This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa
File:                     3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa (raw, json)
Hash identifier:          SJl2d/i20Kj5Gtl/e9HE0/18N0gHSuVuzVgHpWdXR8Q=
Subject key identifier:   8F:BE:01:FC:AB:58:28:46:31:FD:03:AB:14:2F:FA:70:F6:F4:CD:96
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584C2DEBA1855EFE64B683654880
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa
Signing time:             Sun 14 Dec 2025 02:00:31 +0000
ROA not before:           Sun 14 Dec 2025 02:00:31 +0000
ROA not after:            Sat 14 Mar 2026 01:00:31 +0000
asID:                     21840
IP address blocks:        65.87.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2d:eb:a1:85:5e:fe:64:b6:83:65:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Dec 14 02:00:31 2025 GMT
            Not After : Mar 14 01:00:31 2026 GMT
        Subject: CN=3fa94e47-92b3-44c7-83ec-77c684e46d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:eb:f9:cf:ee:2b:a1:d1:2f:f7:08:5f:90:
                    c5:7a:9b:0b:51:3e:ab:79:76:46:0d:53:57:fc:c2:
                    ca:6c:f0:78:af:1b:0c:cf:02:05:ae:a1:4a:c9:a1:
                    d3:1a:50:4d:e6:36:1a:33:3a:a9:d2:b3:fe:0a:65:
                    d0:b9:5e:bc:29:68:a1:ec:9c:00:19:50:5e:fb:e2:
                    64:a2:05:57:7e:80:cd:c4:3e:d5:a8:2c:43:69:3e:
                    b0:d9:34:f7:e8:d6:86:60:75:a8:79:0f:d6:3f:7e:
                    77:19:be:1f:de:52:22:5d:f5:a3:a4:f1:8f:3e:9e:
                    d5:3c:85:7f:2c:ec:70:9b:3b:6f:a5:9c:ea:a6:6d:
                    0a:9e:01:e5:c3:db:30:b4:d8:dd:40:86:07:8e:5c:
                    4c:30:a9:7a:4d:e9:93:65:22:88:6d:22:a6:f0:14:
                    de:53:7a:14:53:5e:02:0f:bc:cf:98:71:90:4b:ec:
                    5e:64:b5:37:82:09:89:72:8e:dc:33:fa:19:f4:f6:
                    5b:54:29:d1:7e:ba:cb:c2:6b:a3:41:75:f6:5d:79:
                    ab:74:dd:29:1c:a9:ae:de:48:e9:92:90:d8:3a:ae:
                    ab:30:4b:ef:18:84:42:e4:b6:cb:f2:b8:33:6e:d2:
                    d0:f5:5f:d1:61:41:d2:1e:c7:45:6e:7e:60:b1:a0:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:01:FC:AB:58:28:46:31:FD:03:AB:14:2F:FA:70:F6:F4:CD:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:2d:75:b3:83:a4:41:8c:01:ed:c7:62:81:6e:5a:99:db:
         94:ca:66:09:2a:f7:25:a6:ce:6a:ff:6e:34:79:c8:8f:08:57:
         31:85:76:ce:27:49:55:0d:38:d4:69:a0:4c:65:a4:c8:d4:d5:
         82:74:57:69:ac:c4:6f:d2:97:5b:cb:6f:dc:19:5f:5d:2d:a3:
         2c:53:b1:35:87:0d:49:b1:30:4f:c6:60:5c:e6:ff:63:07:c5:
         9a:f7:b5:06:a3:6e:92:8b:fb:88:b4:34:43:c7:4e:93:9a:bd:
         c2:2c:e7:8a:26:18:49:e4:05:91:21:33:35:49:e7:e5:71:9e:
         d7:69:ea:55:f6:5f:93:80:1c:3f:eb:c3:d1:cc:ef:ed:ff:a3:
         8a:8c:c9:92:ca:e0:29:db:bf:e1:3b:89:1a:c0:70:c2:bc:5d:
         b4:5e:d7:ba:c1:58:54:e6:f5:e6:4e:e8:9f:24:05:d7:de:e7:
         dc:fc:ec:ee:10:8c:5c:9b:43:70:f2:ff:2e:af:a2:e7:c6:a7:
         07:e3:d1:13:95:63:4c:52:32:a6:15:d3:c7:89:08:70:16:a8:
         3b:60:8c:5f:93:d1:c9:93:19:28:19:15:73:08:ee:43:46:6f:
         ec:4f:2e:a1:e5:dd:42:a2:04:59:77:35:6a:0a:7a:9d:55:53:
         fc:5d:37:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt66GFXv5ktoNlSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk
NWYzMB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk
M2ZhOTRlNDctOTJiMy00NGM3LTgzZWMtNzdjNjg0ZTQ2ZDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxzr+c/uK6HRL/cIX5DFepsLUT6reXZGDVNX
/MLKbPB4rxsMzwIFrqFKyaHTGlBN5jYaMzqp0rP+CmXQuV68KWih7JwAGVBe++Jk
ogVXfoDNxD7VqCxDaT6w2TT36NaGYHWoeQ/WP353Gb4f3lIiXfWjpPGPPp7VPIV/
LOxwmztvpZzqpm0KngHlw9swtNjdQIYHjlxMMKl6TemTZSKIbSKm8BTeU3oUU14C
D7zPmHGQS+xeZLU3ggmJco7cM/oZ9PZbVCnRfrrLwmujQXX2XXmrdN0pHKmu3kjp
kpDYOq6rMEvvGIRC5LbL8rgzbtLQ9V/RYUHSHsdFbn5gsaC8hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI++AfyrWChGMf0DqxQv+nD29M2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl
Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvM2Q0OGU1NzQtMmFkNi0z
ZWM5LTlmYTUtZTg2OWExODUwMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky
ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk
M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH98LXWzg6RBjAHtx2KBblqZ25TKZgkq9yWmzmr/bjR5yI8IVzGFds4n
SVUNONRpoExlpMjU1YJ0V2msxG/Sl1vLb9wZX10toyxTsTWHDUmxME/GYFzm/2MH
xZr3tQajbpKL+4i0NEPHTpOavcIs54omGEnkBZEhMzVJ5+Vxntdp6lX2X5OAHD/r
w9HM7+3/o4qMyZLK4Cnbv+E7iRrAcMK8XbRe17rBWFTm9eZO6J8kBdfe59z87O4Q
jFybQ3Dy/y6voufGpwfj0ROVY0xSMqYV08eJCHAWqDtgjF+T0cmTGSgZFXMI7kNG
b+xPLqHl3UKiBFl3NWoKep1VU/xdN+I=
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:45:40 2025 by rpki-client