This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa
File:                     ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa (raw, json)
Hash identifier:          L9dcssBgRcorlEzKLciNi26JMiBfEr4zebjxF97+DiA=
Subject key identifier:   09:06:36:A9:37:98:3E:B9:79:82:EB:01:D0:FB:AB:D9:1A:13:3F:F9
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584C2F510673A6408FFDA86E3D58
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa
Signing time:             Sun 14 Dec 2025 14:00:39 +0000
ROA not before:           Sun 14 Dec 2025 14:00:39 +0000
ROA not after:            Sat 14 Mar 2026 13:00:39 +0000
asID:                     396185
IP address blocks:        72.29.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2f:51:06:73:a6:40:8f:fd:a8:6e:3d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Dec 14 14:00:39 2025 GMT
            Not After : Mar 14 13:00:39 2026 GMT
        Subject: CN=06a67215-5f14-43bc-9504-9a85cb6d0c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:5d:0f:20:52:bb:e7:c9:03:2e:26:c1:17:
                    52:e9:b4:9b:1e:34:5c:f2:05:80:d7:0a:32:76:fd:
                    0c:b6:00:07:a5:eb:06:c2:53:fa:47:0d:ad:ac:d2:
                    f6:b7:75:13:c8:0d:5b:68:47:51:5c:05:99:93:74:
                    9c:11:14:6c:5a:30:6e:3d:a5:45:ae:dd:1a:c1:f8:
                    f8:7e:fb:c5:84:e3:65:81:f2:b4:68:35:83:44:0f:
                    38:20:de:08:ef:c3:0c:63:fe:62:08:2b:48:59:7a:
                    17:75:40:b1:db:fa:29:65:ef:76:0a:c2:a7:54:40:
                    1c:a5:54:d9:f6:45:90:45:07:91:c9:3c:e6:ad:3f:
                    99:46:8a:ff:a0:df:aa:69:a7:8e:1e:04:9d:61:6f:
                    db:02:e5:51:dc:c2:bf:e2:72:17:43:f0:e6:7a:16:
                    cc:c2:23:74:37:ed:4a:91:e4:be:24:ba:0e:23:d7:
                    6a:03:da:75:fc:30:32:14:ae:d5:de:3b:de:76:77:
                    4d:63:7d:ef:71:d9:1b:17:5c:52:1e:9b:2c:a0:ca:
                    0f:a9:ca:d9:d4:37:d3:c8:34:1d:2d:96:99:c8:83:
                    9f:9f:71:55:b7:aa:90:aa:eb:58:d6:e3:e5:bb:db:
                    74:87:8f:96:45:99:1e:2d:c2:04:22:d0:42:cb:d1:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:36:A9:37:98:3E:B9:79:82:EB:01:D0:FB:AB:D9:1A:13:3F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:7a:bb:d7:07:09:a0:38:8f:12:ab:fc:22:5f:8f:cd:44:
         26:9f:3a:e8:65:94:b1:f0:3d:69:42:4c:3e:9f:47:5c:ba:9e:
         d6:7b:bc:67:e4:57:71:5e:66:85:dd:3a:4f:29:ad:af:18:99:
         39:14:70:f3:c9:ee:ee:92:89:de:3f:2f:93:af:7d:79:6a:e8:
         0e:fa:40:a5:e4:16:ec:43:06:27:a7:aa:9d:c3:0c:3a:3c:d1:
         13:ba:a2:a9:15:da:95:0f:23:94:c9:63:99:02:c5:4f:9b:9e:
         14:ec:e2:71:5f:c4:60:a1:c8:b3:ce:24:20:a7:e0:9f:fe:3c:
         e3:16:5a:1b:02:44:5d:84:ca:14:84:ab:fe:5f:26:98:9a:37:
         83:0a:cb:d6:18:85:96:af:c3:b7:95:d4:0d:60:ae:4e:d4:95:
         bc:a6:11:da:4f:ce:8e:ce:c8:69:c9:93:ab:86:06:3e:0f:ea:
         13:d1:cd:22:1d:b1:4b:aa:36:17:e5:08:ad:54:19:14:be:22:
         0e:43:71:19:c4:ef:1a:37:a6:f3:92:c1:62:b8:61:b5:f1:cd:
         6e:54:ad:f3:d3:13:87:ff:10:44:0a:c8:fe:8d:df:57:1d:cd:
         ed:a1:71:f8:e6:3d:1f:e7:0d:f6:0f:f0:9a:60:15:a4:e2:c0:
         26:29:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:24:39 2025 by rpki-client