This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa
File:                     826a4506-faff-3fc0-834f-c2447661ac44.roa (raw, json)
Hash identifier:          W0qeTRnWXXEUumvcLsYF0cHlc69vNSyBylgf+Xihch0=
Subject key identifier:   9E:A4:58:6A:E4:D8:76:35:3E:2A:3D:B0:12:AE:80:55:4D:A0:AA:F3
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584C391659D52C1A78742B0B6820
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa
Signing time:             Thu 18 Dec 2025 02:00:31 +0000
ROA not before:           Thu 18 Dec 2025 02:00:31 +0000
ROA not after:            Wed 18 Mar 2026 01:00:31 +0000
asID:                     5065
IP address blocks:        65.87.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:39:16:59:d5:2c:1a:78:74:2b:0b:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Dec 18 02:00:31 2025 GMT
            Not After : Mar 18 01:00:31 2026 GMT
        Subject: CN=f3e65a84-3dd0-4535-8e68-f6ec429c0118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:88:33:3a:26:e6:70:df:3e:2c:ca:cb:e9:
                    8c:a7:02:ba:7b:97:b1:68:a2:95:66:df:28:1d:e5:
                    6c:d9:e8:17:9b:85:91:cd:c6:5c:3b:2d:52:d9:6f:
                    62:6e:f4:35:1c:d4:e0:f6:b4:f9:a2:3e:6c:af:e7:
                    fe:c2:92:87:42:3d:bd:fd:8a:c0:46:07:e8:1c:d0:
                    11:07:a5:3d:5b:64:64:a5:6f:56:40:63:9e:e2:05:
                    3d:85:96:cb:43:4a:f2:f7:81:7b:e2:fd:66:49:ea:
                    2a:78:dc:da:3c:3d:c7:6d:76:4d:a5:ec:f0:7a:1b:
                    81:b6:34:d0:39:cd:3c:9b:1c:b1:dd:f9:62:ca:33:
                    39:82:d6:6e:c8:d1:0f:45:a9:59:4f:26:70:b1:10:
                    02:8f:03:07:52:48:3b:ee:f2:2c:d1:b8:f4:ed:49:
                    e1:82:5a:f8:b4:80:3e:67:33:b1:e7:9e:12:16:cc:
                    71:11:5c:54:8f:dc:42:77:65:80:30:cb:26:01:9c:
                    b6:ca:fd:86:24:9b:46:41:73:b2:fa:25:f2:86:31:
                    62:70:ad:c6:d9:df:69:f7:29:f5:f4:7a:df:c7:ef:
                    ed:11:41:e6:82:82:b3:e6:24:1d:45:3b:63:9c:81:
                    ca:f4:4b:e6:bc:7f:9e:55:50:96:20:a7:cc:fe:69:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:58:6A:E4:D8:76:35:3E:2A:3D:B0:12:AE:80:55:4D:A0:AA:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:45:6b:ca:7c:09:5b:85:ba:0b:b2:0e:ab:6f:97:39:e8:
         d3:95:c9:78:43:3e:21:f8:d1:f3:e1:fe:2e:af:92:f6:88:bd:
         5d:a4:f6:47:f2:d2:bb:e0:46:32:67:d2:36:c3:db:ea:d9:c2:
         7b:bb:68:7c:9c:74:c0:de:a2:5e:c4:62:0d:d4:a7:0e:05:57:
         76:b1:77:8e:b3:0a:8d:a9:40:d5:7c:ed:31:17:33:46:11:00:
         8f:2a:ac:c6:48:a9:58:58:55:b3:d7:6f:72:03:a4:a3:3d:f8:
         16:83:a6:a3:6a:6e:9d:ec:5b:d9:cc:a7:a8:4e:d1:0d:af:76:
         1b:9e:b0:c8:eb:de:60:88:0e:1b:1b:f2:3f:c4:16:8b:30:68:
         7f:d4:f6:5c:d4:fc:2e:65:6c:ab:d0:50:16:51:14:74:b7:58:
         40:e6:c9:9c:9e:6a:02:f4:af:93:4c:14:b1:b2:24:11:cf:51:
         71:6d:81:03:df:3d:a5:ba:0f:f3:b0:fa:34:a2:02:cb:18:e2:
         12:b2:82:6c:17:5c:59:54:b4:a2:76:a7:a5:6e:c6:1e:28:8c:
         3f:69:e7:3e:e0:11:02:d1:b6:97:b8:2c:ca:38:d4:6a:08:98:
         3c:4c:d8:01:b4:2d:ff:12:7f:0c:87:90:28:93:4c:0d:45:38:
         7d:92:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:56:07 2025 by rpki-client