This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa
File:                     66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa (raw, json)
Hash identifier:          5GBIPEwgYeczlEDNzlezBaYmPpo3xnFRcNCz1oL0UEU=
Subject key identifier:   4E:1B:03:34:3C:A1:00:69:99:E5:2F:1B:96:AD:FC:E4:B6:B3:69:A7
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584C5666E2957FFCD57DD6009100
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa
Signing time:             Sun 28 Dec 2025 14:00:38 +0000
ROA not before:           Sun 28 Dec 2025 14:00:38 +0000
ROA not after:            Sat 28 Mar 2026 13:00:38 +0000
asID:                     140227
IP address blocks:        104.143.32.0/20 maxlen: 24
                          172.81.96.0/22 maxlen: 24
                          172.81.100.0/23 maxlen: 24
                          198.176.59.0/24 maxlen: 24
                          198.176.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:56:66:e2:95:7f:fc:d5:7d:d6:00:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Dec 28 14:00:38 2025 GMT
            Not After : Mar 28 13:00:38 2026 GMT
        Subject: CN=c33cb14b-20b1-44bb-82b7-fcfa010b3e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1d:53:da:3c:71:7f:9a:8e:ec:63:30:44:31:
                    89:a3:a9:a9:2f:1f:20:40:09:9e:16:c0:d8:25:11:
                    0b:ea:bc:1a:62:4d:55:1a:92:1a:c8:51:b9:c9:f2:
                    fe:99:6a:9b:74:51:42:3f:b3:ac:d3:f6:3a:32:72:
                    d6:1b:1e:eb:07:df:7d:37:4d:40:6b:5e:5b:f5:8d:
                    26:a8:1e:f6:90:58:72:38:f6:d8:58:79:1a:04:23:
                    e5:a6:c7:85:20:85:52:a8:82:a5:a2:04:56:23:ee:
                    df:72:ef:50:4d:3f:2b:98:41:ff:b4:91:21:2c:24:
                    f3:bb:4a:57:31:d9:5d:97:44:31:55:d2:04:0c:b5:
                    99:7b:15:e3:42:1c:8f:45:87:8b:1c:2b:cc:62:c1:
                    b9:3f:c6:5e:a7:6a:6c:ce:98:b0:92:a9:74:f9:80:
                    f7:fc:a2:93:a2:e1:0a:4b:95:15:f5:d8:77:b5:87:
                    dc:5c:d1:ae:48:ff:bf:c1:eb:f2:25:81:6b:d9:80:
                    7d:77:90:b3:b9:ce:6e:c4:d2:38:06:c4:d3:fb:49:
                    2f:b5:be:31:cb:7a:1b:a6:3d:35:40:b1:c5:b1:9b:
                    db:63:6c:f0:2a:83:58:92:b4:b1:a1:9e:0b:a8:7c:
                    71:d6:ae:63:e9:60:3f:a6:86:0c:e9:c1:50:25:18:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:03:34:3C:A1:00:69:99:E5:2F:1B:96:AD:FC:E4:B6:B3:69:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20
                  172.81.96.0-172.81.101.255
                  198.176.59.0-198.176.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:27:5e:a0:de:92:71:46:0a:5f:34:df:f2:dc:64:ef:0a:b1:
         a0:53:41:22:a0:41:c3:6d:f6:bc:eb:ca:b6:c8:29:7b:46:96:
         30:22:3a:8b:58:de:0e:56:65:77:94:5e:1d:1b:5e:28:39:1f:
         f5:0c:1c:f9:4d:89:d8:71:4d:3a:e7:05:1d:cf:9b:eb:ac:3a:
         b9:a9:86:4e:0d:a0:51:b4:a0:09:ee:f5:6b:1d:ad:5e:e4:c1:
         57:4a:7b:98:2b:3f:1c:c8:f8:87:76:d7:49:09:6e:3a:4b:dd:
         a8:94:c3:2e:df:c1:cd:2a:c5:e7:0f:12:cc:91:c1:d0:94:2d:
         be:0a:99:e8:42:05:b4:2e:ac:44:e8:d2:ac:99:ab:60:18:14:
         b0:61:f7:30:5d:04:69:e0:67:30:dd:a0:ba:1e:b8:00:45:e7:
         21:ca:9c:a1:a6:19:22:c7:89:62:2a:37:e6:ef:48:a8:e5:10:
         17:6b:32:cb:58:2c:db:49:a7:86:71:d0:a1:01:58:c8:d2:c1:
         60:4e:66:c2:9c:15:03:4d:33:32:e8:d6:ec:0b:30:c6:ff:15:
         02:e4:8e:6d:d0:77:ed:95:a6:d5:e9:89:9d:84:c3:fe:5f:a0:
         20:cb:2c:86:ca:4a:2b:f8:8c:7b:0f:2c:5f:59:b1:9f:19:8c:
         ac:e0:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 01:52:02 2025 by rpki-client