:0f:4a:2b:93:64:5c:ba:53:9c:84:
         3a:ce:7a:b3:bc:37:37:30:08:76:1d:32:54:ef:43:65:e1:93:
         02:c9:c3:a8:c8:d5:e6:fc:34:35:78:65:4d:a5:82:bf:36:71:
         8f:54:b1:7f:fe:2e:76:2b:3b:3c:81:2e:bf:dc:fd:6c:61:ab:
         bd:88:75:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlC9A48GQduRZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc2NWUxMzctZTBjZC00NTc0LThlNTctN2NmODdjZmVj
OWRlMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk
NjNjNzNjZjgtN2FhZS00OTdkLTljZjgtOTQyZGQxMTY3NzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc5+pNzvzNt+55NWLXmp0kuzCD1OtiI3hL9z
pZc7FQZ/DLv5Ws3+o37Xr4xA4JC31HeuXUzTZU3Z56oBKB/lzdqhz6T2wwYU5QQT
byb/1Y5JuaUyRxH7QXQvlPPOwPjQhNknYs2GkymHqMnshyRiL0xrI3VTHZW2mPvy
6lpgq4esQiAf61DSIErAdPu8bNWrqtXJb55vJqADi+BhTeqgj4aZeCCeMoglQ1/m
yJGohBxVFduX+Lf3f1WPyIFXEPTY6L51ReItyRVIwu6EK+liaG0s+X7Ak4KpW9P6
7WH+IJAVY/eQdR+HCWhYnbckZyJ8DmlVXFrL2pNd8+/5A1b9BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsMOwl/Yh7SyZTg2VUtHcRO8JsHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1
ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4N2NmZWM5ZGUvYWZlYzQ5NTgtZjkwYy0z
MjRkLTgzNjUtMWIwYzAyYjgzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc2NWUxMzctZTBjZC00NTc0LThl
NTctN2NmODdjZmVjOWRlLzg3NjVlMTM3LWUwY2QtNDU3NC04ZTU3LTdjZjg3Y2Zl
YzlkZS5jcmwwHwYDVR0jBBgwFoAUARLXI6RxkM4q4G4Zf5FshAvr6M8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4
N2NmZWM5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk/mLLfpuxtrxHZdQRIre3+6qRTgB13iDdTQxyT6VkMhIUL9XaRK2Qs
RNj2lIybK+TK9adv0HKxMfxi7MUjzvoQ5jsHZyM5bDLS7IhLlfRdtt3KJaNhwN8N
3iBhYb0tZAnn1OElkRxpb4GWOUimIa5JFu7+llp3daDlitBxINNl40cDFFp0MRya
fzLc8PvT0tEGjCZUNYwoUIBhJv94pwSYSWC9m62ZzU6LDcIC5hpvmAfcLin6SqFz
vYcuD0ork2RculOchDrOerO8NzcwCHYdMlTvQ2XhkwLJw6jI1eb8NDV4ZU2lgr82
cY9UsX/+LnYrOzyBLr/c/Wxhq72IdXI=
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:20:44 2025 by rpki-client