This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/bce4f9ab-f7dc-3e8c-9354-fe07f4cf7dde.roa
File:                     bce4f9ab-f7dc-3e8c-9354-fe07f4cf7dde.roa (raw, json)
Hash identifier:          am+uFrxsHrndVh+QDiNygykeB04F5uYTld+Mt5N7P/4=
Subject key identifier:   16:9A:E2:94:73:C4:1B:BD:6C:17:11:A4:30:F4:F3:CC:F7:4B:32:8E
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584C382AB9162DCF9A205BC20600
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/bce4f9ab-f7dc-3e8c-9354-fe07f4cf7dde.roa
Signing time:             Wed 17 Dec 2025 18:05:59 +0000
ROA not before:           Wed 17 Dec 2025 18:05:59 +0000
ROA not after:            Tue 17 Mar 2026 17:05:59 +0000
asID:                     214025
IP address blocks:        65.87.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:38:2a:b9:16:2d:cf:9a:20:5b:c2:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Dec 17 18:05:59 2025 GMT
            Not After : Mar 17 17:05:59 2026 GMT
        Subject: CN=1ca23a9e-7c5a-45ec-889e-6590d0d70995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:cf:ec:54:d0:53:06:a3:a8:a2:21:2c:2d:
                    f2:06:50:40:3a:49:3c:5e:8d:73:aa:e8:d0:98:e4:
                    65:c3:05:eb:68:78:cb:c4:b7:48:4b:2e:2b:9b:ac:
                    60:3f:32:8b:d8:5d:d8:c6:1f:f0:0d:18:61:5b:7c:
                    8d:f4:fc:55:62:28:1d:7f:b9:66:da:bb:23:e1:b9:
                    ac:fa:05:a3:d5:67:5d:69:e0:04:24:e7:5c:c2:67:
                    03:20:47:09:45:e6:30:45:66:df:ca:39:65:51:d2:
                    f3:0f:f8:c0:7e:bb:86:f6:c0:4d:24:1f:98:46:3b:
                    69:5f:2e:b0:8b:00:c5:42:15:9c:e2:b5:07:46:0b:
                    34:fc:11:49:e3:87:9f:48:ef:64:fb:48:fc:df:ba:
                    79:d8:d8:ae:fa:1d:1c:b7:cf:cb:f4:9c:67:c2:f7:
                    bc:c1:d9:0a:ff:eb:eb:e7:37:51:dc:18:b6:0c:57:
                    5d:f0:9c:dd:7f:05:10:4c:0a:40:33:38:e6:07:89:
                    ca:4c:47:2a:74:5b:74:76:6a:89:0d:c4:f8:3f:06:
                    66:e4:74:b7:34:ab:91:86:5e:cb:72:ad:8e:1a:d1:
                    bb:d1:a1:ff:0e:d9:a5:92:d6:28:bf:fb:63:a1:90:
                    f4:af:d0:0e:81:42:76:28:86:d6:e6:c0:c0:65:6a:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:E2:94:73:C4:1B:BD:6C:17:11:A4:30:F4:F3:CC:F7:4B:32:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/bce4f9ab-f7dc-3e8c-9354-fe07f4cf7dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:50:57:d5:a0:ec:d9:a2:7b:eb:43:27:05:b9:29:58:ea:3f:
         57:d6:25:72:15:a4:f7:0f:08:9c:59:09:89:6a:c1:8a:64:53:
         5f:5a:d5:2a:75:bc:14:51:f2:ce:1b:a2:8a:d2:9d:91:dc:9d:
         0b:f4:81:5d:b3:32:90:bb:fc:78:95:52:e2:56:4b:2e:01:42:
         53:5f:76:dc:4b:b1:08:2a:51:bc:b5:cf:ee:81:15:dd:2c:57:
         cf:f0:51:3f:03:33:e1:3a:54:c9:d3:2a:ef:cb:52:7f:dc:7f:
         61:ff:c4:d4:1f:03:4f:67:72:5e:7a:ec:a0:c9:87:5f:ed:5a:
         91:bc:37:92:dc:b2:31:ac:26:b0:26:54:c4:7d:59:b3:a3:92:
         1a:9d:82:99:55:59:45:da:95:27:49:75:93:85:44:a9:9f:0b:
         31:3f:f7:02:20:e5:3f:2d:73:da:7c:40:c7:7b:df:23:b7:62:
         43:d0:1e:1d:0a:43:ca:86:24:71:60:c1:bd:0f:63:8d:89:39:
         fc:b6:36:0a:97:d2:ec:38:4c:7a:e8:06:b8:3c:a0:80:ad:4c:
         a6:32:5d:2b:71:17:f3:65:cd:c5:0c:57:cd:79:1d:9d:ed:a3:
         a2:6e:f3:6b:33:3c:a7:5a:4e:cf:03:89:17:50:71:94:51:00:
         45:05:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:43 2025 by rpki-client