This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa
File:                     df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa (raw, json)
Hash identifier:          KF6qjh5WfSfMcHQyTfCFSmjORLq2MB1jhbU6RmAbaXo=
Subject key identifier:   11:FE:33:EA:40:EB:14:C8:C1:55:C1:3A:B7:2E:B1:E1:6D:2E:C6:E5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584C33812502CB55DB82F41075E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa
Signing time:             Tue 16 Dec 2025 02:00:31 +0000
ROA not before:           Tue 16 Dec 2025 02:00:31 +0000
ROA not after:            Mon 16 Mar 2026 01:00:31 +0000
asID:                     209854
IP address blocks:        166.88.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:33:81:25:02:cb:55:db:82:f4:10:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 16 02:00:31 2025 GMT
            Not After : Mar 16 01:00:31 2026 GMT
        Subject: CN=255c0bcb-bcdb-4d35-9d5e-f409e1e0cb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:5a:f9:a4:7e:78:d1:b7:4f:b1:88:13:70:
                    49:5e:eb:3a:a6:16:65:a7:9e:e6:1a:b6:a8:e6:e6:
                    c3:03:d2:3b:e5:80:a0:c1:ef:23:fc:b2:71:52:3c:
                    be:75:d2:62:3c:c0:61:a5:22:4b:fa:f0:62:8d:76:
                    d8:a0:a3:7d:4e:87:4b:2b:a8:ed:ae:2e:94:e1:0d:
                    cc:a4:54:c4:a4:d8:81:92:96:9e:cf:2e:a6:84:25:
                    bc:15:2e:e1:31:11:2b:68:26:51:a6:43:44:6b:96:
                    ab:e8:c3:89:7f:a5:82:53:42:64:65:00:5c:e8:25:
                    b9:8c:e1:f2:0b:0a:d3:e6:5f:e3:77:02:24:31:24:
                    d7:33:5c:6a:6a:86:ab:f0:c0:60:f4:44:34:2f:3a:
                    72:90:1b:8e:a6:9f:d8:e3:61:86:21:49:72:98:66:
                    18:5b:f4:95:a9:2f:15:fc:7d:be:ce:af:fb:29:ea:
                    6d:eb:07:ec:c8:d3:ec:fa:81:9c:11:4c:fc:79:a3:
                    23:49:33:fe:b3:a3:b4:a9:59:8f:64:41:3f:8d:25:
                    88:3e:69:81:9d:50:55:22:0b:16:d8:c8:47:0a:9b:
                    92:cd:1e:93:0f:4f:9d:9b:47:ee:6f:75:fb:e2:d8:
                    2b:17:41:f1:a5:fd:96:d5:4d:f9:88:05:d8:4f:8f:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FE:33:EA:40:EB:14:C8:C1:55:C1:3A:B7:2E:B1:E1:6D:2E:C6:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d9:6a:9e:97:c5:da:99:1d:2f:07:93:5d:e5:e5:0b:ea:0f:
         58:09:96:f5:dc:10:95:f1:a2:42:88:a7:57:d7:46:ac:90:a7:
         8e:95:70:31:95:48:15:c1:b4:89:4d:ae:94:4a:1d:56:4c:6e:
         60:a3:ad:2d:c5:48:44:e0:bb:8d:4a:76:cd:cf:2b:42:d0:33:
         7b:4a:64:a7:db:49:31:77:fd:e2:71:e0:a7:b4:b1:4c:b5:c0:
         d2:23:a3:f7:71:a1:66:2b:9e:4f:95:0d:27:12:db:23:86:c6:
         6b:0a:cd:f6:60:0e:b7:92:b9:6e:b8:a4:48:78:ce:c8:7f:ac:
         38:9f:05:11:6f:6e:59:be:cd:2f:d4:df:cd:75:e6:6f:16:c4:
         09:99:a5:49:0f:d3:5b:b2:a4:4e:7a:96:d1:bc:53:ee:b8:e0:
         a9:dc:e8:82:24:6c:78:fc:25:1b:6d:8b:c3:e6:b1:ce:1b:44:
         d6:22:5f:ab:e5:c3:22:99:e8:91:84:7b:3f:a5:56:a4:8b:cf:
         1a:ed:6d:0f:cd:e8:1a:5e:94:db:24:36:c8:d7:3e:05:3a:29:
         4f:6d:21:5b:a2:ac:ef:eb:b5:eb:27:56:3b:70:4e:fb:2d:35:
         6f:da:c9:f6:f4:00:06:94:83:53:86:f4:c3:41:e3:4d:8f:48:
         18:02:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:27:21 2025 by rpki-client