This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa
File:                     71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa (raw, json)
Hash identifier:          C/+dl0Mo5iS6qybs/r4iU6Vy/U2FeUXbFikLuR8THW4=
Subject key identifier:   B3:8D:10:0D:25:2C:6D:00:80:0F:CC:69:61:77:5C:9F:57:0F:0B:3A
Certificate issuer:       /CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7
Certificate serial:       010D0C9F4328584C42DBF00A4E02EE594D02A180
Authority key identifier: 89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     23097
IP address blocks:        74.80.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:db:f0:0a:4e:02:ee:59:4d:02:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=46a05278-ace3-45e8-8aa0-dc7473deb714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:04:83:f5:ac:3d:13:5e:41:90:85:76:0f:
                    dc:9e:78:d6:de:3a:be:94:4c:9f:d6:d3:cf:e9:0c:
                    73:30:ff:ba:0f:b1:47:d2:f7:26:6e:05:d3:00:b6:
                    f6:04:6e:dc:25:04:f7:78:16:71:04:21:d9:8c:b3:
                    5a:94:60:b1:77:54:87:61:dc:10:87:d4:03:76:ee:
                    fb:d1:7a:4e:54:7e:75:6e:35:08:e4:f2:53:25:72:
                    d3:cd:4c:ce:03:9c:f9:e4:96:55:53:50:4a:94:d5:
                    f2:0b:93:32:5c:57:01:2d:fd:57:67:a2:1e:46:c3:
                    a6:00:d6:55:08:52:c0:54:51:5c:24:c7:41:82:39:
                    78:f9:a5:c6:00:24:59:f6:18:b4:d6:58:68:23:20:
                    a1:c5:91:d8:05:5c:32:6e:ef:bf:47:a4:90:8c:3f:
                    7e:49:70:3b:be:7d:da:17:9d:69:31:b2:bc:f4:de:
                    d4:30:c5:40:47:4a:a6:6e:d9:04:65:b3:d6:a3:35:
                    02:55:7e:b6:67:dc:d0:72:5c:b6:b3:4f:c7:e0:53:
                    ed:bc:f9:89:e4:93:9b:60:db:0c:b2:16:ff:de:6a:
                    60:0d:29:42:9a:27:f9:d9:10:69:23:06:ea:97:53:
                    c5:60:b3:d6:fb:30:d8:84:ce:85:d3:c8:88:17:18:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8D:10:0D:25:2C:6D:00:80:0F:CC:69:61:77:5C:9F:57:0F:0B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl

            X509v3 Authority Key Identifier:
                keyid:89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:59:0c:63:82:7e:4a:7e:6d:b4:7c:c6:30:1a:1f:b8:06:ba:
         e8:f2:44:1f:36:23:60:11:66:67:f4:6d:7c:1f:55:54:8d:27:
         ba:9b:04:e2:59:6d:63:b0:e0:27:1c:f4:6f:af:4f:9a:a1:29:
         13:9b:82:a3:02:60:10:a0:22:34:d9:65:bf:9a:4d:6a:24:e2:
         51:73:f2:7b:af:e9:69:8d:f8:b0:87:dd:65:32:34:b4:10:f1:
         ac:18:2e:eb:03:74:d6:33:71:6d:d5:db:a9:c1:da:cb:bb:35:
         b1:0f:30:a6:a3:18:63:60:96:a6:43:2a:cc:9d:6d:62:e4:fb:
         46:70:e6:5a:b0:58:37:83:dc:1d:ca:1a:93:91:66:a5:be:70:
         68:89:9b:e7:ee:a4:6f:0b:cf:77:14:6b:46:8c:a0:d2:30:28:
         8a:9d:51:76:86:46:59:ad:6c:40:57:4a:f9:0d:ea:ff:b9:58:
         1c:89:08:f5:a0:65:10:2a:71:14:e3:d3:03:05:c3:ea:9d:44:
         96:77:c8:a2:90:13:30:28:78:a2:cd:bd:ca:f6:24:a5:64:da:
         95:31:e5:89:e7:be:fb:69:52:b2:f1:0c:30:12:a2:8b:b3:9e:
         97:f2:f0:19:5a:10:e8:e3:b1:50:ab:bd:2f:ff:f1:e1:52:73:
         30:2c:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:15:26 2025 by rpki-client